@mstar-harness/cli 3.2.5 → 3.3.0

package/dist/mstar-harness.js

@@ -4073,25 +4073,25 @@ import { randomUUID } from "node:crypto";
 import { basename, dirname, join, resolve } from "node:path";
 import { readFileSync as readFileSync2, statSync } from "node:fs";
 import { dirname as dirname2, isAbsolute, join as join2, relative, resolve as resolve2 } from "node:path";
-import { existsSync as existsSync2, mkdirSync as mkdirSync2, readdirSync, readFileSync as readFileSync3, realpathSync, statSync as statSync2 } from "node:fs";
+import { existsSync as existsSync5, mkdirSync as mkdirSync4, readdirSync as readdirSync4, readFileSync as readFileSync6, realpathSync as realpathSync2, statSync as statSync3, writeFileSync as writeFileSync3 } from "node:fs";
 import { execFileSync } from "node:child_process";
-import { basename as basename2, dirname as dirname3, isAbsolute as isAbsolute2, join as join3, relative as relative2, resolve as resolve3 } from "node:path";
-import { existsSync as existsSync3, readFileSync as readFileSync4, readdirSync as readdirSync2, realpathSync as realpathSync2 } from "node:fs";
-import { dirname as dirname5, join as join6, resolve as resolve5, sep } from "node:path";
-import { mkdirSync as mkdirSync3, rmdirSync, statSync as statSync3, unlinkSync as unlinkSync2, writeFileSync as writeFileSync2 } from "node:fs";
-import { dirname as dirname4, isAbsolute as isAbsolute3, join as join4, resolve as resolve4 } from "node:path";
+import { basename as basename2, dirname as dirname5, isAbsolute as isAbsolute3, join as join8, relative as relative2, resolve as resolve5 } from "node:path";
+import { existsSync as existsSync4, readFileSync as readFileSync5, readdirSync as readdirSync3 } from "node:fs";
+import { join as join7 } from "node:path";
+import { existsSync as existsSync2, readdirSync, readFileSync as readFileSync3 } from "node:fs";
+import { existsSync as existsSync3, readFileSync as readFileSync4, readdirSync as readdirSync2, realpathSync } from "node:fs";
+import { dirname as dirname4, join as join6, resolve as resolve4, sep } from "node:path";
+import { mkdirSync as mkdirSync2, rmdirSync, statSync as statSync2, unlinkSync as unlinkSync2, writeFileSync as writeFileSync2 } from "node:fs";
+import { dirname as dirname3, isAbsolute as isAbsolute2, join as join4, resolve as resolve3 } from "node:path";
 import { setTimeout as sleep } from "node:timers/promises";
 import { AsyncLocalStorage as AsyncLocalStorage2 } from "node:async_hooks";
 import { execFileSync as execFileSync2 } from "node:child_process";
-import { existsSync as existsSync4 } from "node:fs";
+import { existsSync as existsSync6 } from "node:fs";
 import { isAbsolute as isAbsolute4, resolve as resolve6 } from "node:path";
 import { execFileSync as execFileSync3 } from "node:child_process";
-import { mkdirSync as mkdirSync5, readdirSync as readdirSync3, readFileSync as readFileSync5, realpathSync as realpathSync3, statSync as statSync4, writeFileSync as writeFileSync3 } from "node:fs";
-import { basename as basename3, dirname as dirname6, isAbsolute as isAbsolute5, join as join7, resolve as resolve7 } from "node:path";
-import { existsSync as existsSync5, readdirSync as readdirSync4, readFileSync as readFileSync6 } from "node:fs";
-import { existsSync as existsSync6, readFileSync as readFileSync7, readdirSync as readdirSync5 } from "node:fs";
-import { join as join9 } from "node:path";
-import { existsSync as existsSync7, mkdirSync as mkdirSync7, readdirSync as readdirSync7, readFileSync as readFileSync9, rmdirSync as rmdirSync2, rmSync, writeFileSync as writeFileSync5 } from "node:fs";
+import { mkdirSync as mkdirSync5, readdirSync as readdirSync5, readFileSync as readFileSync7, realpathSync as realpathSync3, statSync as statSync4, writeFileSync as writeFileSync4 } from "node:fs";
+import { basename as basename3, dirname as dirname6, isAbsolute as isAbsolute5, join as join9, resolve as resolve7 } from "node:path";
+import { existsSync as existsSync7, mkdirSync as mkdirSync7, readdirSync as readdirSync7, readFileSync as readFileSync9, rmdirSync as rmdirSync2, rmSync, writeFileSync as writeFileSync6 } from "node:fs";
 import { basename as basename4, join as join11, resolve as resolve9, sep as sep3 } from "node:path";
 import { existsSync as existsSync8, readdirSync as readdirSync8, readFileSync as readFileSync10 } from "node:fs";
 import { basename as basename5, isAbsolute as isAbsolute7, join as join12, relative as relative4, resolve as resolve10, sep as sep4 } from "node:path";
@@ -4210,248 +4210,384 @@ function isAtOrBelow(dir, root) {
   const rel = relative(root, dir);
   return rel === "" || !rel.startsWith("..") && !isAbsolute(rel);
 }
-function resolveHarnessDir(startDir = process.cwd(), opts = {}) {
-  const start = resolve3(startDir);
-  const explicit = opts.harnessDir ?? process.env.MSTAR_HARNESS_DIR;
-  if (explicit)
-    return resolve3(start, explicit);
-  const boundary = resolve3(start, opts.workspaceRoot ?? defaultWorkspaceRoot(start));
-  const rc = loadMstarc(start, boundary);
-  if (rc !== null && rc.config.harnessDir)
-    return resolve3(rc.dir, rc.config.harnessDir);
-  let dir = start;
-  for (;; ) {
-    if (!isAtOrBelow2(dir, boundary))
-      return null;
-    for (const candidate of [join3(dir, ".mstar"), join3(dir, ".agents"), join3(dir, ".plans"), join3(dir, "plans")]) {
-      if (isDirectory(candidate))
-        return candidate;
-    }
-    if (dir === boundary)
-      return null;
-    const parent = dirname3(dir);
-    if (parent === dir)
-      return null;
-    dir = parent;
-  }
+var COMPASS_STATUSES = ["active", "locked", "completed"];
+var DATE_RE = /^\d{4}-\d{2}-\d{2}$/;
+var PLAN_STATUS_DONE = "Done";
+function typeName(value) {
+  if (value === null)
+    return "null";
+  if (Array.isArray(value))
+    return "array";
+  return typeof value;
 }
-function defaultWorkspaceRoot(startDir) {
-  try {
-    const cdup = execFileSync("git", ["rev-parse", "--show-cdup"], {
-      cwd: startDir,
-      encoding: "utf8",
-      stdio: ["ignore", "pipe", "ignore"]
-    }).trim();
-    if (!cdup)
-      return startDir;
-    let boundary = startDir;
-    for (const segment of cdup.split(/[\\/]/)) {
-      if (segment && segment !== ".")
-        boundary = dirname3(boundary);
+function validateCompassShape(doc) {
+  const issues = [];
+  const expectString = (key, opts = {}) => {
+    const value = doc[key];
+    if (typeof value !== "string") {
+      issues.push({ path: [key], message: `expected string, received ${typeName(value)}` });
+      return;
     }
-    return resolve3(boundary);
-  } catch {}
-  return startDir;
-}
-function isAtOrBelow2(dir, root) {
-  const rel = relative2(root, dir);
-  return rel === "" || !rel.startsWith("..") && !isAbsolute2(rel);
-}
-function mstarcDirOverride(harnessDir, key) {
-  const dir = resolve3(harnessDir);
-  const rc = loadMstarc(dir, dirname3(dir));
-  const declared = rc?.config[key];
-  return declared ? resolve3(rc.dir, declared) : null;
-}
-function resolveSpecsDir(harnessDir, opts = {}) {
-  const declared = mstarcDirOverride(harnessDir, "specsDir");
-  if (declared !== null) {
-    if (opts.create !== false)
-      mkdirSync2(declared, { recursive: true });
-    return declared;
-  }
-  const harness = resolve3(harnessDir);
-  const repoRoot = dirname3(harness);
-  const candidates = [
-    join3(harness, "specs"),
-    join3(repoRoot, "docs", "specs"),
-    join3(repoRoot, "specs"),
-    join3(harness, "designs"),
-    join3(repoRoot, "designs")
-  ];
-  for (const candidate of candidates) {
-    if (isDirectory(candidate) && hasFiles(candidate))
-      return candidate;
-  }
-  const fallback = join3(harness, "specs");
-  if (opts.create !== false)
-    mkdirSync2(fallback, { recursive: true });
-  return fallback;
-}
-function assertSafePathComponent(value, what) {
-  if (value === "" || value === "." || value === ".." || !/^[A-Za-z0-9._-]+$/.test(value)) {
-    throw new Error(`${what} must be a single safe path component ([A-Za-z0-9._-]+; not "", ".", "..", or containing "/" or "\\") \u2014 got ${JSON.stringify(value)}`);
-  }
-}
-function resolveSddDir(harnessDir, planId) {
-  assertSafePathComponent(planId, "planId");
-  const base = resolve3(harnessDir);
-  const declared = mstarcDirOverride(base, "sddDir");
-  const sddBase = declared !== null ? declared : join3(base, "sdd");
-  return join3(sddBase, planId);
-}
-function resolveHarnessSubdir(startDir, opts, key, fallback) {
-  const harness = resolveHarnessDir(startDir, opts);
-  if (harness === null) {
-    throw new Error(`harness dir not found from ${resolve3(startDir)} \u2014 cannot resolve the ${fallback} dir (run \`mstar init\`, pass opts.harnessDir, or set MSTAR_HARNESS_DIR)`);
+    if (opts.min !== undefined && value.length < opts.min) {
+      issues.push({ path: [key], message: `string must contain at least ${opts.min} character(s)` });
+      return;
+    }
+    if (opts.regex !== undefined && !opts.regex.test(value)) {
+      issues.push({ path: [key], message: `string must match ${opts.regex}` });
+    }
+  };
+  expectString("iteration_id", { min: 1 });
+  expectString("start_date", { regex: DATE_RE });
+  const status = doc.status;
+  if (typeof status !== "string" || !COMPASS_STATUSES.includes(status)) {
+    issues.push({
+      path: ["status"],
+      message: `expected one of ${COMPASS_STATUSES.map((s) => `'${s}'`).join(" | ")}, received ${typeName(status)}`
+    });
   }
-  const declared = mstarcDirOverride(harness, key);
-  return declared !== null ? declared : join3(resolve3(harness), fallback);
-}
-function resolveWorkflowDir(startDir = process.cwd(), opts = {}) {
-  return resolveHarnessSubdir(startDir, opts, "workflowDir", "workflows");
-}
-function resolveProjectDir(startDir = process.cwd(), opts = {}) {
-  return resolveHarnessSubdir(startDir, opts, "projectDir", "projects");
-}
-var GITIGNORE_SNIPPET = `# Morning Star harness (.mstar/)
-# Principle: process stays local; results are shared with the team.
-# Default-ignore everything under .mstar/, then re-include the tracked results.
-.mstar/**
-!.mstar/AGENTS.md
-!.mstar/knowledge/
-!.mstar/knowledge/**
-!.mstar/specs/
-!.mstar/specs/**
-# .mstarc \u2014 repo-local harness config (may declare [config] harness_dir=<name>)
-.mstarc
-`;
-var GITIGNORE_SNIPPET_AGENTS = `# Morning Star harness (.agents/) \u2014 legacy
-# Default-ignore everything under .agents/, then re-include the tracked results.
-.agents/**
-!.agents/AGENTS.md
-!.agents/knowledge/
-!.agents/knowledge/**
-!.agents/specs/
-!.agents/specs/**
-`;
-var GITIGNORE_PROCESS_ENTRIES = GITIGNORE_SNIPPET.split(`
-`).filter((line) => line.startsWith(".mstar/") || line.startsWith("!.mstar/")).map((line) => line.trim());
-var GITIGNORE_PROCESS_ENTRIES_AGENTS = GITIGNORE_SNIPPET_AGENTS.split(`
-`).filter((line) => line.startsWith(".agents/") || line.startsWith("!.agents/")).map((line) => line.trim());
-function isDirectory(dir) {
-  try {
-    return statSync2(dir).isDirectory();
-  } catch {
-    return false;
+  expectString("iteration_base_branch", { min: 1 });
+  expectString("target_branch", { min: 1 });
+  const plans = doc.plans;
+  if (plans !== undefined) {
+    if (!Array.isArray(plans)) {
+      issues.push({ path: ["plans"], message: `expected array, received ${typeName(plans)}` });
+    } else {
+      plans.forEach((entry, index) => {
+        if (typeof entry !== "string") {
+          issues.push({ path: ["plans", index], message: `expected string, received ${typeName(entry)}` });
+        } else if (entry.length < 1) {
+          issues.push({ path: ["plans", index], message: "string must contain at least 1 character(s)" });
+        }
+      });
+    }
   }
-}
-function hasFiles(dir) {
-  try {
-    for (const entry of readdirSync(dir, { withFileTypes: true })) {
-      if (entry.isDirectory()) {
-        if (hasFiles(join3(dir, entry.name)))
-          return true;
-      } else if (entry.isFile()) {
-        return true;
-      }
+  const end_date = doc.end_date;
+  if (end_date !== undefined) {
+    if (typeof end_date !== "string") {
+      issues.push({ path: ["end_date"], message: `expected string, received ${typeName(end_date)}` });
+    } else if (!DATE_RE.test(end_date)) {
+      issues.push({ path: ["end_date"], message: `string must match ${DATE_RE}` });
     }
-    return false;
-  } catch {
-    return false;
   }
-}
-function isPlainObject2(value) {
-  return typeof value === "object" && value !== null && !Array.isArray(value);
+  if (issues.length > 0)
+    return { ok: false, issues };
+  return {
+    ok: true,
+    data: {
+      iteration_id: doc.iteration_id,
+      start_date: doc.start_date,
+      status,
+      iteration_base_branch: doc.iteration_base_branch,
+      target_branch: doc.target_branch,
+      ...plans !== undefined ? { plans } : {},
+      ...end_date !== undefined ? { end_date } : {}
+    }
+  };
 }
 function violation(severity, code, message, fix) {
   return { ok: false, severity, code, message, fix };
 }
-function validateNonEmptyString(violations, value, field, missingCode, invalidCode) {
-  if (value === undefined) {
-    violations.push(violation("high", missingCode, `missing required field: ${field}`));
-  } else if (typeof value !== "string" || value.trim() === "") {
-    violations.push(violation("medium", invalidCode, `${field} must be a non-empty string`));
-  }
-}
-var DATE_PART = String.raw`\d{4}-(0[1-9]|1[0-2])-(0[1-9]|[12]\d|3[01])`;
-var RFC3339_Z_RE = new RegExp(String.raw`^${DATE_PART}T\d{2}:\d{2}:\d{2}(\.\d+)?Z$`);
-var DATE_ONLY_RE = new RegExp(String.raw`^${DATE_PART}$`);
-function isValidClaimedAt(value) {
-  return typeof value === "string" && (RFC3339_Z_RE.test(value) || DATE_ONLY_RE.test(value));
+function isPlainObject2(value) {
+  return typeof value === "object" && value !== null && !Array.isArray(value);
 }
-function validateExecutionLease(lease) {
-  const violations = [];
-  if (!isPlainObject2(lease)) {
+function validateCompassFrontmatter(doc) {
+  if (!isPlainObject2(doc)) {
     return {
       ok: false,
       violations: [
-        violation("high", "lease.execution-lease.invalid", "execution_lease must be an object \u2014 null and tombstone objects are invalid; writers delete the key on release")
+        violation("medium", "COMPASS_INVALID_FIELD", "Compass frontmatter must be a YAML object with iteration_id / start_date / status / iteration_base_branch / target_branch (template: mstar-iteration \u00a71.3)", "Fix the frontmatter of {ITERATION_DIR}/<iteration-id>/delivery-compass.md")
       ]
     };
   }
-  validateNonEmptyString(violations, lease.holder, "holder", "lease.execution-lease.missing-holder", "lease.execution-lease.invalid-holder");
-  if (lease.claimed_at === undefined) {
-    violations.push(violation("high", "lease.execution-lease.missing-claimed-at", "missing required field: claimed_at"));
-  } else if (!isValidClaimedAt(lease.claimed_at)) {
-    violations.push(violation("medium", "lease.execution-lease.invalid-claimed-at", "claimed_at must be an RFC 3339 UTC timestamp with explicit Z (e.g. 2026-07-22T02:30:00Z) or a YYYY-MM-DD date"));
-  }
-  if (lease.worktree_path === undefined) {
-    violations.push(violation("high", "lease.execution-lease.missing-worktree-path", "missing required field: worktree_path"));
-  } else if (typeof lease.worktree_path !== "string" || lease.worktree_path.trim() === "") {
-    violations.push(violation("medium", "lease.execution-lease.invalid-worktree-path", "worktree_path must be a non-empty string"));
-  } else if (!isAbsolute3(lease.worktree_path)) {
-    violations.push(violation("medium", "lease.execution-lease.invalid-worktree-path", "worktree_path must be an absolute path \u2014 it identifies the dedicated feature-worktree root (and MUST differ from metadata.control_worktree_path)"));
-  }
-  validateNonEmptyString(violations, lease.working_branch, "working_branch", "lease.execution-lease.missing-working-branch", "lease.execution-lease.invalid-working-branch");
-  if (lease.session_label !== undefined && typeof lease.session_label !== "string") {
-    violations.push(violation("medium", "lease.execution-lease.invalid-session-label", "session_label must be a string (display only \u2014 never used for ownership comparison)"));
-  }
-  return { ok: violations.length === 0, violations };
-}
-function validateIntegrationMergeLease(lease) {
-  const violations = [];
-  if (!isPlainObject2(lease)) {
+  const parsed = validateCompassShape(doc);
+  if (!parsed.ok) {
     return {
       ok: false,
-      violations: [
-        violation("high", "lease.merge-lease.invalid", "integration_merge_lease must be an object \u2014 absent means unclaimed; null and tombstone objects are invalid; writers delete the key on release")
-      ]
+      violations: parsed.issues.map((issue) => {
+        const field = issue.path.join(".") || "(root)";
+        return violation("medium", "COMPASS_INVALID_FIELD", `Compass frontmatter field '${field}' is invalid: ${issue.message}`, `Fix '${field}' in {ITERATION_DIR}/<iteration-id>/delivery-compass.md frontmatter (template: mstar-iteration \u00a71.3)`);
+      })
     };
   }
-  validateNonEmptyString(violations, lease.holder, "holder", "lease.merge-lease.missing-holder", "lease.merge-lease.invalid-holder");
-  if (lease.claimed_at === undefined) {
-    violations.push(violation("high", "lease.merge-lease.missing-claimed-at", "missing required field: claimed_at"));
-  } else if (!isValidClaimedAt(lease.claimed_at)) {
-    violations.push(violation("medium", "lease.merge-lease.invalid-claimed-at", "claimed_at must be an RFC 3339 UTC timestamp with explicit Z (e.g. 2026-07-22T04:00:00Z) or a YYYY-MM-DD date"));
+  const violations = [];
+  const { status, end_date } = parsed.data;
+  if (status === "completed" && end_date === undefined) {
+    violations.push(violation("high", "COMPASS_END_DATE_REQUIRED", "Compass frontmatter status is 'completed' but end_date is missing \u2014 end_date is required at iteration-close (mstar-iteration \u00a73.4, template Fields guide)", "Add `end_date: YYYY-MM-DD` to the frontmatter"));
   }
-  validateNonEmptyString(violations, lease.plan_id, "plan_id", "lease.merge-lease.missing-plan-id", "lease.merge-lease.invalid-plan-id");
-  validateNonEmptyString(violations, lease.source_branch, "source_branch", "lease.merge-lease.missing-source-branch", "lease.merge-lease.invalid-source-branch");
-  validateNonEmptyString(violations, lease.target_branch, "target_branch", "lease.merge-lease.missing-target-branch", "lease.merge-lease.invalid-target-branch");
-  if (lease.session_label !== undefined && typeof lease.session_label !== "string") {
-    violations.push(violation("medium", "lease.merge-lease.invalid-session-label", "session_label must be a string (display only \u2014 never used for ownership comparison)"));
+  if (status !== "completed" && end_date !== undefined) {
+    violations.push(violation("medium", "COMPASS_END_DATE_NOT_ALLOWED", `Compass frontmatter sets end_date while status is '${status}' \u2014 end_date is only written at iteration-close (mstar-iteration \u00a73.4)`, "Remove end_date until iteration-close"));
   }
   return { ok: violations.length === 0, violations };
 }
-var STATUS_WRITE_LOCKDIR = ".status-write.lockdir";
-var LOCKDIR_HOLDER_PID = "holder.pid";
-var heldLockDirs = new AsyncLocalStorage2;
-async function withStatusWriteLock(statusPath, fn, opts = {}) {
-  const lockDir = join4(dirname4(resolve4(statusPath)), STATUS_WRITE_LOCKDIR);
-  const held = heldLockDirs.getStore();
-  if (held !== undefined && held.has(lockDir)) {
-    throw new Error(`${lockDir} is already held by this process in this async context \u2014 withStatusWriteLock is not reentrant; a nested acquisition on the same status.json is a bug`);
+function registeredPlanIds(compassDoc) {
+  if (!Array.isArray(compassDoc.plans))
+    return [];
+  return compassDoc.plans.filter((plan) => typeof plan === "string" && plan.length > 0);
+}
+function findPlanRow(snapshotDoc, planId) {
+  if (!Array.isArray(snapshotDoc.plans))
+    return null;
+  for (const row of snapshotDoc.plans) {
+    if (!isPlainObject2(row))
+      continue;
+    const rowId = typeof row.id === "string" ? row.id : typeof row.plan_id === "string" ? row.plan_id : null;
+    if (rowId === planId)
+      return row;
   }
-  const timeoutMs = opts.timeoutMs ?? 30000;
-  const pollMs = opts.pollMs ?? 25;
-  const deadline = Date.now() + timeoutMs;
-  let acquired = null;
-  for (;; ) {
-    try {
-      mkdirSync3(lockDir);
-      const st = statSync3(lockDir);
-      acquired = { dev: st.dev, ino: st.ino };
-      break;
+  return null;
+}
+function entryPlansAllDone(snapshotDoc, registered) {
+  const violations = [];
+  if (registered.length === 0) {
+    violations.push(violation("medium", "COMPASS_NO_PLANS", "Compass frontmatter registers no plans \u2014 the all-plans-Done transition cannot be verified (mstar-iteration \u00a71.3 / Phase transition gates)", "List the iteration's plan ids in the compass frontmatter `plans`"));
+    return violations;
+  }
+  for (const planId of registered) {
+    const row = findPlanRow(snapshotDoc, planId);
+    if (row === null) {
+      violations.push(violation("high", "PLAN_NOT_IN_STATUS", `Plan '${planId}' is registered in the compass frontmatter but has no row in the workflow snapshot plans[] (mstar-iteration \u00a73.1 entry item 1)`, "Add the plan row to {HARNESS_DIR}/workflows/<id>/snapshot.json"));
+      continue;
+    }
+    if (row.status !== PLAN_STATUS_DONE) {
+      violations.push(violation("high", "PLAN_NOT_DONE", `Plan '${planId}' status is ${JSON.stringify(row.status)} in the workflow snapshot \u2014 all compass-registered plans must be 'Done' before iteration-close (mstar-iteration \u00a73.1 entry item 1)`));
+    }
+  }
+  return violations;
+}
+function entryFrontmatterComplete(compassDoc) {
+  return validateCompassFrontmatter(compassDoc).violations;
+}
+function exitFrontmatterClosed(compassDoc) {
+  const violations = [];
+  if (compassDoc.status !== "completed") {
+    violations.push(violation("high", "EXIT_STATUS_NOT_COMPLETED", `Compass frontmatter status must be 'completed' at close exit \u2014 current: ${JSON.stringify(compassDoc.status)} (mstar-iteration \u00a73.4 / \u00a73.5 exit item 4)`));
+  }
+  const endDate = compassDoc.end_date;
+  if (typeof endDate !== "string" || !DATE_RE.test(endDate)) {
+    violations.push(violation("high", "EXIT_END_DATE_REQUIRED", "Compass frontmatter end_date (YYYY-MM-DD) is required when closing (mstar-iteration \u00a73.4 / \u00a73.5 exit item 4)"));
+  }
+  return violations;
+}
+function exitBranchCheck(opts) {
+  const violations = [];
+  const { currentBranch, specIntegrationBranch } = opts;
+  if (currentBranch === undefined || specIntegrationBranch === undefined) {
+    violations.push(violation("medium", "EXIT_BRANCH_UNVERIFIABLE", "Cannot verify the current branch is spec_integration_branch \u2014 missing currentBranch / specIntegrationBranch probe inputs (mstar-iteration \u00a73.5 exit item 5)"));
+  } else if (currentBranch !== specIntegrationBranch) {
+    violations.push(violation("high", "EXIT_BRANCH_MISMATCH", `Current branch '${currentBranch}' is not the spec_integration_branch '${specIntegrationBranch}' (mstar-iteration \u00a73.5 exit item 5)`));
+  }
+  return violations;
+}
+function exitPrBaseCheck(compassDoc, opts) {
+  const violations = [];
+  const target = compassDoc.target_branch;
+  const { prBaseBranch } = opts;
+  if (prBaseBranch === undefined) {
+    violations.push(violation("medium", "EXIT_PR_BASE_UNVERIFIABLE", "Cannot verify the PR base \u2014 missing prBaseBranch probe input (mstar-iteration \u00a73.5 exit item 6)"));
+  } else if (typeof target !== "string" || prBaseBranch !== target) {
+    violations.push(violation("high", "EXIT_PR_BASE_MISMATCH", `PR base '${prBaseBranch}' must equal the compass target_branch '${String(target)}' \u2014 not an undocumented branch (mstar-iteration \u00a73.5 exit item 6)`));
+  }
+  return violations;
+}
+function evaluatePhaseGate(snapshotDoc, compassDoc, opts = {}) {
+  const registered = registeredPlanIds(compassDoc);
+  const entryViolations = [
+    ...entryPlansAllDone(snapshotDoc, registered),
+    ...entryFrontmatterComplete(compassDoc)
+  ];
+  const exitViolations = [
+    ...exitFrontmatterClosed(compassDoc),
+    ...exitBranchCheck(opts),
+    ...exitPrBaseCheck(compassDoc, opts)
+  ];
+  const allPlansDone = registered.length > 0 && registered.every((planId) => {
+    const row = findPlanRow(snapshotDoc, planId);
+    return row !== null && row.status === PLAN_STATUS_DONE;
+  });
+  const entry = { ok: entryViolations.length === 0, violations: entryViolations };
+  const exit = { ok: exitViolations.length === 0, violations: exitViolations };
+  let transition;
+  if (!allPlansDone)
+    transition = "phase-2-execute";
+  else if (entry.ok && exit.ok)
+    transition = "phase-4-pr-delivery";
+  else
+    transition = "phase-3-close";
+  const gateBlocking = allPlansDone ? [...entryViolations, ...exitViolations] : [];
+  return {
+    transition,
+    allPlansDone,
+    entry,
+    exit,
+    ok: gateBlocking.length === 0,
+    violations: gateBlocking
+  };
+}
+function pushCadenceProbe(ciRunning, reviewWaveActive) {
+  const violations = [];
+  if (ciRunning) {
+    violations.push(violation("high", "PUSH_BLOCKED_CI", "CI checks are still queued/in_progress on the current head \u2014 do not push until the wave completes (mstar-iteration \u00a75.1a push gate 1)", "Wait for CI to settle, then push once with the whole local batch"));
+  }
+  if (reviewWaveActive) {
+    violations.push(violation("high", "PUSH_BLOCKED_REVIEW_WAVE", "An AI/bot review wave is still running on the current head \u2014 do not push until it settles (mstar-iteration \u00a75.1a push gate 2)", "Wait for the review wave, then push once"));
+  }
+  return { ok: violations.length === 0, violations };
+}
+function parseCompassFrontmatter(filePath) {
+  return parseCompassFrontmatterText(readFileSync3(filePath, "utf8"), filePath);
+}
+function parseCompassFrontmatterText(content, filePath) {
+  const lines = content.split(/\r?\n/);
+  if (lines[0]?.trim() !== "---") {
+    throw new Error(`no YAML frontmatter fence in ${filePath} (expected first line "---")`);
+  }
+  const end = lines.indexOf("---", 1);
+  if (end === -1) {
+    throw new Error(`unterminated YAML frontmatter in ${filePath} (no closing "---")`);
+  }
+  const doc = {};
+  let listKey = null;
+  for (let i = 1;i < end; i += 1) {
+    const line = lines[i] ?? "";
+    if (!line.trim() || line.trim().startsWith("#"))
+      continue;
+    if (listKey !== null && /^\s*-\s+/.test(line)) {
+      const item = line.replace(/^\s*-\s+/, "").trim().replace(/^["']|["']$/g, "");
+      if (!Array.isArray(doc[listKey]))
+        doc[listKey] = [];
+      doc[listKey].push(item);
+      continue;
+    }
+    listKey = null;
+    const kv = line.match(/^([A-Za-z_][A-Za-z0-9_-]*):\s*(.*)$/);
+    if (!kv) {
+      throw new Error(`unsupported frontmatter line in ${filePath}: ${JSON.stringify(line)}`);
+    }
+    const value = kv[2].trim();
+    doc[kv[1]] = value === "" ? null : /^\[.*\]$/.test(value) ? parseFlowArray(value, filePath) : value.replace(/^["']|["']$/g, "");
+    listKey = value === "" ? kv[1] : null;
+  }
+  return doc;
+}
+function parseFlowArray(raw, filePath) {
+  const inner = raw.slice(1, -1);
+  if (/[[\]]/.test(inner)) {
+    throw new Error(`nested flow-style array in ${filePath}: ${JSON.stringify(raw)} \u2014 only flat scalar items are supported (e.g. [a, b])`);
+  }
+  let quote = null;
+  for (const ch of inner) {
+    if (ch === '"' || ch === "'") {
+      if (quote === null)
+        quote = ch;
+      else if (quote === ch)
+        quote = null;
+    } else if (ch === "," && quote !== null) {
+      throw new Error(`ambiguous flow-style array in ${filePath}: ${JSON.stringify(raw)} \u2014 quoted item containing comma cannot be split unambiguously (flat scalar items only)`);
+    }
+  }
+  if (quote !== null) {
+    throw new Error(`unterminated ${quote} quote in flow-style array in ${filePath}: ${JSON.stringify(raw)}`);
+  }
+  const items = [];
+  for (const part of inner.split(",")) {
+    const item = part.trim().replace(/^["']|["']$/g, "");
+    if (item === "")
+      continue;
+    items.push(item);
+  }
+  return items;
+}
+function isPlainObject22(value) {
+  return typeof value === "object" && value !== null && !Array.isArray(value);
+}
+function violation2(severity, code, message, fix) {
+  return { ok: false, severity, code, message, fix };
+}
+function validateNonEmptyString(violations, value, field, missingCode, invalidCode) {
+  if (value === undefined) {
+    violations.push(violation2("high", missingCode, `missing required field: ${field}`));
+  } else if (typeof value !== "string" || value.trim() === "") {
+    violations.push(violation2("medium", invalidCode, `${field} must be a non-empty string`));
+  }
+}
+var DATE_PART = String.raw`\d{4}-(0[1-9]|1[0-2])-(0[1-9]|[12]\d|3[01])`;
+var RFC3339_Z_RE = new RegExp(String.raw`^${DATE_PART}T\d{2}:\d{2}:\d{2}(\.\d+)?Z$`);
+var DATE_ONLY_RE = new RegExp(String.raw`^${DATE_PART}$`);
+function isValidClaimedAt(value) {
+  return typeof value === "string" && (RFC3339_Z_RE.test(value) || DATE_ONLY_RE.test(value));
+}
+function validateExecutionLease(lease) {
+  const violations = [];
+  if (!isPlainObject22(lease)) {
+    return {
+      ok: false,
+      violations: [
+        violation2("high", "lease.execution-lease.invalid", "execution_lease must be an object \u2014 null and tombstone objects are invalid; writers delete the key on release")
+      ]
+    };
+  }
+  validateNonEmptyString(violations, lease.holder, "holder", "lease.execution-lease.missing-holder", "lease.execution-lease.invalid-holder");
+  if (lease.claimed_at === undefined) {
+    violations.push(violation2("high", "lease.execution-lease.missing-claimed-at", "missing required field: claimed_at"));
+  } else if (!isValidClaimedAt(lease.claimed_at)) {
+    violations.push(violation2("medium", "lease.execution-lease.invalid-claimed-at", "claimed_at must be an RFC 3339 UTC timestamp with explicit Z (e.g. 2026-07-22T02:30:00Z) or a YYYY-MM-DD date"));
+  }
+  if (lease.worktree_path === undefined) {
+    violations.push(violation2("high", "lease.execution-lease.missing-worktree-path", "missing required field: worktree_path"));
+  } else if (typeof lease.worktree_path !== "string" || lease.worktree_path.trim() === "") {
+    violations.push(violation2("medium", "lease.execution-lease.invalid-worktree-path", "worktree_path must be a non-empty string"));
+  } else if (!isAbsolute2(lease.worktree_path)) {
+    violations.push(violation2("medium", "lease.execution-lease.invalid-worktree-path", "worktree_path must be an absolute path \u2014 it identifies the dedicated feature-worktree root (and MUST differ from metadata.control_worktree_path)"));
+  }
+  validateNonEmptyString(violations, lease.working_branch, "working_branch", "lease.execution-lease.missing-working-branch", "lease.execution-lease.invalid-working-branch");
+  if (lease.session_label !== undefined && typeof lease.session_label !== "string") {
+    violations.push(violation2("medium", "lease.execution-lease.invalid-session-label", "session_label must be a string (display only \u2014 never used for ownership comparison)"));
+  }
+  return { ok: violations.length === 0, violations };
+}
+function validateIntegrationMergeLease(lease) {
+  const violations = [];
+  if (!isPlainObject22(lease)) {
+    return {
+      ok: false,
+      violations: [
+        violation2("high", "lease.merge-lease.invalid", "integration_merge_lease must be an object \u2014 absent means unclaimed; null and tombstone objects are invalid; writers delete the key on release")
+      ]
+    };
+  }
+  validateNonEmptyString(violations, lease.holder, "holder", "lease.merge-lease.missing-holder", "lease.merge-lease.invalid-holder");
+  if (lease.claimed_at === undefined) {
+    violations.push(violation2("high", "lease.merge-lease.missing-claimed-at", "missing required field: claimed_at"));
+  } else if (!isValidClaimedAt(lease.claimed_at)) {
+    violations.push(violation2("medium", "lease.merge-lease.invalid-claimed-at", "claimed_at must be an RFC 3339 UTC timestamp with explicit Z (e.g. 2026-07-22T04:00:00Z) or a YYYY-MM-DD date"));
+  }
+  validateNonEmptyString(violations, lease.plan_id, "plan_id", "lease.merge-lease.missing-plan-id", "lease.merge-lease.invalid-plan-id");
+  validateNonEmptyString(violations, lease.source_branch, "source_branch", "lease.merge-lease.missing-source-branch", "lease.merge-lease.invalid-source-branch");
+  validateNonEmptyString(violations, lease.target_branch, "target_branch", "lease.merge-lease.missing-target-branch", "lease.merge-lease.invalid-target-branch");
+  if (lease.session_label !== undefined && typeof lease.session_label !== "string") {
+    violations.push(violation2("medium", "lease.merge-lease.invalid-session-label", "session_label must be a string (display only \u2014 never used for ownership comparison)"));
+  }
+  return { ok: violations.length === 0, violations };
+}
+var STATUS_WRITE_LOCKDIR = ".status-write.lockdir";
+var LOCKDIR_HOLDER_PID = "holder.pid";
+var heldLockDirs = new AsyncLocalStorage2;
+async function withStatusWriteLock(statusPath, fn, opts = {}) {
+  const lockDir = join4(dirname3(resolve3(statusPath)), STATUS_WRITE_LOCKDIR);
+  const held = heldLockDirs.getStore();
+  if (held !== undefined && held.has(lockDir)) {
+    throw new Error(`${lockDir} is already held by this process in this async context \u2014 withStatusWriteLock is not reentrant; a nested acquisition on the same status.json is a bug`);
+  }
+  const timeoutMs = opts.timeoutMs ?? 30000;
+  const pollMs = opts.pollMs ?? 25;
+  const deadline = Date.now() + timeoutMs;
+  let acquired = null;
+  for (;; ) {
+    try {
+      mkdirSync2(lockDir);
+      const st = statSync2(lockDir);
+      acquired = { dev: st.dev, ino: st.ino };
+      break;
     } catch (error) {
       if (error.code !== "EEXIST")
         throw error;
@@ -4471,7 +4607,7 @@ async function withStatusWriteLock(statusPath, fn, opts = {}) {
   } finally {
     owns.delete(lockDir);
     try {
-      const current = statSync3(lockDir);
+      const current = statSync2(lockDir);
       if (acquired !== null && current.dev === acquired.dev && current.ino === acquired.ino) {
         try {
           unlinkSync2(join4(lockDir, LOCKDIR_HOLDER_PID));
@@ -4487,7 +4623,7 @@ var REQUIRED_FIELDS = [
   { key: "delegation", label: "Delegation", code: "delegation" },
   { key: "taskCategory", label: "Task category", code: "task-category" }
 ];
-function violation2(severity, code, message, fix) {
+function violation3(severity, code, message, fix) {
   return { ok: false, severity, code, message, fix };
 }
 function parseAssignmentFields(assignmentText) {
@@ -4512,11 +4648,11 @@ function parseAssignmentFields(assignmentText) {
 }
 function requireField(violations, value, label, code) {
   if (value === undefined) {
-    const v = violation2("high", `assignment.field.missing-${code}`, `missing required Assignment field: ${label}`, `add "**${label}**: <value>" to the Assignment`);
+    const v = violation3("high", `assignment.field.missing-${code}`, `missing required Assignment field: ${label}`, `add "**${label}**: <value>" to the Assignment`);
     v.aliases = [`assignment.presence.missing-${code}`];
     violations.push(v);
   } else if (value === "") {
-    const v = violation2("high", `assignment.field.invalid-${code}`, `${label} must be non-empty`, `fill in "**${label}**: <value>"`);
+    const v = violation3("high", `assignment.field.invalid-${code}`, `${label} must be non-empty`, `fill in "**${label}**: <value>"`);
     v.aliases = [`assignment.presence.missing-${code}`];
     violations.push(v);
   }
@@ -4575,20 +4711,20 @@ function validateAssignmentFields(assignmentText, opts = {}) {
     const formCount = Number(workingPresent) + Number(policyPresent);
     const forms = parseAssignmentBranchForms(assignmentText);
     if (formCount === 0) {
-      violations.push(violation2("high", "assignment.field.branch-missing", "writable assignment must contain exactly one branch form", `add exactly one of: ${BRANCH_FORMS_HINT}`));
+      violations.push(violation3("high", "assignment.field.branch-missing", "writable assignment must contain exactly one branch form", `add exactly one of: ${BRANCH_FORMS_HINT}`));
     } else if (formCount > 1) {
-      violations.push(violation2("high", "assignment.field.branch-multiple", `writable assignment contains ${formCount} branch forms (Working branch + Branch policy) \u2014 exactly one required`, `keep exactly one of: ${BRANCH_FORMS_HINT}`));
+      violations.push(violation3("high", "assignment.field.branch-multiple", `writable assignment contains ${formCount} branch forms (Working branch + Branch policy) \u2014 exactly one required`, `keep exactly one of: ${BRANCH_FORMS_HINT}`));
     } else if (workingPresent) {
       const create = forms.createForm;
       if (create !== undefined && (create.base === undefined || create.base.trim() === "" || create.name.trim() === "")) {
-        violations.push(violation2("high", "assignment.field.branch-missing-base", `create-form Working branch is incomplete: "${fields.workingBranch}" (expected "create <new-branch> from <base>")`, "write both the new branch name and the ancestor branch after `from` (main / existing feature branch / remote-tracking branch / `current`)"));
+        violations.push(violation3("high", "assignment.field.branch-missing-base", `create-form Working branch is incomplete: "${fields.workingBranch}" (expected "create <new-branch> from <base>")`, "write both the new branch name and the ancestor branch after `from` (main / existing feature branch / remote-tracking branch / `current`)"));
       }
     } else if (policyPresent) {
       const direct = forms.directOn;
       if (direct === undefined) {
-        violations.push(violation2("high", "assignment.field.branch-policy-missing-branch", `unparseable Branch policy: "${fields.branchPolicy}" (expected "direct on <branch> \u2014 <reason>")`, "start the field with `direct on <branch>`"));
+        violations.push(violation3("high", "assignment.field.branch-policy-missing-branch", `unparseable Branch policy: "${fields.branchPolicy}" (expected "direct on <branch> \u2014 <reason>")`, "start the field with `direct on <branch>`"));
       } else if (direct.reason === "") {
-        violations.push(violation2("high", "assignment.field.branch-policy-missing-reason", `Branch policy "direct on ${direct.branch}" is missing the reason`, 'append "\u2014 <reason>" after the branch name'));
+        violations.push(violation3("high", "assignment.field.branch-policy-missing-reason", `Branch policy "direct on ${direct.branch}" is missing the reason`, 'append "\u2014 <reason>" after the branch name'));
       }
     }
   }
@@ -4599,7 +4735,7 @@ function assertDefaultBranchProtected(branch, opts = {}) {
   const violations = [];
   const normalized = branch.trim();
   if (normalized !== "" && defaultBranches.includes(normalized) && opts.directOnException !== true) {
-    violations.push(violation2("high", "dispatch.default-branch.protected", `writable work on default protected branch "${normalized}" requires an explicit direct-on exception`, `add "Branch policy: direct on ${normalized} \u2014 <reason>" to the Assignment, or use a feature branch`));
+    violations.push(violation3("high", "dispatch.default-branch.protected", `writable work on default protected branch "${normalized}" requires an explicit direct-on exception`, `add "Branch policy: direct on ${normalized} \u2014 <reason>" to the Assignment, or use a feature branch`));
   }
   return { ok: violations.length === 0, violations };
 }
@@ -4608,7 +4744,7 @@ function executionModeToN(executionMode, opts = {}) {
   const mode = executionMode.trim().toLowerCase().split(/\s+/)[0] ?? "";
   let n;
   if (mode === "") {
-    violations.push(violation2("high", "dispatch.execution-mode.missing", "missing required Assignment field: Execution mode", 'add "**Execution mode**: sdd | inline | targeted"'));
+    violations.push(violation3("high", "dispatch.execution-mode.missing", "missing required Assignment field: Execution mode", 'add "**Execution mode**: sdd | inline | targeted"'));
   } else if (mode === "sdd") {
     n = 3;
   } else if (mode === "inline") {
@@ -4616,14 +4752,14 @@ function executionModeToN(executionMode, opts = {}) {
   } else if (mode === "targeted") {
     const seats = [...new Set((opts.seats ?? []).map((s) => s.trim()).filter((s) => s !== ""))];
     if (seats.length === 0) {
-      violations.push(violation2("high", "dispatch.execution-mode.missing-seats", 'execution mode "targeted" requires listed reviewer seats', 'add "QC re-review: targeted \u2014 reviewers: <role-id>, \u2026" to the Assignment and pass the seats'));
+      violations.push(violation3("high", "dispatch.execution-mode.missing-seats", 'execution mode "targeted" requires listed reviewer seats', 'add "QC re-review: targeted \u2014 reviewers: <role-id>, \u2026" to the Assignment and pass the seats'));
     } else if (seats.length > 3) {
-      violations.push(violation2("high", "dispatch.execution-mode.too-many-seats", `execution mode "targeted" lists ${seats.length} reviewer seats \u2014 at most 3 (targeted re-review seats are the tri seats, N = 1\u20133)`, "list at most three reviewer seats for the targeted re-review"));
+      violations.push(violation3("high", "dispatch.execution-mode.too-many-seats", `execution mode "targeted" lists ${seats.length} reviewer seats \u2014 at most 3 (targeted re-review seats are the tri seats, N = 1\u20133)`, "list at most three reviewer seats for the targeted re-review"));
     } else {
       n = seats.length;
     }
   } else {
-    violations.push(violation2("high", "dispatch.execution-mode.unknown", `unknown execution mode "${executionMode.trim()}" (expected sdd | inline | targeted)`, "fix the Execution mode field"));
+    violations.push(violation3("high", "dispatch.execution-mode.unknown", `unknown execution mode "${executionMode.trim()}" (expected sdd | inline | targeted)`, "fix the Execution mode field"));
   }
   return n === undefined ? { ok: false, violations } : { ok: true, violations, n };
 }
@@ -4637,7 +4773,7 @@ function assertTriIdentity(reviewerRoles) {
   return {
     ok: false,
     violations: [
-      violation2("high", "dispatch.tri-identity.invalid", `tri-review initial wave must be exactly qc-specialist / qc-specialist-2 / qc-specialist-3, got: ${got}`, "dispatch qc-specialist, qc-specialist-2 and qc-specialist-3 for the initial wave")
+      violation3("high", "dispatch.tri-identity.invalid", `tri-review initial wave must be exactly qc-specialist / qc-specialist-2 / qc-specialist-3, got: ${got}`, "dispatch qc-specialist, qc-specialist-2 and qc-specialist-3 for the initial wave")
     ]
   };
 }
@@ -4645,45 +4781,45 @@ var WORKFLOW_SNAPSHOT_FILE = "snapshot.json";
 var WORKFLOW_LIFECYCLE_STATUSES = ["running", "paused", "completed", "failed", "stopped"];
 var WORKFLOW_TERMINAL_STATUSES = ["completed", "failed", "stopped"];
 var WORKFLOW_LIFECYCLE_TYPES = ["plan", "iteration"];
-function isPlainObject22(value) {
+function isPlainObject3(value) {
   return typeof value === "object" && value !== null && !Array.isArray(value);
 }
-function violation3(severity, code, message, fix) {
+function violation4(severity, code, message, fix) {
   return { ok: false, severity, code, message, fix };
 }
 function validateNonEmptyString2(violations, value, field, missingCode, invalidCode) {
   if (value === undefined) {
-    violations.push(violation3("high", missingCode, `missing required field: ${field}`));
+    violations.push(violation4("high", missingCode, `missing required field: ${field}`));
   } else if (typeof value !== "string" || value.trim() === "") {
-    violations.push(violation3("medium", invalidCode, `${field} must be a non-empty string`));
+    violations.push(violation4("medium", invalidCode, `${field} must be a non-empty string`));
   }
 }
 function validateWorkflowSnapshot(doc) {
   const violations = [];
-  if (!isPlainObject22(doc)) {
+  if (!isPlainObject3(doc)) {
     return {
       ok: false,
-      violations: [violation3("high", "workflow.snapshot.invalid", "workflow snapshot must be an object")]
+      violations: [violation4("high", "workflow.snapshot.invalid", "workflow snapshot must be an object")]
     };
   }
   if (doc.schema_version === undefined) {
-    violations.push(violation3("high", "workflow.snapshot.missing-schema-version", "missing required field: schema_version"));
+    violations.push(violation4("high", "workflow.snapshot.missing-schema-version", "missing required field: schema_version"));
   } else if (doc.schema_version !== 1) {
-    violations.push(violation3("high", "workflow.snapshot.invalid-schema-version", `schema_version must be 1 \u2014 got ${JSON.stringify(doc.schema_version)} (version is reserved for the root file discriminator)`));
+    violations.push(violation4("high", "workflow.snapshot.invalid-schema-version", `schema_version must be 1 \u2014 got ${JSON.stringify(doc.schema_version)} (version is reserved for the root file discriminator)`));
   }
   if (doc.version !== undefined) {
-    violations.push(violation3("medium", "workflow.snapshot.reserved-version", `top-level version is reserved for the root status.json discriminator \u2014 snapshots use schema_version; remove the version key (got ${JSON.stringify(doc.version)})`, "remove the version key from the snapshot"));
+    violations.push(violation4("medium", "workflow.snapshot.reserved-version", `top-level version is reserved for the root status.json discriminator \u2014 snapshots use schema_version; remove the version key (got ${JSON.stringify(doc.version)})`, "remove the version key from the snapshot"));
   }
   validateNonEmptyString2(violations, doc.id, "id", "workflow.snapshot.missing-id", "workflow.snapshot.invalid-id");
   if (doc.type === undefined) {
-    violations.push(violation3("high", "workflow.snapshot.missing-type", "missing required field: type"));
+    violations.push(violation4("high", "workflow.snapshot.missing-type", "missing required field: type"));
   } else if (typeof doc.type !== "string" || !WORKFLOW_LIFECYCLE_TYPES.includes(doc.type)) {
-    violations.push(violation3("medium", "workflow.snapshot.invalid-type", `type must be one of ${WORKFLOW_LIFECYCLE_TYPES.join(" | ")} \u2014 got ${JSON.stringify(doc.type)}`));
+    violations.push(violation4("medium", "workflow.snapshot.invalid-type", `type must be one of ${WORKFLOW_LIFECYCLE_TYPES.join(" | ")} \u2014 got ${JSON.stringify(doc.type)}`));
   }
   if (doc.status === undefined) {
-    violations.push(violation3("high", "workflow.snapshot.missing-status", "missing required field: status"));
+    violations.push(violation4("high", "workflow.snapshot.missing-status", "missing required field: status"));
   } else if (typeof doc.status !== "string" || !WORKFLOW_LIFECYCLE_STATUSES.includes(doc.status)) {
-    violations.push(violation3("medium", "workflow.snapshot.invalid-status", `status must be one of ${WORKFLOW_LIFECYCLE_STATUSES.join(" | ")} \u2014 got ${JSON.stringify(doc.status)}`));
+    violations.push(violation4("medium", "workflow.snapshot.invalid-status", `status must be one of ${WORKFLOW_LIFECYCLE_STATUSES.join(" | ")} \u2014 got ${JSON.stringify(doc.status)}`));
   }
   validateNonEmptyString2(violations, doc.started_at, "started_at", "workflow.snapshot.missing-started-at", "workflow.snapshot.invalid-started-at");
   validateNonEmptyString2(violations, doc.updated_at, "updated_at", "workflow.snapshot.missing-updated-at", "workflow.snapshot.invalid-updated-at");
@@ -4691,35 +4827,35 @@ function validateWorkflowSnapshot(doc) {
     validateNonEmptyString2(violations, doc.ended_at, "ended_at", "workflow.snapshot.missing-ended-at", "workflow.snapshot.invalid-ended-at");
   }
   if (doc.phase !== undefined && typeof doc.phase !== "string") {
-    violations.push(violation3("medium", "workflow.snapshot.invalid-phase", "phase must be a string (free-form phase machine label)"));
+    violations.push(violation4("medium", "workflow.snapshot.invalid-phase", "phase must be a string (free-form phase machine label)"));
   }
   if (doc.plans === undefined) {
-    violations.push(violation3("high", "workflow.snapshot.missing-plans", "missing required field: plans"));
+    violations.push(violation4("high", "workflow.snapshot.missing-plans", "missing required field: plans"));
   } else if (!Array.isArray(doc.plans)) {
-    violations.push(violation3("high", "workflow.snapshot.invalid-plans", "plans must be an array of legacy plan rows"));
+    violations.push(violation4("high", "workflow.snapshot.invalid-plans", "plans must be an array of legacy plan rows"));
   } else {
     for (const row of doc.plans) {
       violations.push(...validatePlanRow(row).violations);
-      if (isPlainObject22(row) && row.execution_lease !== undefined) {
+      if (isPlainObject3(row) && row.execution_lease !== undefined) {
         violations.push(...validateExecutionLease(row.execution_lease).violations);
       }
     }
   }
   if (doc.execution_policy !== undefined) {
-    if (!isPlainObject22(doc.execution_policy)) {
-      violations.push(violation3("medium", "workflow.snapshot.invalid-execution-policy", "execution_policy must be an object"));
+    if (!isPlainObject3(doc.execution_policy)) {
+      violations.push(violation4("medium", "workflow.snapshot.invalid-execution-policy", "execution_policy must be an object"));
     }
   }
   if (doc.integration_merge_lease !== undefined) {
     violations.push(...validateIntegrationMergeLease(doc.integration_merge_lease).violations);
   }
   if (doc.branch !== undefined) {
-    if (!isPlainObject22(doc.branch)) {
-      violations.push(violation3("medium", "workflow.snapshot.invalid-branch", "branch must be an object"));
+    if (!isPlainObject3(doc.branch)) {
+      violations.push(violation4("medium", "workflow.snapshot.invalid-branch", "branch must be an object"));
     } else {
       for (const key of ["base", "integration", "target"]) {
         if (doc.branch[key] !== undefined && (typeof doc.branch[key] !== "string" || doc.branch[key].trim() === "")) {
-          violations.push(violation3("medium", "workflow.snapshot.invalid-branch", `branch.${key} must be a non-empty string`));
+          violations.push(violation4("medium", "workflow.snapshot.invalid-branch", `branch.${key} must be a non-empty string`));
         }
       }
     }
@@ -4727,8 +4863,8 @@ function validateWorkflowSnapshot(doc) {
   if (doc.control_worktree_path !== undefined) {
     validateNonEmptyString2(violations, doc.control_worktree_path, "control_worktree_path", "workflow.snapshot.missing-control-worktree-path", "workflow.snapshot.invalid-control-worktree-path");
   }
-  if (doc.legacy_metadata !== undefined && !isPlainObject22(doc.legacy_metadata)) {
-    violations.push(violation3("medium", "workflow.snapshot.invalid-legacy-metadata", "legacy_metadata must be an object"));
+  if (doc.legacy_metadata !== undefined && !isPlainObject3(doc.legacy_metadata)) {
+    violations.push(violation4("medium", "workflow.snapshot.invalid-legacy-metadata", "legacy_metadata must be an object"));
   }
   if (doc.compass_ref !== undefined) {
     validateNonEmptyString2(violations, doc.compass_ref, "compass_ref", "workflow.snapshot.missing-compass-ref", "workflow.snapshot.invalid-compass-ref");
@@ -4736,27 +4872,27 @@ function validateWorkflowSnapshot(doc) {
   const terminal = typeof doc.status === "string" && WORKFLOW_TERMINAL_STATUSES.includes(doc.status);
   if (terminal) {
     if (doc.ended_at === undefined) {
-      violations.push(violation3("high", "workflow.snapshot.missing-ended-at", `terminal status ${JSON.stringify(doc.status)} requires ended_at \u2014 a terminal snapshot must record when the lifecycle ended`));
+      violations.push(violation4("high", "workflow.snapshot.missing-ended-at", `terminal status ${JSON.stringify(doc.status)} requires ended_at \u2014 a terminal snapshot must record when the lifecycle ended`));
     }
     if (Array.isArray(doc.plans)) {
       for (const row of doc.plans) {
-        if (isPlainObject22(row) && row.execution_lease !== undefined) {
-          violations.push(violation3("high", "workflow.snapshot.terminal-dangling-execution-lease", `terminal snapshot must not carry a row execution_lease (dangling lease) \u2014 release every lease before the lifecycle ends`));
+        if (isPlainObject3(row) && row.execution_lease !== undefined) {
+          violations.push(violation4("high", "workflow.snapshot.terminal-dangling-execution-lease", `terminal snapshot must not carry a row execution_lease (dangling lease) \u2014 release every lease before the lifecycle ends`));
         }
       }
     }
     if (doc.integration_merge_lease !== undefined) {
-      violations.push(violation3("high", "workflow.snapshot.terminal-dangling-merge-lease", "terminal snapshot must not carry integration_merge_lease (dangling lease) \u2014 release the merge lease before the lifecycle ends"));
+      violations.push(violation4("high", "workflow.snapshot.terminal-dangling-merge-lease", "terminal snapshot must not carry integration_merge_lease (dangling lease) \u2014 release the merge lease before the lifecycle ends"));
     }
   }
   return { ok: violations.length === 0, violations };
 }
-var DATE_RE = /^\d{4}-\d{2}-\d{2}$/;
+var DATE_RE2 = /^\d{4}-\d{2}-\d{2}$/;
 var PLAN_STATUSES = ["Todo", "InProgress", "InReview", "Blocked", "Done"];
-function isPlainObject3(value) {
+function isPlainObject4(value) {
   return typeof value === "object" && value !== null && !Array.isArray(value);
 }
-function violation4(severity, code, message, fix) {
+function violation5(severity, code, message, fix) {
   return { ok: false, severity, code, message, fix };
 }
 function todayString() {
@@ -4779,19 +4915,19 @@ function isOpenResidual(entry) {
 }
 function validateNonEmptyString3(violations, value, field, missingCode, invalidCode) {
   if (value === undefined) {
-    violations.push(violation4("high", missingCode, `missing required field: ${field}`));
+    violations.push(violation5("high", missingCode, `missing required field: ${field}`));
   } else if (typeof value !== "string" || value.trim() === "") {
-    violations.push(violation4("medium", invalidCode, `${field} must be a non-empty string`));
+    violations.push(violation5("medium", invalidCode, `${field} must be a non-empty string`));
   }
 }
 function validatePlanRow(row) {
   const violations = [];
-  if (!isPlainObject3(row)) {
-    return { ok: false, violations: [violation4("high", "status.plan-row.invalid", "plan row must be an object")] };
+  if (!isPlainObject4(row)) {
+    return { ok: false, violations: [violation5("high", "status.plan-row.invalid", "plan row must be an object")] };
   }
   const { id, plan_id: planId, title, file, status, metadata, execution_lease } = row;
   if (id === undefined && planId === undefined) {
-    violations.push(violation4("high", "status.plan-row.missing-id", "missing required field: id (or legacy plan_id)"));
+    violations.push(violation5("high", "status.plan-row.missing-id", "missing required field: id (or legacy plan_id)"));
   } else {
     if (id !== undefined) {
       validateNonEmptyString3(violations, id, "id", "status.plan-row.missing-id", "status.plan-row.invalid-id");
@@ -4800,24 +4936,24 @@ function validatePlanRow(row) {
       validateNonEmptyString3(violations, planId, "plan_id", "status.plan-row.missing-plan-id", "status.plan-row.invalid-plan-id");
     }
     if (id !== undefined && planId !== undefined && id !== planId) {
-      violations.push(violation4("medium", "status.plan-row.dual-id", "row has both id and plan_id with different values \u2014 write one canonical key (prefer id)"));
+      violations.push(violation5("medium", "status.plan-row.dual-id", "row has both id and plan_id with different values \u2014 write one canonical key (prefer id)"));
     }
   }
   validateNonEmptyString3(violations, title, "title", "status.plan-row.missing-title", "status.plan-row.invalid-title");
   validateNonEmptyString3(violations, file, "file", "status.plan-row.missing-file", "status.plan-row.invalid-file");
   if (status === undefined) {
-    violations.push(violation4("high", "status.plan-row.missing-status", "missing required field: status"));
+    violations.push(violation5("high", "status.plan-row.missing-status", "missing required field: status"));
   } else if (typeof status !== "string" || !PLAN_STATUSES.includes(status)) {
-    violations.push(violation4("medium", "status.plan-row.invalid-status", `status must be one of ${PLAN_STATUSES.join(" | ")} \u2014 got ${JSON.stringify(status)}`));
+    violations.push(violation5("medium", "status.plan-row.invalid-status", `status must be one of ${PLAN_STATUSES.join(" | ")} \u2014 got ${JSON.stringify(status)}`));
   }
-  if (metadata !== undefined && !isPlainObject3(metadata)) {
-    violations.push(violation4("medium", "status.plan-row.invalid-metadata", "metadata must be an object"));
+  if (metadata !== undefined && !isPlainObject4(metadata)) {
+    violations.push(violation5("medium", "status.plan-row.invalid-metadata", "metadata must be an object"));
   }
-  if (execution_lease !== undefined && !isPlainObject3(execution_lease)) {
-    violations.push(violation4("medium", "status.plan-row.invalid-execution-lease", "execution_lease must be an object"));
+  if (execution_lease !== undefined && !isPlainObject4(execution_lease)) {
+    violations.push(violation5("medium", "status.plan-row.invalid-execution-lease", "execution_lease must be an object"));
   }
   if (status === "Done" && execution_lease !== undefined) {
-    violations.push(violation4("medium", "status.plan-row.done-with-lease", 'plan status Done must not carry an execution_lease \u2014 the Done authority deletes the lease in the same complete-file update as status: "Done" (status-and-residuals.md \u00a7 Hold, release, and override)', 'delete plans[].execution_lease in the same update that sets status: "Done"'));
+    violations.push(violation5("medium", "status.plan-row.done-with-lease", 'plan status Done must not carry an execution_lease \u2014 the Done authority deletes the lease in the same complete-file update as status: "Done" (status-and-residuals.md \u00a7 Hold, release, and override)', 'delete plans[].execution_lease in the same update that sets status: "Done"'));
   }
   return { ok: violations.length === 0, violations };
 }
@@ -4830,25 +4966,25 @@ function isHarnessRelativePath(dir) {
 }
 function validateWorkflowEntry(entry) {
   const violations = [];
-  if (!isPlainObject3(entry)) {
+  if (!isPlainObject4(entry)) {
     return {
       ok: false,
-      violations: [violation4("high", "status.workflow.invalid", "workflow entry must be an object")]
+      violations: [violation5("high", "status.workflow.invalid", "workflow entry must be an object")]
     };
   }
   validateNonEmptyString3(violations, entry.id, "id", "status.workflow.missing-id", "status.workflow.invalid-id");
   if (entry.type === undefined) {
-    violations.push(violation4("high", "status.workflow.missing-type", "missing required field: type"));
+    violations.push(violation5("high", "status.workflow.missing-type", "missing required field: type"));
   } else if (typeof entry.type !== "string" || !WORKFLOW_LIFECYCLE_TYPES.includes(entry.type)) {
-    violations.push(violation4("medium", "status.workflow.invalid-type", `type must be one of ${WORKFLOW_LIFECYCLE_TYPES.join(" | ")} \u2014 got ${JSON.stringify(entry.type)}`));
+    violations.push(violation5("medium", "status.workflow.invalid-type", `type must be one of ${WORKFLOW_LIFECYCLE_TYPES.join(" | ")} \u2014 got ${JSON.stringify(entry.type)}`));
   }
   validateNonEmptyString3(violations, entry.started_at, "started_at", "status.workflow.missing-started-at", "status.workflow.invalid-started-at");
   if (entry.dir === undefined) {
-    violations.push(violation4("high", "status.workflow.missing-dir", "missing required field: dir"));
+    violations.push(violation5("high", "status.workflow.missing-dir", "missing required field: dir"));
   } else if (typeof entry.dir !== "string" || entry.dir.trim() === "") {
-    violations.push(violation4("medium", "status.workflow.invalid-dir", "dir must be a non-empty string"));
+    violations.push(violation5("medium", "status.workflow.invalid-dir", "dir must be a non-empty string"));
   } else if (!isHarnessRelativePath(entry.dir)) {
-    violations.push(violation4("medium", "status.workflow.invalid-dir", `dir must be a harness-relative path (no absolute paths, no ".." segments) \u2014 got ${JSON.stringify(entry.dir)}`));
+    violations.push(violation5("medium", "status.workflow.invalid-dir", `dir must be a harness-relative path (no absolute paths, no ".." segments) \u2014 got ${JSON.stringify(entry.dir)}`));
   }
   return { ok: violations.length === 0, violations };
 }
@@ -4858,24 +4994,24 @@ function validateStatusV2(docOrPath, opts = {}) {
   if (typeof docOrPath === "string") {
     try {
       doc = readJson(docOrPath);
-      harnessDir = dirname5(resolve5(docOrPath));
+      harnessDir = dirname4(resolve4(docOrPath));
     } catch (error) {
       return {
         ok: false,
-        violations: [violation4("high", "status.invalid-json", error.message)]
+        violations: [violation5("high", "status.invalid-json", error.message)]
       };
     }
   } else {
     doc = docOrPath;
   }
-  if (!isPlainObject3(doc)) {
-    return { ok: false, violations: [violation4("high", "status.invalid-doc", "status document must be an object")] };
+  if (!isPlainObject4(doc)) {
+    return { ok: false, violations: [violation5("high", "status.invalid-doc", "status document must be an object")] };
   }
   if (doc.version !== 2) {
     return {
       ok: false,
       violations: [
-        violation4("high", "status.migration-required", `status.json schema version 2 required \u2014 got ${JSON.stringify(doc.version)} (v1 or unknown version); run \`mstar migrate\` to convert the tree`, "run `mstar migrate`")
+        violation5("high", "status.migration-required", `status.json schema version 2 required \u2014 got ${JSON.stringify(doc.version)} (v1 or unknown version); run \`mstar migrate\` to convert the tree`, "run `mstar migrate`")
       ]
     };
   }
@@ -4883,7 +5019,7 @@ function validateStatusV2(docOrPath, opts = {}) {
     return {
       ok: false,
       violations: [
-        violation4("high", "status.migration-required", "v1-shaped status.json (root plans[]) is not a v2 document \u2014 run `mstar migrate` to convert the tree", "run `mstar migrate`")
+        violation5("high", "status.migration-required", "v1-shaped status.json (root plans[]) is not a v2 document \u2014 run `mstar migrate` to convert the tree", "run `mstar migrate`")
       ]
     };
   }
@@ -4891,27 +5027,27 @@ function validateStatusV2(docOrPath, opts = {}) {
     return {
       ok: false,
       violations: [
-        violation4("high", "status.migration-required", "v1-shaped status.json (root residual_findings) is not a v2 document \u2014 run `mstar migrate` to convert the tree", "run `mstar migrate`")
+        violation5("high", "status.migration-required", "v1-shaped status.json (root residual_findings) is not a v2 document \u2014 run `mstar migrate` to convert the tree", "run `mstar migrate`")
       ]
     };
   }
   const violations = [];
   if (doc.updated_at === undefined) {
-    violations.push(violation4("high", "status.missing-updated-at", "missing required field: updated_at"));
-  } else if (typeof doc.updated_at !== "string" || !DATE_RE.test(doc.updated_at)) {
-    violations.push(violation4("medium", "status.invalid-updated-at", "updated_at must be YYYY-MM-DD"));
+    violations.push(violation5("high", "status.missing-updated-at", "missing required field: updated_at"));
+  } else if (typeof doc.updated_at !== "string" || !DATE_RE2.test(doc.updated_at)) {
+    violations.push(violation5("medium", "status.invalid-updated-at", "updated_at must be YYYY-MM-DD"));
   }
   if (doc.workflows === undefined) {
-    violations.push(violation4("high", "status.missing-workflows", "missing required field: workflows"));
+    violations.push(violation5("high", "status.missing-workflows", "missing required field: workflows"));
   } else if (!Array.isArray(doc.workflows)) {
-    violations.push(violation4("high", "status.invalid-workflows", "workflows must be an array"));
+    violations.push(violation5("high", "status.invalid-workflows", "workflows must be an array"));
   } else {
     const seen = new Set;
     for (const entry of doc.workflows) {
       violations.push(...validateWorkflowEntry(entry).violations);
-      if (isPlainObject3(entry) && typeof entry.id === "string") {
+      if (isPlainObject4(entry) && typeof entry.id === "string") {
         if (seen.has(entry.id)) {
-          violations.push(violation4("medium", "status.workflow.duplicate-id", `duplicate workflow id in workflows[]: ${JSON.stringify(entry.id)}`));
+          violations.push(violation5("medium", "status.workflow.duplicate-id", `duplicate workflow id in workflows[]: ${JSON.stringify(entry.id)}`));
         }
         seen.add(entry.id);
       }
@@ -4920,40 +5056,40 @@ function validateStatusV2(docOrPath, opts = {}) {
   if (harnessDir !== undefined && Array.isArray(doc.workflows)) {
     let realHarnessDir = null;
     try {
-      realHarnessDir = realpathSync2(harnessDir);
+      realHarnessDir = realpathSync(harnessDir);
     } catch {}
     for (const entry of doc.workflows) {
-      if (!isPlainObject3(entry) || typeof entry.dir !== "string")
+      if (!isPlainObject4(entry) || typeof entry.dir !== "string")
         continue;
       const relSnapshot = join6(entry.dir, WORKFLOW_SNAPSHOT_FILE);
       const snapshotPath = join6(harnessDir, relSnapshot);
       const label = typeof entry.id === "string" ? entry.id : relSnapshot;
       let physical;
       try {
-        physical = realpathSync2(snapshotPath);
+        physical = realpathSync(snapshotPath);
       } catch {
-        violations.push(violation4("high", "status.workflow.snapshot-missing", `workflows[] lists ${JSON.stringify(label)} but its snapshot does not exist at ${JSON.stringify(relSnapshot)} \u2014 the root holds active lifecycles only; unregister the id when its snapshot is removed`));
+        violations.push(violation5("high", "status.workflow.snapshot-missing", `workflows[] lists ${JSON.stringify(label)} but its snapshot does not exist at ${JSON.stringify(relSnapshot)} \u2014 the root holds active lifecycles only; unregister the id when its snapshot is removed`));
         continue;
       }
       if (realHarnessDir !== null && physical !== realHarnessDir && !physical.startsWith(`${realHarnessDir}${sep}`)) {
-        violations.push(violation4("high", "status.workflow.snapshot-outside-harness", `workflows[] lists ${JSON.stringify(label)} but its snapshot resolves outside the harness dir (${JSON.stringify(physical)}) \u2014 symlinked snapshot paths are rejected; the snapshot must physically live under ${JSON.stringify(harnessDir)}`));
+        violations.push(violation5("high", "status.workflow.snapshot-outside-harness", `workflows[] lists ${JSON.stringify(label)} but its snapshot resolves outside the harness dir (${JSON.stringify(physical)}) \u2014 symlinked snapshot paths are rejected; the snapshot must physically live under ${JSON.stringify(harnessDir)}`));
         continue;
       }
       let snapshot;
       try {
         snapshot = readJson(snapshotPath);
       } catch (error) {
-        violations.push(violation4("high", "status.workflow.snapshot-invalid", `snapshot at ${JSON.stringify(relSnapshot)} is not valid JSON: ${error.message}`));
+        violations.push(violation5("high", "status.workflow.snapshot-invalid", `snapshot at ${JSON.stringify(relSnapshot)} is not valid JSON: ${error.message}`));
         continue;
       }
       if (typeof snapshot.status === "string" && WORKFLOW_TERMINAL_STATUSES.includes(snapshot.status)) {
-        violations.push(violation4("high", "status.workflow.terminal-listed", `workflows[] lists ${JSON.stringify(label)} whose snapshot status is terminal (${snapshot.status}) \u2014 removal-at-terminal: terminal writers unregister AFTER the snapshot write`));
+        violations.push(violation5("high", "status.workflow.terminal-listed", `workflows[] lists ${JSON.stringify(label)} whose snapshot status is terminal (${snapshot.status}) \u2014 removal-at-terminal: terminal writers unregister AFTER the snapshot write`));
       }
       if (typeof entry.type === "string" && typeof snapshot.type === "string" && entry.type !== snapshot.type) {
-        violations.push(violation4("medium", "status.workflow.mismatched-type", `workflows[] entry ${JSON.stringify(label)} type ${JSON.stringify(entry.type)} does not match its snapshot type ${JSON.stringify(snapshot.type)} \u2014 the root entry mirrors the snapshot; align them`));
+        violations.push(violation5("medium", "status.workflow.mismatched-type", `workflows[] entry ${JSON.stringify(label)} type ${JSON.stringify(entry.type)} does not match its snapshot type ${JSON.stringify(snapshot.type)} \u2014 the root entry mirrors the snapshot; align them`));
       }
       if (typeof entry.started_at === "string" && typeof snapshot.started_at === "string" && entry.started_at !== snapshot.started_at) {
-        violations.push(violation4("medium", "status.workflow.mismatched-started-at", `workflows[] entry ${JSON.stringify(label)} started_at ${JSON.stringify(entry.started_at)} does not match its snapshot started_at ${JSON.stringify(snapshot.started_at)} \u2014 workflow ${JSON.stringify(label)} collided with another writer (e.g. a concurrent/re-run \`audit promote\` with the same workflow id rewrote the snapshot); the root entry mirrors the snapshot \u2014 align them or remove the colliding workflow`));
+        violations.push(violation5("medium", "status.workflow.mismatched-started-at", `workflows[] entry ${JSON.stringify(label)} started_at ${JSON.stringify(entry.started_at)} does not match its snapshot started_at ${JSON.stringify(snapshot.started_at)} \u2014 workflow ${JSON.stringify(label)} collided with another writer (e.g. a concurrent/re-run \`audit promote\` with the same workflow id rewrote the snapshot); the root entry mirrors the snapshot \u2014 align them or remove the colliding workflow`));
       }
     }
   }
@@ -4961,7 +5097,7 @@ function validateStatusV2(docOrPath, opts = {}) {
 }
 var validateStatus = validateStatusV2;
 function registerWorkflowEntryLocked(statusPath, entry) {
-  const harnessDir = dirname5(statusPath);
+  const harnessDir = dirname4(statusPath);
   const current = readJson(statusPath);
   const fresh = Object.keys(current).length === 0;
   const doc = fresh ? { version: 2, updated_at: todayString(), workflows: [] } : current;
@@ -4982,15 +5118,336 @@ function registerWorkflowEntryLocked(statusPath, entry) {
   writeJson(statusPath, doc);
   return doc;
 }
-var DEFAULT_PROBE_TIMEOUT_MS = 1e4;
-function probeTimeoutMs() {
-  const raw = process.env.MSTAR_GIT_PROBE_TIMEOUT_MS;
-  if (raw === undefined || raw.trim() === "")
-    return DEFAULT_PROBE_TIMEOUT_MS;
-  const parsed = Number(raw);
-  return Number.isFinite(parsed) && parsed > 0 ? parsed : DEFAULT_PROBE_TIMEOUT_MS;
+var PROJECT_ROADMAP_FILE = "roadmap.md";
+var PROJECT_REGISTER_FILE = "residuals.json";
+var _DEFAULT_PROJECT = "_default";
+var ROLLUP_FIELDS = ["total_open", "by_severity", "by_target", "by_plan"];
+function isPlainObject5(value) {
+  return typeof value === "object" && value !== null && !Array.isArray(value);
 }
-function violation5(severity, code, message, fix) {
+function violation6(severity, code, message, fix) {
+  return { ok: false, severity, code, message, fix };
+}
+function findingsCleanupGate(register, planId, opts) {
+  const mode = opts?.mode ?? "allow-residual";
+  const violations = [];
+  const entries = isPlainObject5(register.entries) ? register.entries[planId] : undefined;
+  if (entries === undefined) {
+    return { ok: true, violations };
+  }
+  if (!Array.isArray(entries)) {
+    violations.push(violation6("high", "project.register.invalid-entry-list", `entries[${JSON.stringify(planId)}] must be an array of residual entries (one entry per residual; v1 multi-finding semantics)`));
+    return { ok: false, violations };
+  }
+  if (entries.length === 0) {
+    return { ok: true, violations };
+  }
+  for (const entry of entries) {
+    if (!isOpenResidual(entry))
+      continue;
+    const id = typeof entry.id === "string" ? entry.id : "<unnamed>";
+    const label = `R#${id}`;
+    if (mode === "zero-residual") {
+      if (entry.severity === "nit") {
+        violations.push(violation6("medium", "findings.zero-residual-nit", `${label}: style-only nits must be fixed in-session or dropped \u2014 never left open under zero-residual`));
+      } else if (entry.decision === "risk-accepted" || entry.lifecycle === "waived") {
+        violations.push(violation6("medium", "findings.zero-residual-risk-accepted", `${label}: waived/risk-accepted findings must be closed/archived, not left open under zero-residual`));
+      } else if (entry.decision === "defer") {
+        if (typeof entry.target !== "string" || entry.target.trim() === "") {
+          violations.push(violation6("medium", "findings.zero-residual-defer-no-target", `${label}: blocker-defer requires a target (next iteration/milestone) under zero-residual`));
+        }
+      } else {
+        violations.push(violation6("medium", "findings.zero-residual-open-fixable", `${label}: fixable finding must not remain open under zero-residual \u2014 fix now or convert to a blocker-defer`));
+      }
+    } else if (normalizeSeverity(entry.severity) === "critical") {
+      violations.push(violation6("high", "findings.allow-residual-critical", `${label}: unresolved critical blocks Approve with residuals`));
+    }
+  }
+  return { ok: violations.length === 0, violations };
+}
+function groupCount(values) {
+  const counts = new Map;
+  for (const value of values) {
+    const key = typeof value === "string" ? value : String(value);
+    counts.set(key, (counts.get(key) ?? 0) + 1);
+  }
+  return Object.fromEntries([...counts.entries()].sort(([a], [b]) => a < b ? -1 : a > b ? 1 : 0));
+}
+function techDebtRollup(projectDir) {
+  const items = [];
+  let entries;
+  try {
+    entries = readdirSync3(projectDir, { withFileTypes: true });
+  } catch {
+    entries = [];
+  }
+  for (const project of entries) {
+    if (!project.isDirectory())
+      continue;
+    const registerPath = join7(projectDir, project.name, PROJECT_REGISTER_FILE);
+    if (!existsSync4(registerPath))
+      continue;
+    let register;
+    try {
+      register = readJson(registerPath);
+    } catch {
+      continue;
+    }
+    if (!isPlainObject5(register) || !isPlainObject5(register.entries))
+      continue;
+    for (const [plan, planEntries] of Object.entries(register.entries)) {
+      if (!Array.isArray(planEntries))
+        continue;
+      for (const entry of planEntries) {
+        if (!isPlainObject5(entry) || !isOpenResidual(entry))
+          continue;
+        items.push({ plan, entry });
+      }
+    }
+  }
+  const bySeverity = {};
+  for (const severity of SEVERITY_ORDER) {
+    bySeverity[severity] = items.filter(({ entry }) => normalizeSeverity(entry.severity) === severity).length;
+  }
+  const computed = {
+    total_open: items.length,
+    by_severity: bySeverity,
+    by_target: groupCount(items.map(({ entry }) => entry.target ?? "unspecified")),
+    by_plan: groupCount(items.map(({ plan }) => plan))
+  };
+  const stored = null;
+  const checks = ROLLUP_FIELDS.map((field) => ({ field, status: "DRIFT" }));
+  const overall = "DRIFT";
+  return { computed, stored, checks, overall };
+}
+function resolveHarnessDir(startDir = process.cwd(), opts = {}) {
+  const start = resolve5(startDir);
+  const explicit = opts.harnessDir ?? process.env.MSTAR_HARNESS_DIR;
+  if (explicit)
+    return resolve5(start, explicit);
+  const boundary = resolve5(start, opts.workspaceRoot ?? defaultWorkspaceRoot(start));
+  const rc = loadMstarc(start, boundary);
+  if (rc !== null && rc.config.harnessDir)
+    return resolve5(rc.dir, rc.config.harnessDir);
+  let dir = start;
+  for (;; ) {
+    if (!isAtOrBelow2(dir, boundary))
+      return null;
+    for (const candidate of [join8(dir, ".mstar"), join8(dir, ".agents"), join8(dir, ".plans"), join8(dir, "plans")]) {
+      if (isDirectory(candidate))
+        return candidate;
+    }
+    if (dir === boundary)
+      return null;
+    const parent = dirname5(dir);
+    if (parent === dir)
+      return null;
+    dir = parent;
+  }
+}
+function defaultWorkspaceRoot(startDir) {
+  try {
+    const cdup = execFileSync("git", ["rev-parse", "--show-cdup"], {
+      cwd: startDir,
+      encoding: "utf8",
+      stdio: ["ignore", "pipe", "ignore"]
+    }).trim();
+    if (!cdup)
+      return startDir;
+    let boundary = startDir;
+    for (const segment of cdup.split(/[\\/]/)) {
+      if (segment && segment !== ".")
+        boundary = dirname5(boundary);
+    }
+    return resolve5(boundary);
+  } catch {}
+  return startDir;
+}
+function isAtOrBelow2(dir, root) {
+  const rel = relative2(root, dir);
+  return rel === "" || !rel.startsWith("..") && !isAbsolute3(rel);
+}
+function mstarcDirOverride(harnessDir, key) {
+  const dir = resolve5(harnessDir);
+  const rc = loadMstarc(dir, dirname5(dir));
+  const declared = rc?.config[key];
+  return declared ? resolve5(rc.dir, declared) : null;
+}
+function resolveSpecsDir(harnessDir, opts = {}) {
+  const declared = mstarcDirOverride(harnessDir, "specsDir");
+  if (declared !== null) {
+    if (opts.create !== false)
+      mkdirSync4(declared, { recursive: true });
+    return declared;
+  }
+  const harness = resolve5(harnessDir);
+  const repoRoot = dirname5(harness);
+  const candidates = [
+    join8(harness, "specs"),
+    join8(repoRoot, "docs", "specs"),
+    join8(repoRoot, "specs"),
+    join8(harness, "designs"),
+    join8(repoRoot, "designs")
+  ];
+  for (const candidate of candidates) {
+    if (isDirectory(candidate) && hasFiles(candidate))
+      return candidate;
+  }
+  const fallback = join8(harness, "specs");
+  if (opts.create !== false)
+    mkdirSync4(fallback, { recursive: true });
+  return fallback;
+}
+function assertSafePathComponent(value, what) {
+  if (value === "" || value === "." || value === ".." || !/^[A-Za-z0-9._-]+$/.test(value)) {
+    throw new Error(`${what} must be a single safe path component ([A-Za-z0-9._-]+; not "", ".", "..", or containing "/" or "\\") \u2014 got ${JSON.stringify(value)}`);
+  }
+}
+function resolveSddDir(harnessDir, planId) {
+  assertSafePathComponent(planId, "planId");
+  const base = resolve5(harnessDir);
+  const declared = mstarcDirOverride(base, "sddDir");
+  const sddBase = declared !== null ? declared : join8(base, "sdd");
+  return join8(sddBase, planId);
+}
+function resolveHarnessSubdir(startDir, opts, key, fallback) {
+  const harness = resolveHarnessDir(startDir, opts);
+  if (harness === null) {
+    throw new Error(`harness dir not found from ${resolve5(startDir)} \u2014 cannot resolve the ${fallback} dir (run \`mstar harness scaffold\`, pass opts.harnessDir, or set MSTAR_HARNESS_DIR)`);
+  }
+  const declared = mstarcDirOverride(harness, key);
+  return declared !== null ? declared : join8(resolve5(harness), fallback);
+}
+function resolveWorkflowDir(startDir = process.cwd(), opts = {}) {
+  return resolveHarnessSubdir(startDir, opts, "workflowDir", "workflows");
+}
+function resolveProjectDir(startDir = process.cwd(), opts = {}) {
+  return resolveHarnessSubdir(startDir, opts, "projectDir", "projects");
+}
+var EMPTY_STATUS_TEMPLATE = {
+  version: 2,
+  updated_at: "1970-01-01",
+  workflows: []
+};
+var SCAFFOLD_DIRS = ["plans", "iterations", "knowledge", "specs", "sdd"];
+function resolveScaffoldDirs(root) {
+  const start = resolve5(root);
+  const boundary = resolve5(start, defaultWorkspaceRoot(start));
+  const rc = loadMstarc(start, boundary);
+  const explicit = process.env.MSTAR_HARNESS_DIR;
+  const harnessDir = explicit ? resolve5(start, explicit) : rc !== null && rc.config.harnessDir ? resolve5(rc.dir, rc.config.harnessDir) : join8(start, ".mstar");
+  const declaredProjectDir = mstarcDirOverride(harnessDir, "projectDir");
+  const projectDir = declaredProjectDir !== null ? declaredProjectDir : join8(harnessDir, "projects");
+  return { harnessDir, projectDir };
+}
+var ROADMAP_TEMPLATE = `---
+project_id: _default
+title: Default Project
+status: active
+created_at: {created_at}
+---
+
+# Roadmap
+
+## Direction
+
+State the project direction here.
+`;
+var EMPTY_REGISTER_TEMPLATE = {
+  entries: {}
+};
+function scaffoldHarness(root) {
+  const { harnessDir, projectDir } = resolveScaffoldDirs(root);
+  for (const dir of SCAFFOLD_DIRS)
+    mkdirSync4(join8(harnessDir, dir), { recursive: true });
+  const statusPath = join8(harnessDir, "status.json");
+  if (Object.keys(readJson(statusPath)).length === 0)
+    writeJson(statusPath, EMPTY_STATUS_TEMPLATE);
+  const defaultProjectDir = join8(projectDir, _DEFAULT_PROJECT);
+  mkdirSync4(defaultProjectDir, { recursive: true });
+  const roadmapPath = join8(defaultProjectDir, PROJECT_ROADMAP_FILE);
+  if (!existsSync5(roadmapPath)) {
+    const created = new Date().toISOString().slice(0, 10);
+    writeFileSync3(roadmapPath, ROADMAP_TEMPLATE.replace("{created_at}", created), "utf8");
+  }
+  const registerPath = join8(defaultProjectDir, PROJECT_REGISTER_FILE);
+  if (Object.keys(readJson(registerPath)).length === 0)
+    writeJson(registerPath, EMPTY_REGISTER_TEMPLATE);
+  return harnessDir;
+}
+var GITIGNORE_SNIPPET = `# Morning Star harness (.mstar/)
+# Principle: process stays local; results are shared with the team.
+# Default-ignore everything under .mstar/, then re-include the tracked results.
+.mstar/**
+!.mstar/AGENTS.md
+!.mstar/knowledge/
+!.mstar/knowledge/**
+!.mstar/specs/
+!.mstar/specs/**
+# .mstarc \u2014 repo-local harness config (may declare [config] harness_dir=<name>)
+.mstarc
+`;
+var GITIGNORE_SNIPPET_AGENTS = `# Morning Star harness (.agents/) \u2014 legacy
+# Default-ignore everything under .agents/, then re-include the tracked results.
+.agents/**
+!.agents/AGENTS.md
+!.agents/knowledge/
+!.agents/knowledge/**
+!.agents/specs/
+!.agents/specs/**
+`;
+var GITIGNORE_PROCESS_ENTRIES = GITIGNORE_SNIPPET.split(`
+`).filter((line) => line.startsWith(".mstar/") || line.startsWith("!.mstar/")).map((line) => line.trim());
+var GITIGNORE_PROCESS_ENTRIES_AGENTS = GITIGNORE_SNIPPET_AGENTS.split(`
+`).filter((line) => line.startsWith(".agents/") || line.startsWith("!.agents/")).map((line) => line.trim());
+function emitGitignoreSnippet(kind) {
+  if (kind === "agents")
+    return GITIGNORE_SNIPPET_AGENTS;
+  if (kind === "mstar")
+    return GITIGNORE_SNIPPET;
+  return `${GITIGNORE_SNIPPET}${GITIGNORE_SNIPPET_AGENTS}`;
+}
+function detectHarnessKind(harnessDir) {
+  if (!harnessDir)
+    return null;
+  const name = basename2(resolve5(harnessDir));
+  if (name === ".mstar")
+    return "mstar";
+  if (name === ".agents")
+    return "agents";
+  return null;
+}
+function isDirectory(dir) {
+  try {
+    return statSync3(dir).isDirectory();
+  } catch {
+    return false;
+  }
+}
+function hasFiles(dir) {
+  try {
+    for (const entry of readdirSync4(dir, { withFileTypes: true })) {
+      if (entry.isDirectory()) {
+        if (hasFiles(join8(dir, entry.name)))
+          return true;
+      } else if (entry.isFile()) {
+        return true;
+      }
+    }
+    return false;
+  } catch {
+    return false;
+  }
+}
+var DEFAULT_PROBE_TIMEOUT_MS = 1e4;
+function probeTimeoutMs() {
+  const raw = process.env.MSTAR_GIT_PROBE_TIMEOUT_MS;
+  if (raw === undefined || raw.trim() === "")
+    return DEFAULT_PROBE_TIMEOUT_MS;
+  const parsed = Number(raw);
+  return Number.isFinite(parsed) && parsed > 0 ? parsed : DEFAULT_PROBE_TIMEOUT_MS;
+}
+function violation7(severity, code, message, fix) {
   return { ok: false, severity, code, message, fix };
 }
 function gate(violations) {
@@ -5024,25 +5481,25 @@ function l1PreDispatchCheck(input, opts = {}) {
   const violations = [];
   const { controlWorktreePath, leaseWorktreePath, leaseWorkingBranch, planId } = input;
   if (controlWorktreePath.trim() === "") {
-    violations.push(violation5("high", "worktree.l1.control-missing", "metadata.control_worktree_path is not recorded \u2014 the L1 control worktree (integration-branch checkout) must be recorded in status.json before writable dispatch", "record the control worktree path in status.json metadata.control_worktree_path"));
+    violations.push(violation7("high", "worktree.l1.control-missing", "metadata.control_worktree_path is not recorded \u2014 the L1 control worktree (integration-branch checkout) must be recorded in status.json before writable dispatch", "record the control worktree path in status.json metadata.control_worktree_path"));
   }
   if (leaseWorktreePath.trim() === "") {
-    violations.push(violation5("high", "worktree.l1.lease-missing", `execution_lease.worktree_path is empty for plan "${planId}" \u2014 no verified execution_lease to dispatch against`, "claim the execution_lease with an absolute feature worktree path before dispatch"));
+    violations.push(violation7("high", "worktree.l1.lease-missing", `execution_lease.worktree_path is empty for plan "${planId}" \u2014 no verified execution_lease to dispatch against`, "claim the execution_lease with an absolute feature worktree path before dispatch"));
   }
   if (leaseWorkingBranch.trim() === "") {
-    violations.push(violation5("high", "worktree.l1.lease-branch-missing", `execution_lease.working_branch is empty for plan "${planId}"`, "record the lease working_branch before dispatch"));
+    violations.push(violation7("high", "worktree.l1.lease-branch-missing", `execution_lease.working_branch is empty for plan "${planId}"`, "record the lease working_branch before dispatch"));
   }
   if (controlWorktreePath !== "" && leaseWorktreePath !== "" && resolve6(controlWorktreePath) === resolve6(leaseWorktreePath)) {
-    violations.push(violation5("critical", "worktree.l1.lease-equals-control", `execution_lease.worktree_path "${leaseWorktreePath}" equals metadata.control_worktree_path \u2014 the feature worktree MUST differ from the control worktree (L1 isolation; product edits never land in the control checkout)`, "use a distinct feature worktree for the plan (git worktree add <path> <branch>) and update the lease"));
+    violations.push(violation7("critical", "worktree.l1.lease-equals-control", `execution_lease.worktree_path "${leaseWorktreePath}" equals metadata.control_worktree_path \u2014 the feature worktree MUST differ from the control worktree (L1 isolation; product edits never land in the control checkout)`, "use a distinct feature worktree for the plan (git worktree add <path> <branch>) and update the lease"));
   }
-  if (leaseWorktreePath !== "" && !existsSync4(leaseWorktreePath)) {
-    violations.push(violation5("high", "worktree.l1.feature-missing", `feature worktree directory "${leaseWorktreePath}" does not exist for plan "${planId}"`, `create it before dispatch: git worktree add ${leaseWorktreePath} <working-branch>`));
+  if (leaseWorktreePath !== "" && !existsSync6(leaseWorktreePath)) {
+    violations.push(violation7("high", "worktree.l1.feature-missing", `feature worktree directory "${leaseWorktreePath}" does not exist for plan "${planId}"`, `create it before dispatch: git worktree add ${leaseWorktreePath} <working-branch>`));
   } else if (leaseWorktreePath !== "" && leaseWorkingBranch !== "") {
     const probe = probeBranch(leaseWorktreePath, opts);
     if ("error" in probe) {
-      violations.push(violation5("high", "worktree.l1.branch-probe-failed", `cannot probe branch at "${leaseWorktreePath}" for plan "${planId}": ${probe.error}`, "verify the path is a git worktree checkout on the lease working branch (not detached)"));
+      violations.push(violation7("high", "worktree.l1.branch-probe-failed", `cannot probe branch at "${leaseWorktreePath}" for plan "${planId}": ${probe.error}`, "verify the path is a git worktree checkout on the lease working branch (not detached)"));
     } else if (probe.branch !== leaseWorkingBranch) {
-      violations.push(violation5("high", "worktree.l1.branch-mismatch", `feature worktree "${leaseWorktreePath}" is on branch "${probe.branch}", expected execution_lease.working_branch "${leaseWorkingBranch}" (plan "${planId}")`, `checkout ${leaseWorkingBranch} in the feature worktree`));
+      violations.push(violation7("high", "worktree.l1.branch-mismatch", `feature worktree "${leaseWorktreePath}" is on branch "${probe.branch}", expected execution_lease.working_branch "${leaseWorkingBranch}" (plan "${planId}")`, `checkout ${leaseWorkingBranch} in the feature worktree`));
     }
   }
   return gate(violations);
@@ -5052,32 +5509,32 @@ function l2PreDispatchCheck(input, opts = {}) {
   const tracks = input.tracks ?? [];
   const seenPaths = new Set;
   if (tracks.length < 1) {
-    violations.push(violation5("high", "worktree.l2.no-tracks", "no parallel writable tracks \u2014 the L2 pre-dispatch checklist requires at least one track with an absolute worktreePath and Working branch", "pass each track's absolute Worktree path and PM-approved Working branch"));
+    violations.push(violation7("high", "worktree.l2.no-tracks", "no parallel writable tracks \u2014 the L2 pre-dispatch checklist requires at least one track with an absolute worktreePath and Working branch", "pass each track's absolute Worktree path and PM-approved Working branch"));
   }
   tracks.forEach((track, index) => {
     if (track.worktreePath.trim() === "" || track.workingBranch.trim() === "") {
-      violations.push(violation5("high", "worktree.l2.track-invalid", `track ${index + 1} is missing worktreePath and/or workingBranch`, "fill both fields for every track"));
+      violations.push(violation7("high", "worktree.l2.track-invalid", `track ${index + 1} is missing worktreePath and/or workingBranch`, "fill both fields for every track"));
       return;
     }
     if (!isAbsolute4(track.worktreePath)) {
-      violations.push(violation5("high", "worktree.l2.track-path-relative", `track ${index + 1} worktreePath "${track.worktreePath}" is not an absolute path \u2014 L2 tracks MUST use absolute worktree checkout paths (consistent with the lease validator's absolute worktree_path enforcement)`, `use an absolute path for track ${index + 1} (e.g. /Users/<you>/worktrees/<branch>)`));
+      violations.push(violation7("high", "worktree.l2.track-path-relative", `track ${index + 1} worktreePath "${track.worktreePath}" is not an absolute path \u2014 L2 tracks MUST use absolute worktree checkout paths (consistent with the lease validator's absolute worktree_path enforcement)`, `use an absolute path for track ${index + 1} (e.g. /Users/<you>/worktrees/<branch>)`));
       return;
     }
     const normalized = resolve6(track.worktreePath);
     if (seenPaths.has(normalized)) {
-      violations.push(violation5("high", "worktree.l2.track-path-collision", `duplicate worktreePath "${track.worktreePath}" across parallel tracks \u2014 L2 parallel-writable isolation requires a distinct absolute Worktree path per track (N parallel invokes \u2260 isolation)`, "give every parallel track its own git worktree checkout"));
+      violations.push(violation7("high", "worktree.l2.track-path-collision", `duplicate worktreePath "${track.worktreePath}" across parallel tracks \u2014 L2 parallel-writable isolation requires a distinct absolute Worktree path per track (N parallel invokes \u2260 isolation)`, "give every parallel track its own git worktree checkout"));
       return;
     }
     seenPaths.add(normalized);
-    if (!existsSync4(track.worktreePath)) {
-      violations.push(violation5("high", "worktree.l2.track-missing", `track worktree directory "${track.worktreePath}" does not exist`, `create it before dispatch: git worktree add ${track.worktreePath} ${track.workingBranch}`));
+    if (!existsSync6(track.worktreePath)) {
+      violations.push(violation7("high", "worktree.l2.track-missing", `track worktree directory "${track.worktreePath}" does not exist`, `create it before dispatch: git worktree add ${track.worktreePath} ${track.workingBranch}`));
       return;
     }
     const probe = probeBranch(track.worktreePath, opts);
     if ("error" in probe) {
-      violations.push(violation5("high", "worktree.l2.branch-probe-failed", `cannot probe branch at "${track.worktreePath}": ${probe.error}`, "verify the path is a git worktree checkout on its Working branch (not detached)"));
+      violations.push(violation7("high", "worktree.l2.branch-probe-failed", `cannot probe branch at "${track.worktreePath}": ${probe.error}`, "verify the path is a git worktree checkout on its Working branch (not detached)"));
     } else if (probe.branch !== track.workingBranch) {
-      violations.push(violation5("high", "worktree.l2.branch-mismatch", `track worktree "${track.worktreePath}" is on branch "${probe.branch}", expected Working branch "${track.workingBranch}"`, `checkout ${track.workingBranch} in that worktree`));
+      violations.push(violation7("high", "worktree.l2.branch-mismatch", `track worktree "${track.worktreePath}" is on branch "${probe.branch}", expected Working branch "${track.workingBranch}"`, `checkout ${track.workingBranch} in that worktree`));
     }
   });
   return gate(violations);
@@ -5093,7 +5550,7 @@ function assertQcAlignment(assignments) {
   for (const { key, label } of QC_ALIGNMENT_FIELDS) {
     const distinct = [...new Set(list.map((a) => a[key]))];
     if (distinct.length > 1) {
-      violations.push(violation5("high", "qc.alignment.mismatch", `QC/QA alignment field "${label}" is not byte-identical across ${list.length} assignments: ${distinct.map((v) => `"${v}"`).join(" vs ")}`, `copy the same ${label} value verbatim into every QC tri and QA Assignment`));
+      violations.push(violation7("high", "qc.alignment.mismatch", `QC/QA alignment field "${label}" is not byte-identical across ${list.length} assignments: ${distinct.map((v) => `"${v}"`).join(" vs ")}`, `copy the same ${label} value verbatim into every QC tri and QA Assignment`));
     }
   }
   return gate(violations);
@@ -5134,14 +5591,14 @@ function gitOut(cwd, args) {
   }
 }
 function probeHarnessWithStatus(root) {
-  if (isFile2(join7(root, ".mstar", "status.json")))
-    return join7(root, ".mstar");
-  if (isFile2(join7(root, ".agents", "status.json")))
-    return join7(root, ".agents");
-  if (hasWorkflowSnapshot(join7(root, ".mstar")))
-    return join7(root, ".mstar");
-  if (hasWorkflowSnapshot(join7(root, ".agents")))
-    return join7(root, ".agents");
+  if (isFile2(join9(root, ".mstar", "status.json")))
+    return join9(root, ".mstar");
+  if (isFile2(join9(root, ".agents", "status.json")))
+    return join9(root, ".agents");
+  if (hasWorkflowSnapshot(join9(root, ".mstar")))
+    return join9(root, ".mstar");
+  if (hasWorkflowSnapshot(join9(root, ".agents")))
+    return join9(root, ".agents");
   return null;
 }
 function hasWorkflowSnapshot(harnessDir) {
@@ -5149,13 +5606,13 @@ function hasWorkflowSnapshot(harnessDir) {
   try {
     workflowsDir = resolveWorkflowDir(harnessDir, { harnessDir });
   } catch {
-    workflowsDir = join7(harnessDir, "workflows");
+    workflowsDir = join9(harnessDir, "workflows");
   }
   if (!isDirectory2(workflowsDir))
     return false;
   try {
-    for (const entry of readdirSync3(workflowsDir, { withFileTypes: true })) {
-      if (entry.isDirectory() && isFile2(join7(workflowsDir, entry.name, "snapshot.json")))
+    for (const entry of readdirSync5(workflowsDir, { withFileTypes: true })) {
+      if (entry.isDirectory() && isFile2(join9(workflowsDir, entry.name, "snapshot.json")))
         return true;
     }
   } catch {
@@ -5168,14 +5625,14 @@ function isLinkedWorktree(root) {
   const commonRaw = gitOut(root, ["rev-parse", "--git-common-dir"]);
   if (gitDirRaw === null || commonRaw === null)
     return false;
-  const gitDir = isAbsolute5(gitDirRaw) ? gitDirRaw : join7(root, gitDirRaw);
-  const common2 = isAbsolute5(commonRaw) ? commonRaw : join7(root, commonRaw);
+  const gitDir = isAbsolute5(gitDirRaw) ? gitDirRaw : join9(root, gitDirRaw);
+  const common2 = isAbsolute5(commonRaw) ? commonRaw : join9(root, commonRaw);
   if (gitDir.includes("/.git/worktrees/") || gitDir.includes("/worktrees/"))
     return true;
   try {
     const gdParent = realpathSync3(dirname6(gitDir));
     const cmAbs = realpathSync3(common2);
-    return join7(gdParent, basename3(gitDir)) !== cmAbs && gitDir !== cmAbs;
+    return join9(gdParent, basename3(gitDir)) !== cmAbs && gitDir !== cmAbs;
   } catch {
     return false;
   }
@@ -5209,25 +5666,25 @@ function sddWorkspace(planId, opts = {}) {
     harnessDir = resolve7(root, harnessOverride);
   } else {
     const rc = findMstarc(root, root);
-    const rcHarnessDir = rc !== null ? parseMstarc(readFileSync5(rc, "utf8")).harnessDir : undefined;
+    const rcHarnessDir = rc !== null ? parseMstarc(readFileSync7(rc, "utf8")).harnessDir : undefined;
     if (rcHarnessDir) {
       harnessDir = resolve7(rc !== null ? dirname6(rc) : root, rcHarnessDir);
     } else {
       const probed = probeHarnessWithStatus(root);
       if (probed) {
         harnessDir = probed;
-      } else if (isDirectory2(join7(root, ".mstar"))) {
-        harnessDir = join7(root, ".mstar");
-      } else if (isDirectory2(join7(root, ".agents"))) {
-        harnessDir = join7(root, ".agents");
+      } else if (isDirectory2(join9(root, ".mstar"))) {
+        harnessDir = join9(root, ".mstar");
+      } else if (isDirectory2(join9(root, ".agents"))) {
+        harnessDir = join9(root, ".agents");
       } else {
-        harnessDir = join7(root, ".mstar");
+        harnessDir = join9(root, ".mstar");
       }
     }
   }
   const sddDir = resolveSddDir(harnessDir, planId);
   mkdirSync5(sddDir, { recursive: true });
-  writeFileSync3(join7(sddDir, ".gitignore"), `*
+  writeFileSync4(join9(sddDir, ".gitignore"), `*
 `);
   return realpathSync3(sddDir);
 }
@@ -5237,480 +5694,92 @@ function taskBrief(planFile, taskN, outFile, opts = {}) {
   }
   let content;
   try {
-    content = readFileSync5(planFile, "utf8");
+    content = readFileSync7(planFile, "utf8");
   } catch {
     throw new SddScriptError(`no such plan file: ${planFile}`, 2);
   }
   let out;
   if (outFile) {
-    out = outFile;
-  } else {
-    const sddDir = opts.sddDir ?? process.env.SDD_DIR;
-    if (!sddDir) {
-      throw new SddScriptError("mstar sdd task-brief: set SDD_DIR or pass OUTFILE (run mstar sdd workspace PLAN_ID first)", 2);
-    }
-    mkdirSync5(sddDir, { recursive: true });
-    out = join7(sddDir, `task-${taskN}-brief.md`);
-  }
-  const records = content.endsWith(`
-`) ? content.split(`
-`).slice(0, -1) : content.split(`
-`);
-  const headingRe = /^#+[ \t]+Task[ \t]+[0-9]+/;
-  const targetRe = new RegExp(`^#+[ 	]+Task[ 	]+${taskN}([^0-9]|$)`);
-  let infence = false;
-  let intask = false;
-  const printed = [];
-  for (const line of records) {
-    if (/^```/.test(line))
-      infence = !infence;
-    if (!infence && headingRe.test(line))
-      intask = targetRe.test(line);
-    if (intask)
-      printed.push(line);
-  }
-  const output = printed.length > 0 ? `${printed.join(`
-`)}
-` : "";
-  writeFileSync3(out, output);
-  if (printed.length === 0) {
-    throw new SddScriptError(`task ${taskN} not found in ${planFile} (no heading matching Task ${taskN})`, 3);
-  }
-  return out;
-}
-function reviewPackage(base, head, outFile, opts = {}) {
-  if (!base || !head) {
-    throw new SddScriptError("usage: mstar sdd review-package BASE HEAD [OUTFILE]", 2);
-  }
-  const cwd = opts.cwd ?? process.cwd();
-  const verifyRef = (ref, what) => {
-    try {
-      execFileSync3("git", ["rev-parse", "--verify", "--quiet", ref], { cwd, stdio: ["ignore", "pipe", "pipe"] });
-    } catch {
-      throw new SddScriptError(`bad ${what}: ${ref}`, 2);
-    }
-  };
-  verifyRef(base, "BASE");
-  verifyRef(head, "HEAD");
-  let out;
-  if (outFile) {
-    out = outFile;
-  } else {
-    const sddDir = opts.sddDir ?? process.env.SDD_DIR;
-    if (!sddDir) {
-      throw new SddScriptError("mstar sdd review-package: set SDD_DIR or pass OUTFILE", 2);
-    }
-    mkdirSync5(sddDir, { recursive: true });
-    const shortBase = gitOut(cwd, ["rev-parse", "--short", base]) ?? base;
-    const shortHead = gitOut(cwd, ["rev-parse", "--short", head]) ?? head;
-    out = join7(sddDir, `review-${shortBase}..${shortHead}.diff`);
-  }
-  const run = (args) => execFileSync3("git", args, { cwd, maxBuffer: GIT_CAPTURE_MAX_BYTES });
-  const parts = [
-    Buffer.from(`# Review package: ${base}..${head}
-
-## Commits
-`),
-    run(["log", "--oneline", `${base}..${head}`]),
-    Buffer.from(`
-## Files changed
-`),
-    run(["diff", "--stat", `${base}..${head}`]),
-    Buffer.from(`
-## Diff
-`),
-    run(["diff", "-U10", `${base}..${head}`])
-  ];
-  writeFileSync3(out, Buffer.concat(parts));
-  return out;
-}
-var COMPASS_STATUSES = ["active", "locked", "completed"];
-var DATE_RE2 = /^\d{4}-\d{2}-\d{2}$/;
-var PLAN_STATUS_DONE = "Done";
-function typeName(value) {
-  if (value === null)
-    return "null";
-  if (Array.isArray(value))
-    return "array";
-  return typeof value;
-}
-function validateCompassShape(doc) {
-  const issues = [];
-  const expectString = (key, opts = {}) => {
-    const value = doc[key];
-    if (typeof value !== "string") {
-      issues.push({ path: [key], message: `expected string, received ${typeName(value)}` });
-      return;
-    }
-    if (opts.min !== undefined && value.length < opts.min) {
-      issues.push({ path: [key], message: `string must contain at least ${opts.min} character(s)` });
-      return;
-    }
-    if (opts.regex !== undefined && !opts.regex.test(value)) {
-      issues.push({ path: [key], message: `string must match ${opts.regex}` });
-    }
-  };
-  expectString("iteration_id", { min: 1 });
-  expectString("start_date", { regex: DATE_RE2 });
-  const status = doc.status;
-  if (typeof status !== "string" || !COMPASS_STATUSES.includes(status)) {
-    issues.push({
-      path: ["status"],
-      message: `expected one of ${COMPASS_STATUSES.map((s) => `'${s}'`).join(" | ")}, received ${typeName(status)}`
-    });
-  }
-  expectString("iteration_base_branch", { min: 1 });
-  expectString("target_branch", { min: 1 });
-  const plans = doc.plans;
-  if (plans !== undefined) {
-    if (!Array.isArray(plans)) {
-      issues.push({ path: ["plans"], message: `expected array, received ${typeName(plans)}` });
-    } else {
-      plans.forEach((entry, index) => {
-        if (typeof entry !== "string") {
-          issues.push({ path: ["plans", index], message: `expected string, received ${typeName(entry)}` });
-        } else if (entry.length < 1) {
-          issues.push({ path: ["plans", index], message: "string must contain at least 1 character(s)" });
-        }
-      });
-    }
-  }
-  const end_date = doc.end_date;
-  if (end_date !== undefined) {
-    if (typeof end_date !== "string") {
-      issues.push({ path: ["end_date"], message: `expected string, received ${typeName(end_date)}` });
-    } else if (!DATE_RE2.test(end_date)) {
-      issues.push({ path: ["end_date"], message: `string must match ${DATE_RE2}` });
-    }
-  }
-  if (issues.length > 0)
-    return { ok: false, issues };
-  return {
-    ok: true,
-    data: {
-      iteration_id: doc.iteration_id,
-      start_date: doc.start_date,
-      status,
-      iteration_base_branch: doc.iteration_base_branch,
-      target_branch: doc.target_branch,
-      ...plans !== undefined ? { plans } : {},
-      ...end_date !== undefined ? { end_date } : {}
-    }
-  };
-}
-function violation6(severity, code, message, fix) {
-  return { ok: false, severity, code, message, fix };
-}
-function isPlainObject4(value) {
-  return typeof value === "object" && value !== null && !Array.isArray(value);
-}
-function validateCompassFrontmatter(doc) {
-  if (!isPlainObject4(doc)) {
-    return {
-      ok: false,
-      violations: [
-        violation6("medium", "COMPASS_INVALID_FIELD", "Compass frontmatter must be a YAML object with iteration_id / start_date / status / iteration_base_branch / target_branch (template: mstar-iteration \u00a71.3)", "Fix the frontmatter of {ITERATION_DIR}/<iteration-id>/delivery-compass.md")
-      ]
-    };
-  }
-  const parsed = validateCompassShape(doc);
-  if (!parsed.ok) {
-    return {
-      ok: false,
-      violations: parsed.issues.map((issue) => {
-        const field = issue.path.join(".") || "(root)";
-        return violation6("medium", "COMPASS_INVALID_FIELD", `Compass frontmatter field '${field}' is invalid: ${issue.message}`, `Fix '${field}' in {ITERATION_DIR}/<iteration-id>/delivery-compass.md frontmatter (template: mstar-iteration \u00a71.3)`);
-      })
-    };
-  }
-  const violations = [];
-  const { status, end_date } = parsed.data;
-  if (status === "completed" && end_date === undefined) {
-    violations.push(violation6("high", "COMPASS_END_DATE_REQUIRED", "Compass frontmatter status is 'completed' but end_date is missing \u2014 end_date is required at iteration-close (mstar-iteration \u00a73.4, template Fields guide)", "Add `end_date: YYYY-MM-DD` to the frontmatter"));
-  }
-  if (status !== "completed" && end_date !== undefined) {
-    violations.push(violation6("medium", "COMPASS_END_DATE_NOT_ALLOWED", `Compass frontmatter sets end_date while status is '${status}' \u2014 end_date is only written at iteration-close (mstar-iteration \u00a73.4)`, "Remove end_date until iteration-close"));
-  }
-  return { ok: violations.length === 0, violations };
-}
-function registeredPlanIds(compassDoc) {
-  if (!Array.isArray(compassDoc.plans))
-    return [];
-  return compassDoc.plans.filter((plan) => typeof plan === "string" && plan.length > 0);
-}
-function findPlanRow(snapshotDoc, planId) {
-  if (!Array.isArray(snapshotDoc.plans))
-    return null;
-  for (const row of snapshotDoc.plans) {
-    if (!isPlainObject4(row))
-      continue;
-    const rowId = typeof row.id === "string" ? row.id : typeof row.plan_id === "string" ? row.plan_id : null;
-    if (rowId === planId)
-      return row;
-  }
-  return null;
-}
-function entryPlansAllDone(snapshotDoc, registered) {
-  const violations = [];
-  if (registered.length === 0) {
-    violations.push(violation6("medium", "COMPASS_NO_PLANS", "Compass frontmatter registers no plans \u2014 the all-plans-Done transition cannot be verified (mstar-iteration \u00a71.3 / Phase transition gates)", "List the iteration's plan ids in the compass frontmatter `plans`"));
-    return violations;
-  }
-  for (const planId of registered) {
-    const row = findPlanRow(snapshotDoc, planId);
-    if (row === null) {
-      violations.push(violation6("high", "PLAN_NOT_IN_STATUS", `Plan '${planId}' is registered in the compass frontmatter but has no row in the workflow snapshot plans[] (mstar-iteration \u00a73.1 entry item 1)`, "Add the plan row to {HARNESS_DIR}/workflows/<id>/snapshot.json"));
-      continue;
-    }
-    if (row.status !== PLAN_STATUS_DONE) {
-      violations.push(violation6("high", "PLAN_NOT_DONE", `Plan '${planId}' status is ${JSON.stringify(row.status)} in the workflow snapshot \u2014 all compass-registered plans must be 'Done' before iteration-close (mstar-iteration \u00a73.1 entry item 1)`));
-    }
-  }
-  return violations;
-}
-function entryFrontmatterComplete(compassDoc) {
-  return validateCompassFrontmatter(compassDoc).violations;
-}
-function exitFrontmatterClosed(compassDoc) {
-  const violations = [];
-  if (compassDoc.status !== "completed") {
-    violations.push(violation6("high", "EXIT_STATUS_NOT_COMPLETED", `Compass frontmatter status must be 'completed' at close exit \u2014 current: ${JSON.stringify(compassDoc.status)} (mstar-iteration \u00a73.4 / \u00a73.5 exit item 4)`));
-  }
-  const endDate = compassDoc.end_date;
-  if (typeof endDate !== "string" || !DATE_RE2.test(endDate)) {
-    violations.push(violation6("high", "EXIT_END_DATE_REQUIRED", "Compass frontmatter end_date (YYYY-MM-DD) is required when closing (mstar-iteration \u00a73.4 / \u00a73.5 exit item 4)"));
-  }
-  return violations;
-}
-function exitBranchCheck(opts) {
-  const violations = [];
-  const { currentBranch, specIntegrationBranch } = opts;
-  if (currentBranch === undefined || specIntegrationBranch === undefined) {
-    violations.push(violation6("medium", "EXIT_BRANCH_UNVERIFIABLE", "Cannot verify the current branch is spec_integration_branch \u2014 missing currentBranch / specIntegrationBranch probe inputs (mstar-iteration \u00a73.5 exit item 5)"));
-  } else if (currentBranch !== specIntegrationBranch) {
-    violations.push(violation6("high", "EXIT_BRANCH_MISMATCH", `Current branch '${currentBranch}' is not the spec_integration_branch '${specIntegrationBranch}' (mstar-iteration \u00a73.5 exit item 5)`));
-  }
-  return violations;
-}
-function exitPrBaseCheck(compassDoc, opts) {
-  const violations = [];
-  const target = compassDoc.target_branch;
-  const { prBaseBranch } = opts;
-  if (prBaseBranch === undefined) {
-    violations.push(violation6("medium", "EXIT_PR_BASE_UNVERIFIABLE", "Cannot verify the PR base \u2014 missing prBaseBranch probe input (mstar-iteration \u00a73.5 exit item 6)"));
-  } else if (typeof target !== "string" || prBaseBranch !== target) {
-    violations.push(violation6("high", "EXIT_PR_BASE_MISMATCH", `PR base '${prBaseBranch}' must equal the compass target_branch '${String(target)}' \u2014 not an undocumented branch (mstar-iteration \u00a73.5 exit item 6)`));
-  }
-  return violations;
-}
-function evaluatePhaseGate(snapshotDoc, compassDoc, opts = {}) {
-  const registered = registeredPlanIds(compassDoc);
-  const entryViolations = [
-    ...entryPlansAllDone(snapshotDoc, registered),
-    ...entryFrontmatterComplete(compassDoc)
-  ];
-  const exitViolations = [
-    ...exitFrontmatterClosed(compassDoc),
-    ...exitBranchCheck(opts),
-    ...exitPrBaseCheck(compassDoc, opts)
-  ];
-  const allPlansDone = registered.length > 0 && registered.every((planId) => {
-    const row = findPlanRow(snapshotDoc, planId);
-    return row !== null && row.status === PLAN_STATUS_DONE;
-  });
-  const entry = { ok: entryViolations.length === 0, violations: entryViolations };
-  const exit = { ok: exitViolations.length === 0, violations: exitViolations };
-  let transition;
-  if (!allPlansDone)
-    transition = "phase-2-execute";
-  else if (entry.ok && exit.ok)
-    transition = "phase-4-pr-delivery";
-  else
-    transition = "phase-3-close";
-  const gateBlocking = allPlansDone ? [...entryViolations, ...exitViolations] : [];
-  return {
-    transition,
-    allPlansDone,
-    entry,
-    exit,
-    ok: gateBlocking.length === 0,
-    violations: gateBlocking
-  };
-}
-function pushCadenceProbe(ciRunning, reviewWaveActive) {
-  const violations = [];
-  if (ciRunning) {
-    violations.push(violation6("high", "PUSH_BLOCKED_CI", "CI checks are still queued/in_progress on the current head \u2014 do not push until the wave completes (mstar-iteration \u00a75.1a push gate 1)", "Wait for CI to settle, then push once with the whole local batch"));
-  }
-  if (reviewWaveActive) {
-    violations.push(violation6("high", "PUSH_BLOCKED_REVIEW_WAVE", "An AI/bot review wave is still running on the current head \u2014 do not push until it settles (mstar-iteration \u00a75.1a push gate 2)", "Wait for the review wave, then push once"));
-  }
-  return { ok: violations.length === 0, violations };
-}
-function parseCompassFrontmatter(filePath) {
-  return parseCompassFrontmatterText(readFileSync6(filePath, "utf8"), filePath);
-}
-function parseCompassFrontmatterText(content, filePath) {
-  const lines = content.split(/\r?\n/);
-  if (lines[0]?.trim() !== "---") {
-    throw new Error(`no YAML frontmatter fence in ${filePath} (expected first line "---")`);
-  }
-  const end = lines.indexOf("---", 1);
-  if (end === -1) {
-    throw new Error(`unterminated YAML frontmatter in ${filePath} (no closing "---")`);
-  }
-  const doc = {};
-  let listKey = null;
-  for (let i = 1;i < end; i += 1) {
-    const line = lines[i] ?? "";
-    if (!line.trim() || line.trim().startsWith("#"))
-      continue;
-    if (listKey !== null && /^\s*-\s+/.test(line)) {
-      const item = line.replace(/^\s*-\s+/, "").trim().replace(/^["']|["']$/g, "");
-      if (!Array.isArray(doc[listKey]))
-        doc[listKey] = [];
-      doc[listKey].push(item);
-      continue;
-    }
-    listKey = null;
-    const kv = line.match(/^([A-Za-z_][A-Za-z0-9_-]*):\s*(.*)$/);
-    if (!kv) {
-      throw new Error(`unsupported frontmatter line in ${filePath}: ${JSON.stringify(line)}`);
-    }
-    const value = kv[2].trim();
-    doc[kv[1]] = value === "" ? null : /^\[.*\]$/.test(value) ? parseFlowArray(value, filePath) : value.replace(/^["']|["']$/g, "");
-    listKey = value === "" ? kv[1] : null;
-  }
-  return doc;
-}
-function parseFlowArray(raw, filePath) {
-  const inner = raw.slice(1, -1);
-  if (/[[\]]/.test(inner)) {
-    throw new Error(`nested flow-style array in ${filePath}: ${JSON.stringify(raw)} \u2014 only flat scalar items are supported (e.g. [a, b])`);
-  }
-  let quote = null;
-  for (const ch of inner) {
-    if (ch === '"' || ch === "'") {
-      if (quote === null)
-        quote = ch;
-      else if (quote === ch)
-        quote = null;
-    } else if (ch === "," && quote !== null) {
-      throw new Error(`ambiguous flow-style array in ${filePath}: ${JSON.stringify(raw)} \u2014 quoted item containing comma cannot be split unambiguously (flat scalar items only)`);
-    }
-  }
-  if (quote !== null) {
-    throw new Error(`unterminated ${quote} quote in flow-style array in ${filePath}: ${JSON.stringify(raw)}`);
-  }
-  const items = [];
-  for (const part of inner.split(",")) {
-    const item = part.trim().replace(/^["']|["']$/g, "");
-    if (item === "")
-      continue;
-    items.push(item);
-  }
-  return items;
-}
-var PROJECT_REGISTER_FILE = "residuals.json";
-var _DEFAULT_PROJECT = "_default";
-var ROLLUP_FIELDS = ["total_open", "by_severity", "by_target", "by_plan"];
-function isPlainObject5(value) {
-  return typeof value === "object" && value !== null && !Array.isArray(value);
-}
-function violation7(severity, code, message, fix) {
-  return { ok: false, severity, code, message, fix };
-}
-function findingsCleanupGate(register, planId, opts) {
-  const mode = opts?.mode ?? "allow-residual";
-  const violations = [];
-  const entries = isPlainObject5(register.entries) ? register.entries[planId] : undefined;
-  if (entries === undefined) {
-    return { ok: true, violations };
-  }
-  if (!Array.isArray(entries)) {
-    violations.push(violation7("high", "project.register.invalid-entry-list", `entries[${JSON.stringify(planId)}] must be an array of residual entries (one entry per residual; v1 multi-finding semantics)`));
-    return { ok: false, violations };
-  }
-  if (entries.length === 0) {
-    return { ok: true, violations };
-  }
-  for (const entry of entries) {
-    if (!isOpenResidual(entry))
-      continue;
-    const id = typeof entry.id === "string" ? entry.id : "<unnamed>";
-    const label = `R#${id}`;
-    if (mode === "zero-residual") {
-      if (entry.severity === "nit") {
-        violations.push(violation7("medium", "findings.zero-residual-nit", `${label}: style-only nits must be fixed in-session or dropped \u2014 never left open under zero-residual`));
-      } else if (entry.decision === "risk-accepted" || entry.lifecycle === "waived") {
-        violations.push(violation7("medium", "findings.zero-residual-risk-accepted", `${label}: waived/risk-accepted findings must be closed/archived, not left open under zero-residual`));
-      } else if (entry.decision === "defer") {
-        if (typeof entry.target !== "string" || entry.target.trim() === "") {
-          violations.push(violation7("medium", "findings.zero-residual-defer-no-target", `${label}: blocker-defer requires a target (next iteration/milestone) under zero-residual`));
-        }
-      } else {
-        violations.push(violation7("medium", "findings.zero-residual-open-fixable", `${label}: fixable finding must not remain open under zero-residual \u2014 fix now or convert to a blocker-defer`));
-      }
-    } else if (normalizeSeverity(entry.severity) === "critical") {
-      violations.push(violation7("high", "findings.allow-residual-critical", `${label}: unresolved critical blocks Approve with residuals`));
+    out = outFile;
+  } else {
+    const sddDir = opts.sddDir ?? process.env.SDD_DIR;
+    if (!sddDir) {
+      throw new SddScriptError("mstar sdd task-brief: set SDD_DIR or pass OUTFILE (run mstar sdd workspace PLAN_ID first)", 2);
     }
+    mkdirSync5(sddDir, { recursive: true });
+    out = join9(sddDir, `task-${taskN}-brief.md`);
   }
-  return { ok: violations.length === 0, violations };
-}
-function groupCount(values) {
-  const counts = new Map;
-  for (const value of values) {
-    const key = typeof value === "string" ? value : String(value);
-    counts.set(key, (counts.get(key) ?? 0) + 1);
+  const records = content.endsWith(`
+`) ? content.split(`
+`).slice(0, -1) : content.split(`
+`);
+  const headingRe = /^#+[ \t]+Task[ \t]+[0-9]+/;
+  const targetRe = new RegExp(`^#+[ 	]+Task[ 	]+${taskN}([^0-9]|$)`);
+  let infence = false;
+  let intask = false;
+  const printed = [];
+  for (const line of records) {
+    if (/^```/.test(line))
+      infence = !infence;
+    if (!infence && headingRe.test(line))
+      intask = targetRe.test(line);
+    if (intask)
+      printed.push(line);
   }
-  return Object.fromEntries([...counts.entries()].sort(([a], [b]) => a < b ? -1 : a > b ? 1 : 0));
+  const output = printed.length > 0 ? `${printed.join(`
+`)}
+` : "";
+  writeFileSync4(out, output);
+  if (printed.length === 0) {
+    throw new SddScriptError(`task ${taskN} not found in ${planFile} (no heading matching Task ${taskN})`, 3);
+  }
+  return out;
 }
-function techDebtRollup(projectDir) {
-  const items = [];
-  let entries;
-  try {
-    entries = readdirSync5(projectDir, { withFileTypes: true });
-  } catch {
-    entries = [];
+function reviewPackage(base, head, outFile, opts = {}) {
+  if (!base || !head) {
+    throw new SddScriptError("usage: mstar sdd review-package BASE HEAD [OUTFILE]", 2);
   }
-  for (const project of entries) {
-    if (!project.isDirectory())
-      continue;
-    const registerPath = join9(projectDir, project.name, PROJECT_REGISTER_FILE);
-    if (!existsSync6(registerPath))
-      continue;
-    let register;
+  const cwd = opts.cwd ?? process.cwd();
+  const verifyRef = (ref, what) => {
     try {
-      register = readJson(registerPath);
+      execFileSync3("git", ["rev-parse", "--verify", "--quiet", ref], { cwd, stdio: ["ignore", "pipe", "pipe"] });
     } catch {
-      continue;
+      throw new SddScriptError(`bad ${what}: ${ref}`, 2);
     }
-    if (!isPlainObject5(register) || !isPlainObject5(register.entries))
-      continue;
-    for (const [plan, planEntries] of Object.entries(register.entries)) {
-      if (!Array.isArray(planEntries))
-        continue;
-      for (const entry of planEntries) {
-        if (!isPlainObject5(entry) || !isOpenResidual(entry))
-          continue;
-        items.push({ plan, entry });
-      }
+  };
+  verifyRef(base, "BASE");
+  verifyRef(head, "HEAD");
+  let out;
+  if (outFile) {
+    out = outFile;
+  } else {
+    const sddDir = opts.sddDir ?? process.env.SDD_DIR;
+    if (!sddDir) {
+      throw new SddScriptError("mstar sdd review-package: set SDD_DIR or pass OUTFILE", 2);
     }
+    mkdirSync5(sddDir, { recursive: true });
+    const shortBase = gitOut(cwd, ["rev-parse", "--short", base]) ?? base;
+    const shortHead = gitOut(cwd, ["rev-parse", "--short", head]) ?? head;
+    out = join9(sddDir, `review-${shortBase}..${shortHead}.diff`);
   }
-  const bySeverity = {};
-  for (const severity of SEVERITY_ORDER) {
-    bySeverity[severity] = items.filter(({ entry }) => normalizeSeverity(entry.severity) === severity).length;
-  }
-  const computed = {
-    total_open: items.length,
-    by_severity: bySeverity,
-    by_target: groupCount(items.map(({ entry }) => entry.target ?? "unspecified")),
-    by_plan: groupCount(items.map(({ plan }) => plan))
-  };
-  const stored = null;
-  const checks = ROLLUP_FIELDS.map((field) => ({ field, status: "DRIFT" }));
-  const overall = "DRIFT";
-  return { computed, stored, checks, overall };
+  const run = (args) => execFileSync3("git", args, { cwd, maxBuffer: GIT_CAPTURE_MAX_BYTES });
+  const parts = [
+    Buffer.from(`# Review package: ${base}..${head}
+
+## Commits
+`),
+    run(["log", "--oneline", `${base}..${head}`]),
+    Buffer.from(`
+## Files changed
+`),
+    run(["diff", "--stat", `${base}..${head}`]),
+    Buffer.from(`
+## Diff
+`),
+    run(["diff", "-U10", `${base}..${head}`])
+  ];
+  writeFileSync4(out, Buffer.concat(parts));
+  return out;
 }
 function violation8(severity, code, message, fix) {
   return { ok: false, severity, code, message, fix };
@@ -6186,8 +6255,17 @@ function readPlanFileSummary(filePath) {
   const blocks = parseStatusBlocks(text);
   return { title: title.trim(), fields: blocks.length > 0 ? blocks[0].fields : new Map };
 }
+function extractSecurityDispositionSections(text) {
+  const grab = (heading) => {
+    const match = text.match(new RegExp(`(?:^|\\r?\\n)##[ \\t]+${heading}[ \\t]*\\r?\\n(?:[ \\t]*\\r?\\n)?([\\s\\S]*?)(?=\\r?\\n## |$)`, "i"));
+    if (!match)
+      return [];
+    return match[1].split(/\r?\n/).map((line) => line.replace(/\r$/, "")).filter((line) => line.startsWith("- "));
+  };
+  return { needsVerification: grab("Needs verification"), hardeningChecked: grab("Hardening & checked notes") };
+}
 function renderIndex(params) {
-  const { date, repoName, repoShortSha, rows, rejected } = params;
+  const { date, repoName, repoShortSha, rows, rejected, needsVerification, hardeningChecked } = params;
   const findingsRows = rows.map((r) => `| ${r.num} | ${escapeCell(r.title)} | ${r.category} | ${escapeCell(truncate(r.impact, 80))} | ${r.effort} | ${r.risk} | ${r.confidence} | ${escapeCell(truncate(r.evidence, 80))} |`).join(`
 `);
   const directionRows = rows.filter((r) => r.category === "direction").map((r) => `- ${escapeCell(r.title)} \u2014 ${escapeCell(truncate(r.impact, 120))}`).join(`
@@ -6208,6 +6286,12 @@ function renderIndex(params) {
   if (directionRows !== "") {
     sections.push("", "## Direction", "", directionRows);
   }
+  if (needsVerification.length > 0) {
+    sections.push("", "## Needs verification", "", ...needsVerification);
+  }
+  if (hardeningChecked.length > 0) {
+    sections.push("", "## Hardening & checked notes", "", ...hardeningChecked);
+  }
   sections.push("", "## Execution order & status", "", "| Plan | Title | Priority | Effort | Depends on | Status |", "|------|-------|----------|--------|------------|--------|", executionRows);
   if (rejectedRows !== "") {
     sections.push("", "## Findings considered and rejected", "", rejectedRows);
@@ -6221,6 +6305,8 @@ function scaffoldAuditPlan(outDir, findings, options = {}) {
   const date = options.date ?? new Date().toISOString().slice(0, 10);
   const plannedAt = options.plannedAt ?? { commit: options.repoShortSha ?? "unknown", date };
   mkdirSync7(outDir, { recursive: true });
+  const existingReadme = join11(outDir, "README.md");
+  const carried = existsSync7(existingReadme) ? extractSecurityDispositionSections(readFileSync9(existingReadme, "utf8")) : { needsVerification: [], hardeningChecked: [] };
   const existing = readdirSync7(outDir).filter((f) => /^\d{3}-.*\.md$/.test(f));
   let next = existing.reduce((max, f) => Math.max(max, Number(f.slice(0, 3))), 0) + 1;
   const written = [];
@@ -6236,7 +6322,7 @@ function scaffoldAuditPlan(outDir, findings, options = {}) {
     }
     usedSlugs.add(slug);
     const file = `${num}-${slug}.md`;
-    writeFileSync5(join11(outDir, file), renderPlanFile(finding, plannedAt));
+    writeFileSync6(join11(outDir, file), renderPlanFile(finding, plannedAt));
     written.push(file);
     next++;
   }
@@ -6274,12 +6360,16 @@ function scaffoldAuditPlan(outDir, findings, options = {}) {
       row.dependsOn = finding.dependsOn ?? "none";
     }
   });
-  writeFileSync5(join11(outDir, "README.md"), renderIndex({
+  const needsVerificationLines = options.needsVerification !== undefined ? options.needsVerification.map((nv) => `- ${escapeCell(nv.lead)}: ${escapeCell(nv.how)}${nv.evidence ? ` (${escapeCell(nv.evidence)})` : ""}`) : carried.needsVerification;
+  const hardeningCheckedLines = options.hardeningChecked !== undefined ? options.hardeningChecked.map((hc) => `- ${hc.kind}: ${escapeCell(hc.text)}`) : carried.hardeningChecked;
+  writeFileSync6(join11(outDir, "README.md"), renderIndex({
     date,
     repoName: options.repoName ?? "repo",
     repoShortSha: options.repoShortSha ?? "unknown",
     rows,
-    rejected: options.rejected ?? []
+    rejected: options.rejected ?? [],
+    needsVerification: needsVerificationLines,
+    hardeningChecked: hardeningCheckedLines
   }));
   return { outDir: resolve9(outDir), date, files: written, nextNumber: next };
 }
@@ -7218,24 +7308,24 @@ function lintFiveQuestion(bodyText, mode = "authoring") {
 }
 
 // ../engine/dist/engine.js
-import { existsSync as existsSync10, mkdirSync as mkdirSync4, readFileSync as readFileSync8, renameSync as renameSync2, unlinkSync as unlinkSync3, writeFileSync as writeFileSync4 } from "node:fs";
+import { existsSync as existsSync10, mkdirSync as mkdirSync3, readFileSync as readFileSync8, renameSync as renameSync2, unlinkSync as unlinkSync3, writeFileSync as writeFileSync5 } from "node:fs";
 import { randomUUID as randomUUID2 } from "node:crypto";
-import { basename as basename6, dirname as dirname7, join as join5, resolve as resolve8 } from "node:path";
+import { basename as basename6, dirname as dirname7, join as join3, resolve as resolve8 } from "node:path";
 import { fileURLToPath } from "node:url";
 import { readFileSync as readFileSync22, statSync as statSync5 } from "node:fs";
 import { dirname as dirname22, isAbsolute as isAbsolute6, join as join22, relative as relative3, resolve as resolve22 } from "node:path";
-import { existsSync as existsSync22, mkdirSync as mkdirSync22, readdirSync as readdirSync6, readFileSync as readFileSync32, realpathSync as realpathSync4, statSync as statSync22 } from "node:fs";
+import { existsSync as existsSync52, mkdirSync as mkdirSync42, readdirSync as readdirSync42, readFileSync as readFileSync62, realpathSync as realpathSync22, statSync as statSync32, writeFileSync as writeFileSync32 } from "node:fs";
 import { execFileSync as execFileSync4 } from "node:child_process";
-import { basename as basename22, dirname as dirname32, isAbsolute as isAbsolute22, join as join32, relative as relative22, resolve as resolve32 } from "node:path";
-import { existsSync as existsSync32, readFileSync as readFileSync42, readdirSync as readdirSync22, realpathSync as realpathSync22 } from "node:fs";
-import { dirname as dirname52, join as join62, resolve as resolve52, sep as sep2 } from "node:path";
-import { mkdirSync as mkdirSync32, rmdirSync as rmdirSync3, statSync as statSync32, unlinkSync as unlinkSync22, writeFileSync as writeFileSync22 } from "node:fs";
-import { dirname as dirname42, isAbsolute as isAbsolute32, join as join42, resolve as resolve42 } from "node:path";
+import { basename as basename22, dirname as dirname52, isAbsolute as isAbsolute32, join as join82, relative as relative22, resolve as resolve52 } from "node:path";
+import { existsSync as existsSync32, readFileSync as readFileSync42, readdirSync as readdirSync22, realpathSync as realpathSync4 } from "node:fs";
+import { dirname as dirname42, join as join62, resolve as resolve42, sep as sep2 } from "node:path";
+import { mkdirSync as mkdirSync22, rmdirSync as rmdirSync3, statSync as statSync22, unlinkSync as unlinkSync22, writeFileSync as writeFileSync22 } from "node:fs";
+import { dirname as dirname32, isAbsolute as isAbsolute22, join as join42, resolve as resolve32 } from "node:path";
 import { setTimeout as sleep2 } from "node:timers/promises";
 import { AsyncLocalStorage as AsyncLocalStorage3 } from "node:async_hooks";
-import { mkdirSync as mkdirSync42 } from "node:fs";
-import { join as join52 } from "node:path";
-import { copyFileSync, mkdirSync as mkdirSync6, readFileSync as readFileSync82, readdirSync as readdirSync62, writeFileSync as writeFileSync42 } from "node:fs";
+import { mkdirSync as mkdirSync32 } from "node:fs";
+import { join as join5 } from "node:path";
+import { copyFileSync, mkdirSync as mkdirSync6, readFileSync as readFileSync82, readdirSync as readdirSync6, writeFileSync as writeFileSync52 } from "node:fs";
 import { dirname as dirname72, isAbsolute as isAbsolute62, join as join10, relative as relative32, resolve as resolve82, sep as sep22 } from "node:path";
 var SEVERITY_ORDER2 = ["critical", "high", "medium", "low", "nit"];
 function readJson2(filePath) {
@@ -7252,10 +7342,10 @@ function readJson2(filePath) {
 }
 function writeJson2(filePath, value) {
   const parent = dirname7(filePath);
-  mkdirSync4(parent, { recursive: true });
-  const tmp = join5(parent, `.${basename6(filePath)}.${process.pid}.${randomUUID2()}.tmp`);
+  mkdirSync3(parent, { recursive: true });
+  const tmp = join3(parent, `.${basename6(filePath)}.${process.pid}.${randomUUID2()}.tmp`);
   try {
-    writeFileSync4(tmp, `${JSON.stringify(value, null, 2)}
+    writeFileSync5(tmp, `${JSON.stringify(value, null, 2)}
 `, "utf8");
     renameSync2(tmp, filePath);
   } catch (error) {
@@ -7269,7 +7359,7 @@ function resolveProjectRoot(startDir = process.cwd()) {
   const start = resolve8(startDir);
   let dir = start;
   for (;; ) {
-    if (existsSync10(join5(dir, "package.json")) || existsSync10(join5(dir, "bun.lock")))
+    if (existsSync10(join3(dir, "package.json")) || existsSync10(join3(dir, "bun.lock")))
       return dir;
     const parent = dirname7(dir);
     if (parent === dir)
@@ -7293,7 +7383,7 @@ function findRootPackageJson(startDir) {
   }
 }
 function harnessVersionFrom(moduleDir) {
-  const ownManifest = join5(moduleDir, "..", "package.json");
+  const ownManifest = join3(moduleDir, "..", "package.json");
   try {
     const pkg = JSON.parse(readFileSync8(ownManifest, "utf8"));
     if (typeof pkg.version === "string" && pkg.version !== "")
@@ -7397,121 +7487,78 @@ function isAtOrBelow3(dir, root) {
   const rel = relative3(root, dir);
   return rel === "" || !rel.startsWith("..") && !isAbsolute6(rel);
 }
-function resolveHarnessDir2(startDir = process.cwd(), opts = {}) {
-  const start = resolve32(startDir);
-  const explicit = opts.harnessDir ?? process.env.MSTAR_HARNESS_DIR;
-  if (explicit)
-    return resolve32(start, explicit);
-  const boundary = resolve32(start, opts.workspaceRoot ?? defaultWorkspaceRoot2(start));
-  const rc = loadMstarc2(start, boundary);
-  if (rc !== null && rc.config.harnessDir)
-    return resolve32(rc.dir, rc.config.harnessDir);
-  let dir = start;
-  for (;; ) {
-    if (!isAtOrBelow22(dir, boundary))
-      return null;
-    for (const candidate of [join32(dir, ".mstar"), join32(dir, ".agents"), join32(dir, ".plans"), join32(dir, "plans")]) {
-      if (isDirectory3(candidate))
-        return candidate;
+function parseCompassFrontmatterText2(content, filePath) {
+  const lines = content.split(/\r?\n/);
+  if (lines[0]?.trim() !== "---") {
+    throw new Error(`no YAML frontmatter fence in ${filePath} (expected first line "---")`);
+  }
+  const end = lines.indexOf("---", 1);
+  if (end === -1) {
+    throw new Error(`unterminated YAML frontmatter in ${filePath} (no closing "---")`);
+  }
+  const doc = {};
+  let listKey = null;
+  for (let i = 1;i < end; i += 1) {
+    const line = lines[i] ?? "";
+    if (!line.trim() || line.trim().startsWith("#"))
+      continue;
+    if (listKey !== null && /^\s*-\s+/.test(line)) {
+      const item = line.replace(/^\s*-\s+/, "").trim().replace(/^["']|["']$/g, "");
+      if (!Array.isArray(doc[listKey]))
+        doc[listKey] = [];
+      doc[listKey].push(item);
+      continue;
     }
-    if (dir === boundary)
-      return null;
-    const parent = dirname32(dir);
-    if (parent === dir)
-      return null;
-    dir = parent;
+    listKey = null;
+    const kv = line.match(/^([A-Za-z_][A-Za-z0-9_-]*):\s*(.*)$/);
+    if (!kv) {
+      throw new Error(`unsupported frontmatter line in ${filePath}: ${JSON.stringify(line)}`);
+    }
+    const value = kv[2].trim();
+    doc[kv[1]] = value === "" ? null : /^\[.*\]$/.test(value) ? parseFlowArray2(value, filePath) : value.replace(/^["']|["']$/g, "");
+    listKey = value === "" ? kv[1] : null;
   }
+  return doc;
 }
-function defaultWorkspaceRoot2(startDir) {
-  try {
-    const cdup = execFileSync4("git", ["rev-parse", "--show-cdup"], {
-      cwd: startDir,
-      encoding: "utf8",
-      stdio: ["ignore", "pipe", "ignore"]
-    }).trim();
-    if (!cdup)
-      return startDir;
-    let boundary = startDir;
-    for (const segment of cdup.split(/[\\/]/)) {
-      if (segment && segment !== ".")
-        boundary = dirname32(boundary);
+function parseFlowArray2(raw, filePath) {
+  const inner = raw.slice(1, -1);
+  if (/[[\]]/.test(inner)) {
+    throw new Error(`nested flow-style array in ${filePath}: ${JSON.stringify(raw)} \u2014 only flat scalar items are supported (e.g. [a, b])`);
+  }
+  let quote = null;
+  for (const ch of inner) {
+    if (ch === '"' || ch === "'") {
+      if (quote === null)
+        quote = ch;
+      else if (quote === ch)
+        quote = null;
+    } else if (ch === "," && quote !== null) {
+      throw new Error(`ambiguous flow-style array in ${filePath}: ${JSON.stringify(raw)} \u2014 quoted item containing comma cannot be split unambiguously (flat scalar items only)`);
     }
-    return resolve32(boundary);
-  } catch {}
-  return startDir;
-}
-function isAtOrBelow22(dir, root) {
-  const rel = relative22(root, dir);
-  return rel === "" || !rel.startsWith("..") && !isAbsolute22(rel);
-}
-function mstarcDirOverride2(harnessDir, key) {
-  const dir = resolve32(harnessDir);
-  const rc = loadMstarc2(dir, dirname32(dir));
-  const declared = rc?.config[key];
-  return declared ? resolve32(rc.dir, declared) : null;
-}
-function assertSafePathComponent2(value, what) {
-  if (value === "" || value === "." || value === ".." || !/^[A-Za-z0-9._-]+$/.test(value)) {
-    throw new Error(`${what} must be a single safe path component ([A-Za-z0-9._-]+; not "", ".", "..", or containing "/" or "\\") \u2014 got ${JSON.stringify(value)}`);
   }
-}
-function resolveHarnessSubdir2(startDir, opts, key, fallback) {
-  const harness = resolveHarnessDir2(startDir, opts);
-  if (harness === null) {
-    throw new Error(`harness dir not found from ${resolve32(startDir)} \u2014 cannot resolve the ${fallback} dir (run \`mstar init\`, pass opts.harnessDir, or set MSTAR_HARNESS_DIR)`);
+  if (quote !== null) {
+    throw new Error(`unterminated ${quote} quote in flow-style array in ${filePath}: ${JSON.stringify(raw)}`);
   }
-  const declared = mstarcDirOverride2(harness, key);
-  return declared !== null ? declared : join32(resolve32(harness), fallback);
-}
-function resolveWorkflowDir2(startDir = process.cwd(), opts = {}) {
-  return resolveHarnessSubdir2(startDir, opts, "workflowDir", "workflows");
-}
-function resolveProjectDir2(startDir = process.cwd(), opts = {}) {
-  return resolveHarnessSubdir2(startDir, opts, "projectDir", "projects");
-}
-var GITIGNORE_SNIPPET2 = `# Morning Star harness (.mstar/)
-# Principle: process stays local; results are shared with the team.
-# Default-ignore everything under .mstar/, then re-include the tracked results.
-.mstar/**
-!.mstar/AGENTS.md
-!.mstar/knowledge/
-!.mstar/knowledge/**
-!.mstar/specs/
-!.mstar/specs/**
-# .mstarc \u2014 repo-local harness config (may declare [config] harness_dir=<name>)
-.mstarc
-`;
-var GITIGNORE_SNIPPET_AGENTS2 = `# Morning Star harness (.agents/) \u2014 legacy
-# Default-ignore everything under .agents/, then re-include the tracked results.
-.agents/**
-!.agents/AGENTS.md
-!.agents/knowledge/
-!.agents/knowledge/**
-!.agents/specs/
-!.agents/specs/**
-`;
-var GITIGNORE_PROCESS_ENTRIES2 = GITIGNORE_SNIPPET2.split(`
-`).filter((line) => line.startsWith(".mstar/") || line.startsWith("!.mstar/")).map((line) => line.trim());
-var GITIGNORE_PROCESS_ENTRIES_AGENTS2 = GITIGNORE_SNIPPET_AGENTS2.split(`
-`).filter((line) => line.startsWith(".agents/") || line.startsWith("!.agents/")).map((line) => line.trim());
-function isDirectory3(dir) {
-  try {
-    return statSync22(dir).isDirectory();
-  } catch {
-    return false;
+  const items = [];
+  for (const part of inner.split(",")) {
+    const item = part.trim().replace(/^["']|["']$/g, "");
+    if (item === "")
+      continue;
+    items.push(item);
   }
+  return items;
 }
-function isPlainObject6(value) {
+function isPlainObject23(value) {
   return typeof value === "object" && value !== null && !Array.isArray(value);
 }
-function violation9(severity, code, message, fix) {
+function violation22(severity, code, message, fix) {
   return { ok: false, severity, code, message, fix };
 }
 function validateNonEmptyString4(violations, value, field, missingCode, invalidCode) {
   if (value === undefined) {
-    violations.push(violation9("high", missingCode, `missing required field: ${field}`));
+    violations.push(violation22("high", missingCode, `missing required field: ${field}`));
   } else if (typeof value !== "string" || value.trim() === "") {
-    violations.push(violation9("medium", invalidCode, `${field} must be a non-empty string`));
+    violations.push(violation22("medium", invalidCode, `${field} must be a non-empty string`));
   }
 }
 var DATE_PART2 = String.raw`\d{4}-(0[1-9]|1[0-2])-(0[1-9]|[12]\d|3[01])`;
@@ -7522,54 +7569,54 @@ function isValidClaimedAt2(value) {
 }
 function validateExecutionLease2(lease) {
   const violations = [];
-  if (!isPlainObject6(lease)) {
+  if (!isPlainObject23(lease)) {
     return {
       ok: false,
       violations: [
-        violation9("high", "lease.execution-lease.invalid", "execution_lease must be an object \u2014 null and tombstone objects are invalid; writers delete the key on release")
+        violation22("high", "lease.execution-lease.invalid", "execution_lease must be an object \u2014 null and tombstone objects are invalid; writers delete the key on release")
       ]
     };
   }
   validateNonEmptyString4(violations, lease.holder, "holder", "lease.execution-lease.missing-holder", "lease.execution-lease.invalid-holder");
   if (lease.claimed_at === undefined) {
-    violations.push(violation9("high", "lease.execution-lease.missing-claimed-at", "missing required field: claimed_at"));
+    violations.push(violation22("high", "lease.execution-lease.missing-claimed-at", "missing required field: claimed_at"));
   } else if (!isValidClaimedAt2(lease.claimed_at)) {
-    violations.push(violation9("medium", "lease.execution-lease.invalid-claimed-at", "claimed_at must be an RFC 3339 UTC timestamp with explicit Z (e.g. 2026-07-22T02:30:00Z) or a YYYY-MM-DD date"));
+    violations.push(violation22("medium", "lease.execution-lease.invalid-claimed-at", "claimed_at must be an RFC 3339 UTC timestamp with explicit Z (e.g. 2026-07-22T02:30:00Z) or a YYYY-MM-DD date"));
   }
   if (lease.worktree_path === undefined) {
-    violations.push(violation9("high", "lease.execution-lease.missing-worktree-path", "missing required field: worktree_path"));
+    violations.push(violation22("high", "lease.execution-lease.missing-worktree-path", "missing required field: worktree_path"));
   } else if (typeof lease.worktree_path !== "string" || lease.worktree_path.trim() === "") {
-    violations.push(violation9("medium", "lease.execution-lease.invalid-worktree-path", "worktree_path must be a non-empty string"));
-  } else if (!isAbsolute32(lease.worktree_path)) {
-    violations.push(violation9("medium", "lease.execution-lease.invalid-worktree-path", "worktree_path must be an absolute path \u2014 it identifies the dedicated feature-worktree root (and MUST differ from metadata.control_worktree_path)"));
+    violations.push(violation22("medium", "lease.execution-lease.invalid-worktree-path", "worktree_path must be a non-empty string"));
+  } else if (!isAbsolute22(lease.worktree_path)) {
+    violations.push(violation22("medium", "lease.execution-lease.invalid-worktree-path", "worktree_path must be an absolute path \u2014 it identifies the dedicated feature-worktree root (and MUST differ from metadata.control_worktree_path)"));
   }
   validateNonEmptyString4(violations, lease.working_branch, "working_branch", "lease.execution-lease.missing-working-branch", "lease.execution-lease.invalid-working-branch");
   if (lease.session_label !== undefined && typeof lease.session_label !== "string") {
-    violations.push(violation9("medium", "lease.execution-lease.invalid-session-label", "session_label must be a string (display only \u2014 never used for ownership comparison)"));
+    violations.push(violation22("medium", "lease.execution-lease.invalid-session-label", "session_label must be a string (display only \u2014 never used for ownership comparison)"));
   }
   return { ok: violations.length === 0, violations };
 }
 function validateIntegrationMergeLease2(lease) {
   const violations = [];
-  if (!isPlainObject6(lease)) {
+  if (!isPlainObject23(lease)) {
     return {
       ok: false,
       violations: [
-        violation9("high", "lease.merge-lease.invalid", "integration_merge_lease must be an object \u2014 absent means unclaimed; null and tombstone objects are invalid; writers delete the key on release")
+        violation22("high", "lease.merge-lease.invalid", "integration_merge_lease must be an object \u2014 absent means unclaimed; null and tombstone objects are invalid; writers delete the key on release")
       ]
     };
   }
   validateNonEmptyString4(violations, lease.holder, "holder", "lease.merge-lease.missing-holder", "lease.merge-lease.invalid-holder");
   if (lease.claimed_at === undefined) {
-    violations.push(violation9("high", "lease.merge-lease.missing-claimed-at", "missing required field: claimed_at"));
+    violations.push(violation22("high", "lease.merge-lease.missing-claimed-at", "missing required field: claimed_at"));
   } else if (!isValidClaimedAt2(lease.claimed_at)) {
-    violations.push(violation9("medium", "lease.merge-lease.invalid-claimed-at", "claimed_at must be an RFC 3339 UTC timestamp with explicit Z (e.g. 2026-07-22T04:00:00Z) or a YYYY-MM-DD date"));
+    violations.push(violation22("medium", "lease.merge-lease.invalid-claimed-at", "claimed_at must be an RFC 3339 UTC timestamp with explicit Z (e.g. 2026-07-22T04:00:00Z) or a YYYY-MM-DD date"));
   }
   validateNonEmptyString4(violations, lease.plan_id, "plan_id", "lease.merge-lease.missing-plan-id", "lease.merge-lease.invalid-plan-id");
   validateNonEmptyString4(violations, lease.source_branch, "source_branch", "lease.merge-lease.missing-source-branch", "lease.merge-lease.invalid-source-branch");
   validateNonEmptyString4(violations, lease.target_branch, "target_branch", "lease.merge-lease.missing-target-branch", "lease.merge-lease.invalid-target-branch");
   if (lease.session_label !== undefined && typeof lease.session_label !== "string") {
-    violations.push(violation9("medium", "lease.merge-lease.invalid-session-label", "session_label must be a string (display only \u2014 never used for ownership comparison)"));
+    violations.push(violation22("medium", "lease.merge-lease.invalid-session-label", "session_label must be a string (display only \u2014 never used for ownership comparison)"));
   }
   return { ok: violations.length === 0, violations };
 }
@@ -7584,14 +7631,14 @@ function verifyPlanExecutionLease(row, planId) {
       return {
         ok: false,
         violations: [
-          violation9("high", "lease.verify.orphan", "plan is InProgress without an execution_lease \u2014 orphan: STOP, no writable dispatch until recovery (status-and-residuals.md \u00a7 Orphan recovery)")
+          violation22("high", "lease.verify.orphan", "plan is InProgress without an execution_lease \u2014 orphan: STOP, no writable dispatch until recovery (status-and-residuals.md \u00a7 Orphan recovery)")
         ]
       };
     }
     return {
       ok: false,
       violations: [
-        violation9("high", "lease.verify.missing", `plan ${planId} has no execution_lease at the SSOT location plans[].execution_lease`)
+        violation22("high", "lease.verify.missing", `plan ${planId} has no execution_lease at the SSOT location plans[].execution_lease`)
       ]
     };
   }
@@ -7603,7 +7650,7 @@ var STATUS_WRITE_LOCKDIR2 = ".status-write.lockdir";
 var LOCKDIR_HOLDER_PID2 = "holder.pid";
 var heldLockDirs2 = new AsyncLocalStorage3;
 async function withStatusWriteLock2(statusPath, fn, opts = {}) {
-  const lockDir = join42(dirname42(resolve42(statusPath)), STATUS_WRITE_LOCKDIR2);
+  const lockDir = join42(dirname32(resolve32(statusPath)), STATUS_WRITE_LOCKDIR2);
   const held = heldLockDirs2.getStore();
   if (held !== undefined && held.has(lockDir)) {
     throw new Error(`${lockDir} is already held by this process in this async context \u2014 withStatusWriteLock is not reentrant; a nested acquisition on the same status.json is a bug`);
@@ -7614,8 +7661,8 @@ async function withStatusWriteLock2(statusPath, fn, opts = {}) {
   let acquired = null;
   for (;; ) {
     try {
-      mkdirSync32(lockDir);
-      const st = statSync32(lockDir);
+      mkdirSync22(lockDir);
+      const st = statSync22(lockDir);
       acquired = { dev: st.dev, ino: st.ino };
       break;
     } catch (error) {
@@ -7637,7 +7684,7 @@ async function withStatusWriteLock2(statusPath, fn, opts = {}) {
   } finally {
     owns.delete(lockDir);
     try {
-      const current = statSync32(lockDir);
+      const current = statSync22(lockDir);
       if (acquired !== null && current.dev === acquired.dev && current.ino === acquired.ino) {
         try {
           unlinkSync22(join42(lockDir, LOCKDIR_HOLDER_PID2));
@@ -7651,45 +7698,45 @@ var WORKFLOW_SNAPSHOT_FILE2 = "snapshot.json";
 var WORKFLOW_LIFECYCLE_STATUSES2 = ["running", "paused", "completed", "failed", "stopped"];
 var WORKFLOW_TERMINAL_STATUSES2 = ["completed", "failed", "stopped"];
 var WORKFLOW_LIFECYCLE_TYPES2 = ["plan", "iteration"];
-function isPlainObject23(value) {
+function isPlainObject32(value) {
   return typeof value === "object" && value !== null && !Array.isArray(value);
 }
-function violation32(severity, code, message, fix) {
+function violation42(severity, code, message, fix) {
   return { ok: false, severity, code, message, fix };
 }
 function validateNonEmptyString22(violations, value, field, missingCode, invalidCode) {
   if (value === undefined) {
-    violations.push(violation32("high", missingCode, `missing required field: ${field}`));
+    violations.push(violation42("high", missingCode, `missing required field: ${field}`));
   } else if (typeof value !== "string" || value.trim() === "") {
-    violations.push(violation32("medium", invalidCode, `${field} must be a non-empty string`));
+    violations.push(violation42("medium", invalidCode, `${field} must be a non-empty string`));
   }
 }
 function validateWorkflowSnapshot2(doc) {
   const violations = [];
-  if (!isPlainObject23(doc)) {
+  if (!isPlainObject32(doc)) {
     return {
       ok: false,
-      violations: [violation32("high", "workflow.snapshot.invalid", "workflow snapshot must be an object")]
+      violations: [violation42("high", "workflow.snapshot.invalid", "workflow snapshot must be an object")]
     };
   }
   if (doc.schema_version === undefined) {
-    violations.push(violation32("high", "workflow.snapshot.missing-schema-version", "missing required field: schema_version"));
+    violations.push(violation42("high", "workflow.snapshot.missing-schema-version", "missing required field: schema_version"));
   } else if (doc.schema_version !== 1) {
-    violations.push(violation32("high", "workflow.snapshot.invalid-schema-version", `schema_version must be 1 \u2014 got ${JSON.stringify(doc.schema_version)} (version is reserved for the root file discriminator)`));
+    violations.push(violation42("high", "workflow.snapshot.invalid-schema-version", `schema_version must be 1 \u2014 got ${JSON.stringify(doc.schema_version)} (version is reserved for the root file discriminator)`));
   }
   if (doc.version !== undefined) {
-    violations.push(violation32("medium", "workflow.snapshot.reserved-version", `top-level version is reserved for the root status.json discriminator \u2014 snapshots use schema_version; remove the version key (got ${JSON.stringify(doc.version)})`, "remove the version key from the snapshot"));
+    violations.push(violation42("medium", "workflow.snapshot.reserved-version", `top-level version is reserved for the root status.json discriminator \u2014 snapshots use schema_version; remove the version key (got ${JSON.stringify(doc.version)})`, "remove the version key from the snapshot"));
   }
   validateNonEmptyString22(violations, doc.id, "id", "workflow.snapshot.missing-id", "workflow.snapshot.invalid-id");
   if (doc.type === undefined) {
-    violations.push(violation32("high", "workflow.snapshot.missing-type", "missing required field: type"));
+    violations.push(violation42("high", "workflow.snapshot.missing-type", "missing required field: type"));
   } else if (typeof doc.type !== "string" || !WORKFLOW_LIFECYCLE_TYPES2.includes(doc.type)) {
-    violations.push(violation32("medium", "workflow.snapshot.invalid-type", `type must be one of ${WORKFLOW_LIFECYCLE_TYPES2.join(" | ")} \u2014 got ${JSON.stringify(doc.type)}`));
+    violations.push(violation42("medium", "workflow.snapshot.invalid-type", `type must be one of ${WORKFLOW_LIFECYCLE_TYPES2.join(" | ")} \u2014 got ${JSON.stringify(doc.type)}`));
   }
   if (doc.status === undefined) {
-    violations.push(violation32("high", "workflow.snapshot.missing-status", "missing required field: status"));
+    violations.push(violation42("high", "workflow.snapshot.missing-status", "missing required field: status"));
   } else if (typeof doc.status !== "string" || !WORKFLOW_LIFECYCLE_STATUSES2.includes(doc.status)) {
-    violations.push(violation32("medium", "workflow.snapshot.invalid-status", `status must be one of ${WORKFLOW_LIFECYCLE_STATUSES2.join(" | ")} \u2014 got ${JSON.stringify(doc.status)}`));
+    violations.push(violation42("medium", "workflow.snapshot.invalid-status", `status must be one of ${WORKFLOW_LIFECYCLE_STATUSES2.join(" | ")} \u2014 got ${JSON.stringify(doc.status)}`));
   }
   validateNonEmptyString22(violations, doc.started_at, "started_at", "workflow.snapshot.missing-started-at", "workflow.snapshot.invalid-started-at");
   validateNonEmptyString22(violations, doc.updated_at, "updated_at", "workflow.snapshot.missing-updated-at", "workflow.snapshot.invalid-updated-at");
@@ -7697,35 +7744,35 @@ function validateWorkflowSnapshot2(doc) {
     validateNonEmptyString22(violations, doc.ended_at, "ended_at", "workflow.snapshot.missing-ended-at", "workflow.snapshot.invalid-ended-at");
   }
   if (doc.phase !== undefined && typeof doc.phase !== "string") {
-    violations.push(violation32("medium", "workflow.snapshot.invalid-phase", "phase must be a string (free-form phase machine label)"));
+    violations.push(violation42("medium", "workflow.snapshot.invalid-phase", "phase must be a string (free-form phase machine label)"));
   }
   if (doc.plans === undefined) {
-    violations.push(violation32("high", "workflow.snapshot.missing-plans", "missing required field: plans"));
+    violations.push(violation42("high", "workflow.snapshot.missing-plans", "missing required field: plans"));
   } else if (!Array.isArray(doc.plans)) {
-    violations.push(violation32("high", "workflow.snapshot.invalid-plans", "plans must be an array of legacy plan rows"));
+    violations.push(violation42("high", "workflow.snapshot.invalid-plans", "plans must be an array of legacy plan rows"));
   } else {
     for (const row of doc.plans) {
       violations.push(...validatePlanRow2(row).violations);
-      if (isPlainObject23(row) && row.execution_lease !== undefined) {
+      if (isPlainObject32(row) && row.execution_lease !== undefined) {
         violations.push(...validateExecutionLease2(row.execution_lease).violations);
       }
     }
   }
   if (doc.execution_policy !== undefined) {
-    if (!isPlainObject23(doc.execution_policy)) {
-      violations.push(violation32("medium", "workflow.snapshot.invalid-execution-policy", "execution_policy must be an object"));
+    if (!isPlainObject32(doc.execution_policy)) {
+      violations.push(violation42("medium", "workflow.snapshot.invalid-execution-policy", "execution_policy must be an object"));
     }
   }
   if (doc.integration_merge_lease !== undefined) {
     violations.push(...validateIntegrationMergeLease2(doc.integration_merge_lease).violations);
   }
   if (doc.branch !== undefined) {
-    if (!isPlainObject23(doc.branch)) {
-      violations.push(violation32("medium", "workflow.snapshot.invalid-branch", "branch must be an object"));
+    if (!isPlainObject32(doc.branch)) {
+      violations.push(violation42("medium", "workflow.snapshot.invalid-branch", "branch must be an object"));
     } else {
       for (const key of ["base", "integration", "target"]) {
         if (doc.branch[key] !== undefined && (typeof doc.branch[key] !== "string" || doc.branch[key].trim() === "")) {
-          violations.push(violation32("medium", "workflow.snapshot.invalid-branch", `branch.${key} must be a non-empty string`));
+          violations.push(violation42("medium", "workflow.snapshot.invalid-branch", `branch.${key} must be a non-empty string`));
         }
       }
     }
@@ -7733,8 +7780,8 @@ function validateWorkflowSnapshot2(doc) {
   if (doc.control_worktree_path !== undefined) {
     validateNonEmptyString22(violations, doc.control_worktree_path, "control_worktree_path", "workflow.snapshot.missing-control-worktree-path", "workflow.snapshot.invalid-control-worktree-path");
   }
-  if (doc.legacy_metadata !== undefined && !isPlainObject23(doc.legacy_metadata)) {
-    violations.push(violation32("medium", "workflow.snapshot.invalid-legacy-metadata", "legacy_metadata must be an object"));
+  if (doc.legacy_metadata !== undefined && !isPlainObject32(doc.legacy_metadata)) {
+    violations.push(violation42("medium", "workflow.snapshot.invalid-legacy-metadata", "legacy_metadata must be an object"));
   }
   if (doc.compass_ref !== undefined) {
     validateNonEmptyString22(violations, doc.compass_ref, "compass_ref", "workflow.snapshot.missing-compass-ref", "workflow.snapshot.invalid-compass-ref");
@@ -7742,17 +7789,17 @@ function validateWorkflowSnapshot2(doc) {
   const terminal = typeof doc.status === "string" && WORKFLOW_TERMINAL_STATUSES2.includes(doc.status);
   if (terminal) {
     if (doc.ended_at === undefined) {
-      violations.push(violation32("high", "workflow.snapshot.missing-ended-at", `terminal status ${JSON.stringify(doc.status)} requires ended_at \u2014 a terminal snapshot must record when the lifecycle ended`));
+      violations.push(violation42("high", "workflow.snapshot.missing-ended-at", `terminal status ${JSON.stringify(doc.status)} requires ended_at \u2014 a terminal snapshot must record when the lifecycle ended`));
     }
     if (Array.isArray(doc.plans)) {
       for (const row of doc.plans) {
-        if (isPlainObject23(row) && row.execution_lease !== undefined) {
-          violations.push(violation32("high", "workflow.snapshot.terminal-dangling-execution-lease", `terminal snapshot must not carry a row execution_lease (dangling lease) \u2014 release every lease before the lifecycle ends`));
+        if (isPlainObject32(row) && row.execution_lease !== undefined) {
+          violations.push(violation42("high", "workflow.snapshot.terminal-dangling-execution-lease", `terminal snapshot must not carry a row execution_lease (dangling lease) \u2014 release every lease before the lifecycle ends`));
         }
       }
     }
     if (doc.integration_merge_lease !== undefined) {
-      violations.push(violation32("high", "workflow.snapshot.terminal-dangling-merge-lease", "terminal snapshot must not carry integration_merge_lease (dangling lease) \u2014 release the merge lease before the lifecycle ends"));
+      violations.push(violation42("high", "workflow.snapshot.terminal-dangling-merge-lease", "terminal snapshot must not carry integration_merge_lease (dangling lease) \u2014 release the merge lease before the lifecycle ends"));
     }
   }
   return { ok: violations.length === 0, violations };
@@ -7763,20 +7810,20 @@ async function writeWorkflowSnapshot(snapshot, dir) {
     const detail = gate2.violations.map((v) => v.message).join("; ");
     throw new Error(`refusing to write invalid workflow snapshot: ${detail}`);
   }
-  const snapshotPath = join52(dir, WORKFLOW_SNAPSHOT_FILE2);
-  mkdirSync42(dir, { recursive: true });
+  const snapshotPath = join5(dir, WORKFLOW_SNAPSHOT_FILE2);
+  mkdirSync32(dir, { recursive: true });
   await withStatusWriteLock2(snapshotPath, () => {
     writeJson2(snapshotPath, snapshot);
   });
 }
-var DATE_RE3 = /^\d{4}-\d{2}-\d{2}$/;
+var DATE_RE22 = /^\d{4}-\d{2}-\d{2}$/;
 var PLAN_STATUSES2 = ["Todo", "InProgress", "InReview", "Blocked", "Done"];
 var RESIDUAL_DECISIONS = ["defer", "accept", "risk-accepted"];
 var RESIDUAL_LIFECYCLES = ["open", "resolved", "waived", "superseded", "duplicate"];
-function isPlainObject32(value) {
+function isPlainObject42(value) {
   return typeof value === "object" && value !== null && !Array.isArray(value);
 }
-function violation42(severity, code, message, fix) {
+function violation52(severity, code, message, fix) {
   return { ok: false, severity, code, message, fix };
 }
 function isOpenResidual2(entry) {
@@ -7786,19 +7833,19 @@ function isOpenResidual2(entry) {
 }
 function validateNonEmptyString32(violations, value, field, missingCode, invalidCode) {
   if (value === undefined) {
-    violations.push(violation42("high", missingCode, `missing required field: ${field}`));
+    violations.push(violation52("high", missingCode, `missing required field: ${field}`));
   } else if (typeof value !== "string" || value.trim() === "") {
-    violations.push(violation42("medium", invalidCode, `${field} must be a non-empty string`));
+    violations.push(violation52("medium", invalidCode, `${field} must be a non-empty string`));
   }
 }
 function validatePlanRow2(row) {
   const violations = [];
-  if (!isPlainObject32(row)) {
-    return { ok: false, violations: [violation42("high", "status.plan-row.invalid", "plan row must be an object")] };
+  if (!isPlainObject42(row)) {
+    return { ok: false, violations: [violation52("high", "status.plan-row.invalid", "plan row must be an object")] };
   }
   const { id, plan_id: planId, title, file, status, metadata, execution_lease } = row;
   if (id === undefined && planId === undefined) {
-    violations.push(violation42("high", "status.plan-row.missing-id", "missing required field: id (or legacy plan_id)"));
+    violations.push(violation52("high", "status.plan-row.missing-id", "missing required field: id (or legacy plan_id)"));
   } else {
     if (id !== undefined) {
       validateNonEmptyString32(violations, id, "id", "status.plan-row.missing-id", "status.plan-row.invalid-id");
@@ -7807,31 +7854,31 @@ function validatePlanRow2(row) {
       validateNonEmptyString32(violations, planId, "plan_id", "status.plan-row.missing-plan-id", "status.plan-row.invalid-plan-id");
     }
     if (id !== undefined && planId !== undefined && id !== planId) {
-      violations.push(violation42("medium", "status.plan-row.dual-id", "row has both id and plan_id with different values \u2014 write one canonical key (prefer id)"));
+      violations.push(violation52("medium", "status.plan-row.dual-id", "row has both id and plan_id with different values \u2014 write one canonical key (prefer id)"));
     }
   }
   validateNonEmptyString32(violations, title, "title", "status.plan-row.missing-title", "status.plan-row.invalid-title");
   validateNonEmptyString32(violations, file, "file", "status.plan-row.missing-file", "status.plan-row.invalid-file");
   if (status === undefined) {
-    violations.push(violation42("high", "status.plan-row.missing-status", "missing required field: status"));
+    violations.push(violation52("high", "status.plan-row.missing-status", "missing required field: status"));
   } else if (typeof status !== "string" || !PLAN_STATUSES2.includes(status)) {
-    violations.push(violation42("medium", "status.plan-row.invalid-status", `status must be one of ${PLAN_STATUSES2.join(" | ")} \u2014 got ${JSON.stringify(status)}`));
+    violations.push(violation52("medium", "status.plan-row.invalid-status", `status must be one of ${PLAN_STATUSES2.join(" | ")} \u2014 got ${JSON.stringify(status)}`));
   }
-  if (metadata !== undefined && !isPlainObject32(metadata)) {
-    violations.push(violation42("medium", "status.plan-row.invalid-metadata", "metadata must be an object"));
+  if (metadata !== undefined && !isPlainObject42(metadata)) {
+    violations.push(violation52("medium", "status.plan-row.invalid-metadata", "metadata must be an object"));
   }
-  if (execution_lease !== undefined && !isPlainObject32(execution_lease)) {
-    violations.push(violation42("medium", "status.plan-row.invalid-execution-lease", "execution_lease must be an object"));
+  if (execution_lease !== undefined && !isPlainObject42(execution_lease)) {
+    violations.push(violation52("medium", "status.plan-row.invalid-execution-lease", "execution_lease must be an object"));
   }
   if (status === "Done" && execution_lease !== undefined) {
-    violations.push(violation42("medium", "status.plan-row.done-with-lease", 'plan status Done must not carry an execution_lease \u2014 the Done authority deletes the lease in the same complete-file update as status: "Done" (status-and-residuals.md \u00a7 Hold, release, and override)', 'delete plans[].execution_lease in the same update that sets status: "Done"'));
+    violations.push(violation52("medium", "status.plan-row.done-with-lease", 'plan status Done must not carry an execution_lease \u2014 the Done authority deletes the lease in the same complete-file update as status: "Done" (status-and-residuals.md \u00a7 Hold, release, and override)', 'delete plans[].execution_lease in the same update that sets status: "Done"'));
   }
   return { ok: violations.length === 0, violations };
 }
 function validateResidual(entry) {
   const violations = [];
-  if (!isPlainObject32(entry)) {
-    return { ok: false, violations: [violation42("high", "status.residual.invalid", "residual entry must be an object")] };
+  if (!isPlainObject42(entry)) {
+    return { ok: false, violations: [violation52("high", "status.residual.invalid", "residual entry must be an object")] };
   }
   const { id, title, severity, source, scope, decision, owner, target, tracking, detail_doc, lifecycle, closed_at } = entry;
   validateNonEmptyString32(violations, id, "id", "status.residual.missing-id", "status.residual.invalid-id");
@@ -7840,42 +7887,42 @@ function validateResidual(entry) {
   validateNonEmptyString32(violations, scope, "scope", "status.residual.missing-scope", "status.residual.invalid-scope");
   validateNonEmptyString32(violations, owner, "owner", "status.residual.missing-owner", "status.residual.invalid-owner");
   if (severity === undefined) {
-    violations.push(violation42("high", "status.residual.missing-severity", "missing required field: severity"));
+    violations.push(violation52("high", "status.residual.missing-severity", "missing required field: severity"));
   } else if (typeof severity !== "string" || !SEVERITY_ORDER2.includes(severity) && severity !== "warning") {
-    violations.push(violation42("medium", "status.residual.invalid-severity", `severity must be one of ${SEVERITY_ORDER2.join(" | ")} \u2014 got ${JSON.stringify(severity)}`));
+    violations.push(violation52("medium", "status.residual.invalid-severity", `severity must be one of ${SEVERITY_ORDER2.join(" | ")} \u2014 got ${JSON.stringify(severity)}`));
   } else if (severity === "warning") {
-    violations.push(violation42("low", "status.residual.legacy-warning", `severity "warning" is legacy \u2014 forbidden on new entries; read paths normalize it to "low"`, `use "low" (normalizeSeverity maps 'warning' \u2192 'low')`));
+    violations.push(violation52("low", "status.residual.legacy-warning", `severity "warning" is legacy \u2014 forbidden on new entries; read paths normalize it to "low"`, `use "low" (normalizeSeverity maps 'warning' \u2192 'low')`));
   }
   if (decision === undefined) {
-    violations.push(violation42("high", "status.residual.missing-decision", "missing required field: decision"));
+    violations.push(violation52("high", "status.residual.missing-decision", "missing required field: decision"));
   } else if (typeof decision !== "string" || !RESIDUAL_DECISIONS.includes(decision)) {
-    violations.push(violation42("medium", "status.residual.invalid-decision", `decision must be one of ${RESIDUAL_DECISIONS.join(" | ")} \u2014 got ${JSON.stringify(decision)}`));
+    violations.push(violation52("medium", "status.residual.invalid-decision", `decision must be one of ${RESIDUAL_DECISIONS.join(" | ")} \u2014 got ${JSON.stringify(decision)}`));
   }
   if (target === undefined) {
-    violations.push(violation42("high", "status.residual.missing-target", "missing required field: target"));
+    violations.push(violation52("high", "status.residual.missing-target", "missing required field: target"));
   } else if (typeof target !== "string" && target !== null) {
-    violations.push(violation42("medium", "status.residual.invalid-target", "target must be a string or null"));
+    violations.push(violation52("medium", "status.residual.invalid-target", "target must be a string or null"));
   }
   if (tracking === undefined) {
-    violations.push(violation42("high", "status.residual.missing-tracking", "missing required field: tracking"));
+    violations.push(violation52("high", "status.residual.missing-tracking", "missing required field: tracking"));
   } else if (typeof tracking !== "string" && tracking !== null) {
-    violations.push(violation42("medium", "status.residual.invalid-tracking", "tracking must be a string or null"));
+    violations.push(violation52("medium", "status.residual.invalid-tracking", "tracking must be a string or null"));
   }
   if (detail_doc !== undefined && typeof detail_doc !== "string" && detail_doc !== null) {
-    violations.push(violation42("medium", "status.residual.invalid-detail-doc", "detail_doc must be a string or null"));
+    violations.push(violation52("medium", "status.residual.invalid-detail-doc", "detail_doc must be a string or null"));
   }
-  if (closed_at !== undefined && (typeof closed_at !== "string" || !DATE_RE3.test(closed_at))) {
-    violations.push(violation42("medium", "status.residual.invalid-closed-at", "closed_at must be YYYY-MM-DD"));
+  if (closed_at !== undefined && (typeof closed_at !== "string" || !DATE_RE22.test(closed_at))) {
+    violations.push(violation52("medium", "status.residual.invalid-closed-at", "closed_at must be YYYY-MM-DD"));
   }
   if (lifecycle !== undefined) {
     if (typeof lifecycle !== "string" || !RESIDUAL_LIFECYCLES.includes(lifecycle)) {
-      violations.push(violation42("medium", "status.residual.invalid-lifecycle", `lifecycle must be one of ${RESIDUAL_LIFECYCLES.join(" | ")} \u2014 got ${JSON.stringify(lifecycle)}`));
+      violations.push(violation52("medium", "status.residual.invalid-lifecycle", `lifecycle must be one of ${RESIDUAL_LIFECYCLES.join(" | ")} \u2014 got ${JSON.stringify(lifecycle)}`));
     } else if (lifecycle !== "open") {
       if (closed_at === undefined) {
-        violations.push(violation42("high", "status.residual.closed-missing-closed-at", `lifecycle "${lifecycle}" requires closed_at (YYYY-MM-DD)`, 'set closed_at (e.g. "2026-08-08")'));
+        violations.push(violation52("high", "status.residual.closed-missing-closed-at", `lifecycle "${lifecycle}" requires closed_at (YYYY-MM-DD)`, 'set closed_at (e.g. "2026-08-08")'));
       }
       if (entry.closure_note === undefined) {
-        violations.push(violation42("medium", "status.residual.closed-missing-closure-note", `lifecycle "${lifecycle}" requires closure_note (what changed; how verified)`, "add closure_note explaining the close"));
+        violations.push(violation52("medium", "status.residual.closed-missing-closure-note", `lifecycle "${lifecycle}" requires closure_note (what changed; how verified)`, "add closure_note explaining the close"));
       }
     }
   }
@@ -7890,25 +7937,25 @@ function isHarnessRelativePath2(dir) {
 }
 function validateWorkflowEntry2(entry) {
   const violations = [];
-  if (!isPlainObject32(entry)) {
+  if (!isPlainObject42(entry)) {
     return {
       ok: false,
-      violations: [violation42("high", "status.workflow.invalid", "workflow entry must be an object")]
+      violations: [violation52("high", "status.workflow.invalid", "workflow entry must be an object")]
     };
   }
   validateNonEmptyString32(violations, entry.id, "id", "status.workflow.missing-id", "status.workflow.invalid-id");
   if (entry.type === undefined) {
-    violations.push(violation42("high", "status.workflow.missing-type", "missing required field: type"));
+    violations.push(violation52("high", "status.workflow.missing-type", "missing required field: type"));
   } else if (typeof entry.type !== "string" || !WORKFLOW_LIFECYCLE_TYPES2.includes(entry.type)) {
-    violations.push(violation42("medium", "status.workflow.invalid-type", `type must be one of ${WORKFLOW_LIFECYCLE_TYPES2.join(" | ")} \u2014 got ${JSON.stringify(entry.type)}`));
+    violations.push(violation52("medium", "status.workflow.invalid-type", `type must be one of ${WORKFLOW_LIFECYCLE_TYPES2.join(" | ")} \u2014 got ${JSON.stringify(entry.type)}`));
   }
   validateNonEmptyString32(violations, entry.started_at, "started_at", "status.workflow.missing-started-at", "status.workflow.invalid-started-at");
   if (entry.dir === undefined) {
-    violations.push(violation42("high", "status.workflow.missing-dir", "missing required field: dir"));
+    violations.push(violation52("high", "status.workflow.missing-dir", "missing required field: dir"));
   } else if (typeof entry.dir !== "string" || entry.dir.trim() === "") {
-    violations.push(violation42("medium", "status.workflow.invalid-dir", "dir must be a non-empty string"));
+    violations.push(violation52("medium", "status.workflow.invalid-dir", "dir must be a non-empty string"));
   } else if (!isHarnessRelativePath2(entry.dir)) {
-    violations.push(violation42("medium", "status.workflow.invalid-dir", `dir must be a harness-relative path (no absolute paths, no ".." segments) \u2014 got ${JSON.stringify(entry.dir)}`));
+    violations.push(violation52("medium", "status.workflow.invalid-dir", `dir must be a harness-relative path (no absolute paths, no ".." segments) \u2014 got ${JSON.stringify(entry.dir)}`));
   }
   return { ok: violations.length === 0, violations };
 }
@@ -7918,24 +7965,24 @@ function validateStatusV22(docOrPath, opts = {}) {
   if (typeof docOrPath === "string") {
     try {
       doc = readJson2(docOrPath);
-      harnessDir = dirname52(resolve52(docOrPath));
+      harnessDir = dirname42(resolve42(docOrPath));
     } catch (error) {
       return {
         ok: false,
-        violations: [violation42("high", "status.invalid-json", error.message)]
+        violations: [violation52("high", "status.invalid-json", error.message)]
       };
     }
   } else {
     doc = docOrPath;
   }
-  if (!isPlainObject32(doc)) {
-    return { ok: false, violations: [violation42("high", "status.invalid-doc", "status document must be an object")] };
+  if (!isPlainObject42(doc)) {
+    return { ok: false, violations: [violation52("high", "status.invalid-doc", "status document must be an object")] };
   }
   if (doc.version !== 2) {
     return {
       ok: false,
       violations: [
-        violation42("high", "status.migration-required", `status.json schema version 2 required \u2014 got ${JSON.stringify(doc.version)} (v1 or unknown version); run \`mstar migrate\` to convert the tree`, "run `mstar migrate`")
+        violation52("high", "status.migration-required", `status.json schema version 2 required \u2014 got ${JSON.stringify(doc.version)} (v1 or unknown version); run \`mstar migrate\` to convert the tree`, "run `mstar migrate`")
       ]
     };
   }
@@ -7943,7 +7990,7 @@ function validateStatusV22(docOrPath, opts = {}) {
     return {
       ok: false,
       violations: [
-        violation42("high", "status.migration-required", "v1-shaped status.json (root plans[]) is not a v2 document \u2014 run `mstar migrate` to convert the tree", "run `mstar migrate`")
+        violation52("high", "status.migration-required", "v1-shaped status.json (root plans[]) is not a v2 document \u2014 run `mstar migrate` to convert the tree", "run `mstar migrate`")
       ]
     };
   }
@@ -7951,27 +7998,27 @@ function validateStatusV22(docOrPath, opts = {}) {
     return {
       ok: false,
       violations: [
-        violation42("high", "status.migration-required", "v1-shaped status.json (root residual_findings) is not a v2 document \u2014 run `mstar migrate` to convert the tree", "run `mstar migrate`")
+        violation52("high", "status.migration-required", "v1-shaped status.json (root residual_findings) is not a v2 document \u2014 run `mstar migrate` to convert the tree", "run `mstar migrate`")
       ]
     };
   }
   const violations = [];
   if (doc.updated_at === undefined) {
-    violations.push(violation42("high", "status.missing-updated-at", "missing required field: updated_at"));
-  } else if (typeof doc.updated_at !== "string" || !DATE_RE3.test(doc.updated_at)) {
-    violations.push(violation42("medium", "status.invalid-updated-at", "updated_at must be YYYY-MM-DD"));
+    violations.push(violation52("high", "status.missing-updated-at", "missing required field: updated_at"));
+  } else if (typeof doc.updated_at !== "string" || !DATE_RE22.test(doc.updated_at)) {
+    violations.push(violation52("medium", "status.invalid-updated-at", "updated_at must be YYYY-MM-DD"));
   }
   if (doc.workflows === undefined) {
-    violations.push(violation42("high", "status.missing-workflows", "missing required field: workflows"));
+    violations.push(violation52("high", "status.missing-workflows", "missing required field: workflows"));
   } else if (!Array.isArray(doc.workflows)) {
-    violations.push(violation42("high", "status.invalid-workflows", "workflows must be an array"));
+    violations.push(violation52("high", "status.invalid-workflows", "workflows must be an array"));
   } else {
     const seen = new Set;
     for (const entry of doc.workflows) {
       violations.push(...validateWorkflowEntry2(entry).violations);
-      if (isPlainObject32(entry) && typeof entry.id === "string") {
+      if (isPlainObject42(entry) && typeof entry.id === "string") {
         if (seen.has(entry.id)) {
-          violations.push(violation42("medium", "status.workflow.duplicate-id", `duplicate workflow id in workflows[]: ${JSON.stringify(entry.id)}`));
+          violations.push(violation52("medium", "status.workflow.duplicate-id", `duplicate workflow id in workflows[]: ${JSON.stringify(entry.id)}`));
         }
         seen.add(entry.id);
       }
@@ -7980,122 +8027,60 @@ function validateStatusV22(docOrPath, opts = {}) {
   if (harnessDir !== undefined && Array.isArray(doc.workflows)) {
     let realHarnessDir = null;
     try {
-      realHarnessDir = realpathSync22(harnessDir);
+      realHarnessDir = realpathSync4(harnessDir);
     } catch {}
     for (const entry of doc.workflows) {
-      if (!isPlainObject32(entry) || typeof entry.dir !== "string")
+      if (!isPlainObject42(entry) || typeof entry.dir !== "string")
         continue;
       const relSnapshot = join62(entry.dir, WORKFLOW_SNAPSHOT_FILE2);
       const snapshotPath = join62(harnessDir, relSnapshot);
       const label = typeof entry.id === "string" ? entry.id : relSnapshot;
       let physical;
       try {
-        physical = realpathSync22(snapshotPath);
+        physical = realpathSync4(snapshotPath);
       } catch {
-        violations.push(violation42("high", "status.workflow.snapshot-missing", `workflows[] lists ${JSON.stringify(label)} but its snapshot does not exist at ${JSON.stringify(relSnapshot)} \u2014 the root holds active lifecycles only; unregister the id when its snapshot is removed`));
+        violations.push(violation52("high", "status.workflow.snapshot-missing", `workflows[] lists ${JSON.stringify(label)} but its snapshot does not exist at ${JSON.stringify(relSnapshot)} \u2014 the root holds active lifecycles only; unregister the id when its snapshot is removed`));
         continue;
       }
       if (realHarnessDir !== null && physical !== realHarnessDir && !physical.startsWith(`${realHarnessDir}${sep2}`)) {
-        violations.push(violation42("high", "status.workflow.snapshot-outside-harness", `workflows[] lists ${JSON.stringify(label)} but its snapshot resolves outside the harness dir (${JSON.stringify(physical)}) \u2014 symlinked snapshot paths are rejected; the snapshot must physically live under ${JSON.stringify(harnessDir)}`));
+        violations.push(violation52("high", "status.workflow.snapshot-outside-harness", `workflows[] lists ${JSON.stringify(label)} but its snapshot resolves outside the harness dir (${JSON.stringify(physical)}) \u2014 symlinked snapshot paths are rejected; the snapshot must physically live under ${JSON.stringify(harnessDir)}`));
         continue;
       }
       let snapshot;
       try {
         snapshot = readJson2(snapshotPath);
       } catch (error) {
-        violations.push(violation42("high", "status.workflow.snapshot-invalid", `snapshot at ${JSON.stringify(relSnapshot)} is not valid JSON: ${error.message}`));
+        violations.push(violation52("high", "status.workflow.snapshot-invalid", `snapshot at ${JSON.stringify(relSnapshot)} is not valid JSON: ${error.message}`));
         continue;
       }
       if (typeof snapshot.status === "string" && WORKFLOW_TERMINAL_STATUSES2.includes(snapshot.status)) {
-        violations.push(violation42("high", "status.workflow.terminal-listed", `workflows[] lists ${JSON.stringify(label)} whose snapshot status is terminal (${snapshot.status}) \u2014 removal-at-terminal: terminal writers unregister AFTER the snapshot write`));
+        violations.push(violation52("high", "status.workflow.terminal-listed", `workflows[] lists ${JSON.stringify(label)} whose snapshot status is terminal (${snapshot.status}) \u2014 removal-at-terminal: terminal writers unregister AFTER the snapshot write`));
       }
       if (typeof entry.type === "string" && typeof snapshot.type === "string" && entry.type !== snapshot.type) {
-        violations.push(violation42("medium", "status.workflow.mismatched-type", `workflows[] entry ${JSON.stringify(label)} type ${JSON.stringify(entry.type)} does not match its snapshot type ${JSON.stringify(snapshot.type)} \u2014 the root entry mirrors the snapshot; align them`));
+        violations.push(violation52("medium", "status.workflow.mismatched-type", `workflows[] entry ${JSON.stringify(label)} type ${JSON.stringify(entry.type)} does not match its snapshot type ${JSON.stringify(snapshot.type)} \u2014 the root entry mirrors the snapshot; align them`));
       }
       if (typeof entry.started_at === "string" && typeof snapshot.started_at === "string" && entry.started_at !== snapshot.started_at) {
-        violations.push(violation42("medium", "status.workflow.mismatched-started-at", `workflows[] entry ${JSON.stringify(label)} started_at ${JSON.stringify(entry.started_at)} does not match its snapshot started_at ${JSON.stringify(snapshot.started_at)} \u2014 workflow ${JSON.stringify(label)} collided with another writer (e.g. a concurrent/re-run \`audit promote\` with the same workflow id rewrote the snapshot); the root entry mirrors the snapshot \u2014 align them or remove the colliding workflow`));
+        violations.push(violation52("medium", "status.workflow.mismatched-started-at", `workflows[] entry ${JSON.stringify(label)} started_at ${JSON.stringify(entry.started_at)} does not match its snapshot started_at ${JSON.stringify(snapshot.started_at)} \u2014 workflow ${JSON.stringify(label)} collided with another writer (e.g. a concurrent/re-run \`audit promote\` with the same workflow id rewrote the snapshot); the root entry mirrors the snapshot \u2014 align them or remove the colliding workflow`));
       }
     }
   }
   return { ok: violations.length === 0, violations };
 }
-var GIT_CAPTURE_MAX_BYTES2 = 64 * 1024 * 1024;
-function parseCompassFrontmatterText2(content, filePath) {
-  const lines = content.split(/\r?\n/);
-  if (lines[0]?.trim() !== "---") {
-    throw new Error(`no YAML frontmatter fence in ${filePath} (expected first line "---")`);
-  }
-  const end = lines.indexOf("---", 1);
-  if (end === -1) {
-    throw new Error(`unterminated YAML frontmatter in ${filePath} (no closing "---")`);
-  }
-  const doc = {};
-  let listKey = null;
-  for (let i = 1;i < end; i += 1) {
-    const line = lines[i] ?? "";
-    if (!line.trim() || line.trim().startsWith("#"))
-      continue;
-    if (listKey !== null && /^\s*-\s+/.test(line)) {
-      const item = line.replace(/^\s*-\s+/, "").trim().replace(/^["']|["']$/g, "");
-      if (!Array.isArray(doc[listKey]))
-        doc[listKey] = [];
-      doc[listKey].push(item);
-      continue;
-    }
-    listKey = null;
-    const kv = line.match(/^([A-Za-z_][A-Za-z0-9_-]*):\s*(.*)$/);
-    if (!kv) {
-      throw new Error(`unsupported frontmatter line in ${filePath}: ${JSON.stringify(line)}`);
-    }
-    const value = kv[2].trim();
-    doc[kv[1]] = value === "" ? null : /^\[.*\]$/.test(value) ? parseFlowArray2(value, filePath) : value.replace(/^["']|["']$/g, "");
-    listKey = value === "" ? kv[1] : null;
-  }
-  return doc;
-}
-function parseFlowArray2(raw, filePath) {
-  const inner = raw.slice(1, -1);
-  if (/[[\]]/.test(inner)) {
-    throw new Error(`nested flow-style array in ${filePath}: ${JSON.stringify(raw)} \u2014 only flat scalar items are supported (e.g. [a, b])`);
-  }
-  let quote = null;
-  for (const ch of inner) {
-    if (ch === '"' || ch === "'") {
-      if (quote === null)
-        quote = ch;
-      else if (quote === ch)
-        quote = null;
-    } else if (ch === "," && quote !== null) {
-      throw new Error(`ambiguous flow-style array in ${filePath}: ${JSON.stringify(raw)} \u2014 quoted item containing comma cannot be split unambiguously (flat scalar items only)`);
-    }
-  }
-  if (quote !== null) {
-    throw new Error(`unterminated ${quote} quote in flow-style array in ${filePath}: ${JSON.stringify(raw)}`);
-  }
-  const items = [];
-  for (const part of inner.split(",")) {
-    const item = part.trim().replace(/^["']|["']$/g, "");
-    if (item === "")
-      continue;
-    items.push(item);
-  }
-  return items;
-}
-var PROJECT_ROADMAP_FILE = "roadmap.md";
+var PROJECT_ROADMAP_FILE2 = "roadmap.md";
 var PROJECT_REGISTER_FILE2 = "residuals.json";
 var _DEFAULT_PROJECT2 = "_default";
-var DATE_RE32 = /^\d{4}-\d{2}-\d{2}$/;
+var DATE_RE3 = /^\d{4}-\d{2}-\d{2}$/;
 function isPlainObject52(value) {
   return typeof value === "object" && value !== null && !Array.isArray(value);
 }
-function violation72(severity, code, message, fix) {
+function violation62(severity, code, message, fix) {
   return { ok: false, severity, code, message, fix };
 }
 function validateNonEmptyString42(violations, value, field, missingCode, invalidCode) {
   if (value === undefined) {
-    violations.push(violation72("high", missingCode, `missing required field: ${field}`));
+    violations.push(violation62("high", missingCode, `missing required field: ${field}`));
   } else if (typeof value !== "string" || value.trim() === "") {
-    violations.push(violation72("medium", invalidCode, `${field} must be a non-empty string`));
+    violations.push(violation62("medium", invalidCode, `${field} must be a non-empty string`));
   }
 }
 function validateProjectRegister(doc) {
@@ -8103,20 +8088,20 @@ function validateProjectRegister(doc) {
   if (!isPlainObject52(doc)) {
     return {
       ok: false,
-      violations: [violation72("high", "project.register.invalid", "project register must be an object")]
+      violations: [violation62("high", "project.register.invalid", "project register must be an object")]
     };
   }
   if (doc.entries === undefined) {
-    violations.push(violation72("high", "project.register.missing-entries", "missing required field: entries"));
+    violations.push(violation62("high", "project.register.missing-entries", "missing required field: entries"));
   } else if (!isPlainObject52(doc.entries)) {
-    violations.push(violation72("high", "project.register.invalid-entries", "entries must be an object keyed by plan id"));
+    violations.push(violation62("high", "project.register.invalid-entries", "entries must be an object keyed by plan id"));
   } else {
     for (const [key, entries] of Object.entries(doc.entries)) {
       if (key.trim() === "") {
-        violations.push(violation72("medium", "project.register.invalid-key", "entries keys must be non-empty plan ids"));
+        violations.push(violation62("medium", "project.register.invalid-key", "entries keys must be non-empty plan ids"));
       }
       if (!Array.isArray(entries)) {
-        violations.push(violation72("high", "project.register.invalid-entry-list", `entries[${JSON.stringify(key)}] must be an array of residual entries (one entry per residual; v1 multi-finding semantics)`));
+        violations.push(violation62("high", "project.register.invalid-entry-list", `entries[${JSON.stringify(key)}] must be an array of residual entries (one entry per residual; v1 multi-finding semantics)`));
         continue;
       }
       for (const entry of entries) {
@@ -8125,21 +8110,126 @@ function validateProjectRegister(doc) {
           continue;
         validateNonEmptyString42(violations, entry.source_plan, "source_plan", "project.register.missing-source-plan", "project.register.invalid-source-plan");
         if (entry.registered_at === undefined) {
-          violations.push(violation72("high", "project.register.missing-registered-at", "missing required field: registered_at"));
-        } else if (typeof entry.registered_at !== "string" || !DATE_RE32.test(entry.registered_at)) {
-          violations.push(violation72("medium", "project.register.invalid-registered-at", "registered_at must be YYYY-MM-DD"));
+          violations.push(violation62("high", "project.register.missing-registered-at", "missing required field: registered_at"));
+        } else if (typeof entry.registered_at !== "string" || !DATE_RE3.test(entry.registered_at)) {
+          violations.push(violation62("medium", "project.register.invalid-registered-at", "registered_at must be YYYY-MM-DD"));
         }
         if (entry.lifecycle_id !== undefined && (typeof entry.lifecycle_id !== "string" || entry.lifecycle_id.trim() === "")) {
-          violations.push(violation72("medium", "project.register.invalid-lifecycle-id", "lifecycle_id must be a non-empty string"));
+          violations.push(violation62("medium", "project.register.invalid-lifecycle-id", "lifecycle_id must be a non-empty string"));
         }
         if (typeof entry.source_plan === "string" && entry.source_plan.trim() !== "" && entry.source_plan !== key) {
-          violations.push(violation72("medium", "project.register.mismatched-source-plan", `source_plan ${JSON.stringify(entry.source_plan)} does not match the entries key ${JSON.stringify(key)} \u2014 entries are keyed by plan id`));
+          violations.push(violation62("medium", "project.register.mismatched-source-plan", `source_plan ${JSON.stringify(entry.source_plan)} does not match the entries key ${JSON.stringify(key)} \u2014 entries are keyed by plan id`));
         }
       }
     }
   }
   return { ok: violations.length === 0, violations };
 }
+function resolveHarnessDir2(startDir = process.cwd(), opts = {}) {
+  const start = resolve52(startDir);
+  const explicit = opts.harnessDir ?? process.env.MSTAR_HARNESS_DIR;
+  if (explicit)
+    return resolve52(start, explicit);
+  const boundary = resolve52(start, opts.workspaceRoot ?? defaultWorkspaceRoot2(start));
+  const rc = loadMstarc2(start, boundary);
+  if (rc !== null && rc.config.harnessDir)
+    return resolve52(rc.dir, rc.config.harnessDir);
+  let dir = start;
+  for (;; ) {
+    if (!isAtOrBelow22(dir, boundary))
+      return null;
+    for (const candidate of [join82(dir, ".mstar"), join82(dir, ".agents"), join82(dir, ".plans"), join82(dir, "plans")]) {
+      if (isDirectory3(candidate))
+        return candidate;
+    }
+    if (dir === boundary)
+      return null;
+    const parent = dirname52(dir);
+    if (parent === dir)
+      return null;
+    dir = parent;
+  }
+}
+function defaultWorkspaceRoot2(startDir) {
+  try {
+    const cdup = execFileSync4("git", ["rev-parse", "--show-cdup"], {
+      cwd: startDir,
+      encoding: "utf8",
+      stdio: ["ignore", "pipe", "ignore"]
+    }).trim();
+    if (!cdup)
+      return startDir;
+    let boundary = startDir;
+    for (const segment of cdup.split(/[\\/]/)) {
+      if (segment && segment !== ".")
+        boundary = dirname52(boundary);
+    }
+    return resolve52(boundary);
+  } catch {}
+  return startDir;
+}
+function isAtOrBelow22(dir, root) {
+  const rel = relative22(root, dir);
+  return rel === "" || !rel.startsWith("..") && !isAbsolute32(rel);
+}
+function mstarcDirOverride2(harnessDir, key) {
+  const dir = resolve52(harnessDir);
+  const rc = loadMstarc2(dir, dirname52(dir));
+  const declared = rc?.config[key];
+  return declared ? resolve52(rc.dir, declared) : null;
+}
+function assertSafePathComponent2(value, what) {
+  if (value === "" || value === "." || value === ".." || !/^[A-Za-z0-9._-]+$/.test(value)) {
+    throw new Error(`${what} must be a single safe path component ([A-Za-z0-9._-]+; not "", ".", "..", or containing "/" or "\\") \u2014 got ${JSON.stringify(value)}`);
+  }
+}
+function resolveHarnessSubdir2(startDir, opts, key, fallback) {
+  const harness = resolveHarnessDir2(startDir, opts);
+  if (harness === null) {
+    throw new Error(`harness dir not found from ${resolve52(startDir)} \u2014 cannot resolve the ${fallback} dir (run \`mstar harness scaffold\`, pass opts.harnessDir, or set MSTAR_HARNESS_DIR)`);
+  }
+  const declared = mstarcDirOverride2(harness, key);
+  return declared !== null ? declared : join82(resolve52(harness), fallback);
+}
+function resolveWorkflowDir2(startDir = process.cwd(), opts = {}) {
+  return resolveHarnessSubdir2(startDir, opts, "workflowDir", "workflows");
+}
+function resolveProjectDir2(startDir = process.cwd(), opts = {}) {
+  return resolveHarnessSubdir2(startDir, opts, "projectDir", "projects");
+}
+var GITIGNORE_SNIPPET2 = `# Morning Star harness (.mstar/)
+# Principle: process stays local; results are shared with the team.
+# Default-ignore everything under .mstar/, then re-include the tracked results.
+.mstar/**
+!.mstar/AGENTS.md
+!.mstar/knowledge/
+!.mstar/knowledge/**
+!.mstar/specs/
+!.mstar/specs/**
+# .mstarc \u2014 repo-local harness config (may declare [config] harness_dir=<name>)
+.mstarc
+`;
+var GITIGNORE_SNIPPET_AGENTS2 = `# Morning Star harness (.agents/) \u2014 legacy
+# Default-ignore everything under .agents/, then re-include the tracked results.
+.agents/**
+!.agents/AGENTS.md
+!.agents/knowledge/
+!.agents/knowledge/**
+!.agents/specs/
+!.agents/specs/**
+`;
+var GITIGNORE_PROCESS_ENTRIES2 = GITIGNORE_SNIPPET2.split(`
+`).filter((line) => line.startsWith(".mstar/") || line.startsWith("!.mstar/")).map((line) => line.trim());
+var GITIGNORE_PROCESS_ENTRIES_AGENTS2 = GITIGNORE_SNIPPET_AGENTS2.split(`
+`).filter((line) => line.startsWith(".agents/") || line.startsWith("!.agents/")).map((line) => line.trim());
+function isDirectory3(dir) {
+  try {
+    return statSync32(dir).isDirectory();
+  } catch {
+    return false;
+  }
+}
+var GIT_CAPTURE_MAX_BYTES2 = 64 * 1024 * 1024;
 var MIGRATE_STATUS_FILE = "status.json";
 var ARCHIVED_STATUS_V1_FILE = "archived/status.v1.json";
 var NOTES_LEDGER_FILE = "notes.jsonl";
@@ -8156,7 +8246,7 @@ var ROOT_METADATA_LIFT_KEYS = {
   program_roadmap: true,
   updated_at: true
 };
-function isPlainObject62(value) {
+function isPlainObject6(value) {
   return typeof value === "object" && value !== null && !Array.isArray(value);
 }
 function dateString(value) {
@@ -8183,7 +8273,7 @@ function scanCompasses(harnessDir) {
   const out = [];
   let entries;
   try {
-    entries = readdirSync62(iterationsDir, { withFileTypes: true });
+    entries = readdirSync6(iterationsDir, { withFileTypes: true });
   } catch {
     return out;
   }
@@ -8336,10 +8426,10 @@ function applyRootMetadataLift(snapshot, metadata, migrationNotes, activeIterati
   if (typeof metadata.control_worktree_path === "string" && metadata.control_worktree_path !== "") {
     data.control_worktree_path = metadata.control_worktree_path;
   }
-  if (isPlainObject62(metadata.integration_merge_lease)) {
+  if (isPlainObject6(metadata.integration_merge_lease)) {
     data.integration_merge_lease = metadata.integration_merge_lease;
   }
-  const legacyMetadata = isPlainObject62(data.legacy_metadata) ? { ...data.legacy_metadata } : {};
+  const legacyMetadata = isPlainObject6(data.legacy_metadata) ? { ...data.legacy_metadata } : {};
   for (const [key, value] of Object.entries(metadata)) {
     if (key === "harness_root")
       continue;
@@ -8395,7 +8485,7 @@ function buildRegister(residualFindings, byPlan, projectId, migratedAt) {
     const raw = residualFindings[planId];
     if (!Array.isArray(raw))
       continue;
-    const open = raw.filter((entry) => isPlainObject62(entry) && isOpenResidual2(entry)).sort((a, b) => {
+    const open = raw.filter((entry) => isPlainObject6(entry) && isOpenResidual2(entry)).sort((a, b) => {
       const aId = typeof a.id === "string" ? a.id : "";
       const bId = typeof b.id === "string" ? b.id : "";
       return compareIds(aId, bId);
@@ -8484,12 +8574,12 @@ function migrateHarnessTree(root, opts = {}) {
   if (legacy.version === undefined) {
     throw new Error(`refusing to migrate: no v1 status.json found at ${statusPath} (nothing to migrate)`);
   }
-  const rows = Array.isArray(legacy.plans) ? legacy.plans.filter(isPlainObject62) : [];
+  const rows = Array.isArray(legacy.plans) ? legacy.plans.filter(isPlainObject6) : [];
   if (Array.isArray(legacy.plans)) {
     const unLiftable = [];
     const idCounts = new Map;
     for (const row of legacy.plans) {
-      if (!isPlainObject62(row) || rowIdOf(row) === null) {
+      if (!isPlainObject6(row) || rowIdOf(row) === null) {
         unLiftable.push(row);
         continue;
       }
@@ -8505,7 +8595,7 @@ function migrateHarnessTree(root, opts = {}) {
       throw new Error(`refusing to migrate: ${duplicates.length} duplicate plan id(s) (${duplicates.join(", ")}) \u2014 every v1 row must land in exactly one snapshot`);
     }
   }
-  const metadata = isPlainObject62(legacy.metadata) ? legacy.metadata : {};
+  const metadata = isPlainObject6(legacy.metadata) ? legacy.metadata : {};
   const rootUpdatedAt = dateString(legacy.updated_at) ?? dateString(metadata.updated_at) ?? todayString2();
   const migratedAt = dateString(metadata.updated_at) ?? rootUpdatedAt;
   const migrationNotes = [];
@@ -8542,9 +8632,9 @@ function migrateHarnessTree(root, opts = {}) {
     migrationNotes.push("no active iteration snapshot found \u2014 root metadata execution-policy/branch keys have no lift home and stay unmapped (visible here, not silently dropped)");
   }
   const notesFiles = collectNotesFiles(snapshots);
-  const residualFindings = isPlainObject62(legacy.residual_findings) ? legacy.residual_findings : {};
+  const residualFindings = isPlainObject6(legacy.residual_findings) ? legacy.residual_findings : {};
   const register = buildRegister(residualFindings, byPlan, projectId, migratedAt);
-  const programRoadmap = isPlainObject62(metadata.program_roadmap) ? metadata.program_roadmap : null;
+  const programRoadmap = isPlainObject6(metadata.program_roadmap) ? metadata.program_roadmap : null;
   let roadmap = null;
   if (programRoadmap) {
     const rawTitle = typeof programRoadmap.title === "string" && programRoadmap.title !== "" ? programRoadmap.title : "Program roadmap";
@@ -8553,7 +8643,7 @@ function migrateHarnessTree(root, opts = {}) {
       migrationNotes.push(`roadmap title sanitized for frontmatter (line breaks replaced with spaces): ${JSON.stringify(rawTitle)}`);
     }
     roadmap = {
-      file: join10("projects", projectId, PROJECT_ROADMAP_FILE),
+      file: join10("projects", projectId, PROJECT_ROADMAP_FILE2),
       source: "status.json metadata.program_roadmap",
       content: buildRoadmap({ ...programRoadmap, title: sanitizedTitle }, projectId, migratedAt)
     };
@@ -8640,7 +8730,7 @@ async function applyMigratePlan(plan) {
     const content = notes.lines.length > 0 ? `${notes.lines.join(`
 `)}
 ` : "";
-    writeFileSync42(filePath, content, "utf8");
+    writeFileSync52(filePath, content, "utf8");
   }
   if (plan.register !== null) {
     const gate2 = validateProjectRegister(plan.register.data);
@@ -8656,7 +8746,7 @@ async function applyMigratePlan(plan) {
   if (plan.roadmap !== null) {
     const filePath = projectTargetOf(plan.roadmap.file);
     mkdirSync6(dirname72(filePath), { recursive: true });
-    writeFileSync42(filePath, plan.roadmap.content, "utf8");
+    writeFileSync52(filePath, plan.roadmap.content, "utf8");
   }
   const rootGate = validateStatusV22(plan.rootV2.data, { harnessDir: plan.root });
   if (!rootGate.ok) {
@@ -8686,16 +8776,16 @@ function validatePlannedDocs(plan) {
   for (const snapshot of plan.snapshots) {
     const gate2 = validateWorkflowSnapshot2(snapshot.data);
     if (!gate2.ok) {
-      for (const violation14 of gate2.violations) {
-        warnings.push(`[${violation14.severity}] ${violation14.code}: ${violation14.message} (planned snapshot ${snapshot.file})`);
+      for (const violation9 of gate2.violations) {
+        warnings.push(`[${violation9.severity}] ${violation9.code}: ${violation9.message} (planned snapshot ${snapshot.file})`);
       }
     }
   }
   if (plan.register !== null) {
     const gate2 = validateProjectRegister(plan.register.data);
     if (!gate2.ok) {
-      for (const violation14 of gate2.violations) {
-        warnings.push(`[${violation14.severity}] ${violation14.code}: ${violation14.message} (planned register ${plan.register.file})`);
+      for (const violation9 of gate2.violations) {
+        warnings.push(`[${violation9.severity}] ${violation9.code}: ${violation9.message} (planned register ${plan.register.file})`);
       }
     }
   }
@@ -8857,7 +8947,7 @@ function describeType(value) {
     return "array";
   return typeof value;
 }
-function isPlainObject8(value) {
+function isPlainObject7(value) {
   return typeof value === "object" && value !== null && !Array.isArray(value);
 }
 function parseScalar3(raw) {
@@ -8901,7 +8991,7 @@ function isValidMcpUrl(raw) {
   return true;
 }
 function validateManifest(manifest, errors2, warnings) {
-  if (!isPlainObject8(manifest)) {
+  if (!isPlainObject7(manifest)) {
     errors2.push("plugin.json: manifest must be a JSON object");
     return;
   }
@@ -8937,7 +9027,7 @@ function validateManifest(manifest, errors2, warnings) {
     }
   }
   if (doc.author !== undefined) {
-    if (!isPlainObject8(doc.author)) {
+    if (!isPlainObject7(doc.author)) {
       errors2.push('plugin.json: "author" must be an object with optional string fields name/email/url');
     } else {
       const author = doc.author;
@@ -8960,11 +9050,11 @@ function validateManifest(manifest, errors2, warnings) {
     }
   }
   if (doc.extensions !== undefined) {
-    if (!isPlainObject8(doc.extensions)) {
+    if (!isPlainObject7(doc.extensions)) {
       warnings.push('plugin.json: "extensions" is not an object \u2014 ignored');
     } else {
       for (const [namespace, value] of Object.entries(doc.extensions)) {
-        if (!isPlainObject8(value)) {
+        if (!isPlainObject7(value)) {
           warnings.push(`plugin.json: "extensions.${namespace}" is not an object \u2014 ignored`);
         }
       }
@@ -8973,7 +9063,7 @@ function validateManifest(manifest, errors2, warnings) {
 }
 function validateMcpServer(name, entry, errors2) {
   const prefix = `mcp.json: mcpServers.${name}`;
-  if (!isPlainObject8(entry)) {
+  if (!isPlainObject7(entry)) {
     errors2.push(`${prefix} must be an object`);
     return;
   }
@@ -9007,7 +9097,7 @@ function validateMcpServer(name, entry, errors2) {
       }
     }
     if (server.env !== undefined) {
-      if (!isPlainObject8(server.env)) {
+      if (!isPlainObject7(server.env)) {
         errors2.push(`${prefix}: "env" must be an object of strings`);
       } else {
         for (const [key, value] of Object.entries(server.env)) {
@@ -9046,7 +9136,7 @@ function validateMcpServer(name, entry, errors2) {
     errors2.push(`${prefix}: "url" must be an absolute http(s) URL without user info or fragment; non-loopback endpoints must use https`);
   }
   if (server.headers !== undefined) {
-    if (!isPlainObject8(server.headers)) {
+    if (!isPlainObject7(server.headers)) {
       errors2.push(`${prefix}: "headers" must be an object of strings`);
     } else {
       const seen = new Set;
@@ -9083,7 +9173,7 @@ function validateMcp(root, manifestSchema, errors2) {
     errors2.push(`mcp.json: ${error.message}`);
     return;
   }
-  if (!isPlainObject8(parsed)) {
+  if (!isPlainObject7(parsed)) {
     errors2.push("mcp.json: configuration must be a JSON object");
     return;
   }
@@ -9106,7 +9196,7 @@ function validateMcp(root, manifestSchema, errors2) {
     }
   }
   const servers = doc.mcpServers;
-  if (!isPlainObject8(servers)) {
+  if (!isPlainObject7(servers)) {
     errors2.push('mcp.json: "mcpServers" is required and must be an object');
     return;
   }
@@ -9191,7 +9281,7 @@ function validateAgentPlugin(root) {
     return { ok: false, errors: errors2, warnings };
   }
   validateManifest(manifest, errors2, warnings);
-  const manifestSchema = isPlainObject8(manifest) ? manifest["$schema"] : undefined;
+  const manifestSchema = isPlainObject7(manifest) ? manifest["$schema"] : undefined;
   validateMcp(root, manifestSchema, errors2);
   validateSkills(root, errors2, warnings);
   return { ok: errors2.length === 0, errors: errors2, warnings };
@@ -10688,10 +10778,281 @@ function runPluginValidate(options) {
   }
   process.exitCode = 1;
 }
+var HARNESS_AGENTS_TEMPLATE = `# AGENTS.md \u2014 .mstar/ (harness layer)
+
+- Path symbols: {HARNESS_DIR} = .mstar/; {PLAN_DIR} = plans/; {SDD_DIR} = sdd/<plan-id>/;
+  {ITERATION_DIR} = iterations/; {KNOWLEDGE_DIR} = knowledge/; {SPECS_DIR} = specs/;
+  {WORKFLOW_DIR} = workflows/; {PROJECT_DIR} = projects/ (SSOT: skills/mstar-conventions).
+- Process vs results: process artifacts (plans/, iterations/, sdd/, status.json, workflows/,
+  projects/) stay local and gitignored; results (this file, knowledge/, specs/) are tracked
+  and shared across clones.
+- Done: only @project-manager or @qa-engineer may set Done; implementers set InReview.
+`;
+var CANONICAL_NEGATIONS = {
+  "!.mstar/AGENTS.md": true,
+  "!.mstar/knowledge/": true,
+  "!.mstar/knowledge/**": true,
+  "!.mstar/specs/": true,
+  "!.mstar/specs/**": true
+};
+function gitWorkspaceRoot(startDir) {
+  try {
+    const cdup = execFileSync8("git", ["rev-parse", "--show-cdup"], {
+      cwd: startDir,
+      encoding: "utf8",
+      stdio: ["ignore", "pipe", "ignore"]
+    }).trim();
+    if (!cdup)
+      return startDir;
+    let boundary = startDir;
+    for (const segment of cdup.split(/[\\/]/)) {
+      if (segment && segment !== ".")
+        boundary = path12.dirname(boundary);
+    }
+    return path12.resolve(boundary);
+  } catch {}
+  return startDir;
+}
+function runScaffold(pathArg) {
+  const root = pathArg ? path12.resolve(pathArg) : process.cwd();
+  const harnessDir = scaffoldHarness(root);
+  const projectDir = resolveProjectDir(root, { harnessDir });
+  const created = [];
+  const skipped = [];
+  const workspaceRoot = gitWorkspaceRoot(root);
+  const harnessKind = detectHarnessKind(harnessDir);
+  if (harnessKind === "mstar" && path12.resolve(harnessDir) === path12.join(workspaceRoot, ".mstar")) {
+    const gitignorePath = path12.join(workspaceRoot, ".gitignore");
+    const snippet = emitGitignoreSnippet("mstar");
+    const current = fs8.existsSync(gitignorePath) ? fs8.readFileSync(gitignorePath, "utf8") : "";
+    const lines = new Set(current.split(/\r?\n/).map((line) => line.trim()));
+    const snippetLines = snippet.split(`
+`).map((line) => line.trim());
+    const fenceEntries = snippetLines.filter((line) => line.startsWith(".mstar/") || line.startsWith("!.mstar/") || line.startsWith(".mstarc"));
+    const commentLines = snippetLines.filter((line) => line.startsWith("#"));
+    const missing = fenceEntries.filter((entry) => !lines.has(entry));
+    if (missing.length > 0) {
+      const missingComments = commentLines.filter((line) => !lines.has(line));
+      const broadRule = ".mstar/**";
+      const currentLines = current.split(/\r?\n/);
+      const firstNegation = currentLines.findIndex((line) => line.trim().startsWith("!.mstar/"));
+      if (!lines.has(broadRule) && firstNegation !== -1) {
+        const blockStart = [...missingComments, broadRule, ...missing.filter((entry) => entry.startsWith("!.mstar/"))];
+        currentLines.splice(firstNegation, 0, ...blockStart);
+        let next = currentLines.join(`
+`);
+        if (missing.includes(".mstarc"))
+          next = `${next}${next.endsWith(`
+`) ? "" : `
+`}.mstarc
+`;
+        fs8.writeFileSync(gitignorePath, next, "utf8");
+      } else {
+        const prefix = current && !current.endsWith(`
+`) ? `
+` : "";
+        fs8.appendFileSync(gitignorePath, `${prefix}${[...missingComments, ...missing].join(`
+`)}
+`, "utf8");
+      }
+      created.push(".gitignore (canonical harness snippet)");
+    }
+    const finalLines = fs8.readFileSync(gitignorePath, "utf8").split(/\r?\n/);
+    const broadIndexes = finalLines.map((line, index) => line.trim() === ".mstar/**" ? index : -1).filter((index) => index !== -1);
+    const canonicalNegationIndexes = finalLines.map((line, index) => CANONICAL_NEGATIONS[line.trim()] === true ? index : -1).filter((index) => index !== -1);
+    const firstCanonicalNegationIndex = canonicalNegationIndexes[0] ?? -1;
+    let normalized = false;
+    if (broadIndexes.length > 0) {
+      let removed = 0;
+      let lastRetainedBroadIndex = broadIndexes[0];
+      for (let i = 1;i < broadIndexes.length; i++) {
+        const candidate = broadIndexes[i] - removed;
+        let crossable = true;
+        for (let j = lastRetainedBroadIndex + 1;j < candidate; j++) {
+          const line = finalLines[j].trim();
+          if (line === "")
+            continue;
+          if (line.startsWith("#"))
+            continue;
+          if (line === ".mstar/**")
+            continue;
+          if (CANONICAL_NEGATIONS[line] === true)
+            continue;
+          if (line === ".mstarc")
+            continue;
+          crossable = false;
+          break;
+        }
+        if (crossable) {
+          finalLines.splice(candidate, 1);
+          removed++;
+          normalized = true;
+        } else {
+          lastRetainedBroadIndex = candidate;
+        }
+      }
+      const keptIndex = finalLines.findIndex((line) => line.trim() === ".mstar/**");
+      if (firstCanonicalNegationIndex !== -1 && keptIndex > firstCanonicalNegationIndex) {
+        let feasible = true;
+        for (let i = firstCanonicalNegationIndex;i < keptIndex; i++) {
+          const line = finalLines[i].trim();
+          if (line === "")
+            continue;
+          if (line.startsWith("#"))
+            continue;
+          if (line === ".mstar/**")
+            continue;
+          if (CANONICAL_NEGATIONS[line] === true)
+            continue;
+          if (line === ".mstarc")
+            continue;
+          feasible = false;
+          break;
+        }
+        if (feasible) {
+          const [broadLine] = finalLines.splice(keptIndex, 1);
+          finalLines.splice(firstCanonicalNegationIndex, 0, broadLine);
+          normalized = true;
+        }
+      }
+      const isTargetedUserMstarRule = (line) => {
+        const trimmed = line.trim();
+        if (trimmed === "" || trimmed.startsWith("#"))
+          return false;
+        if (trimmed === ".mstar/**" || trimmed === ".mstarc")
+          return false;
+        if (CANONICAL_NEGATIONS[trimmed] === true)
+          return false;
+        if (trimmed.startsWith("!.mstar/") || trimmed.startsWith(".mstar/"))
+          return true;
+        return false;
+      };
+      const isOwnedLine = (line) => !isTargetedUserMstarRule(line);
+      const targetedRules = finalLines.filter((line) => isTargetedUserMstarRule(line));
+      if (targetedRules.length > 0) {
+        const owned = finalLines.filter(isOwnedLine);
+        const hadTrailingNewline = owned[owned.length - 1] === "";
+        const ownedBody = hadTrailingNewline ? owned.slice(0, -1) : owned;
+        const tail = [];
+        const ensuredDirs = new Set;
+        const broadPositionsPrePartition = finalLines.map((line, index) => line.trim() === ".mstar/**" ? index : -1).filter((index) => index !== -1);
+        const lastBroadPrePartition = broadPositionsPrePartition[broadPositionsPrePartition.length - 1] ?? -1;
+        for (const rule of targetedRules) {
+          const trimmedRule = rule.trim();
+          if (trimmedRule.startsWith("!") && trimmedRule.endsWith("/**")) {
+            const inner = trimmedRule.slice(1, -3);
+            const segments = inner.split("/").slice(1);
+            let prefix = inner.split("/")[0];
+            for (const segment of segments) {
+              prefix += "/" + segment;
+              const dirNegation = "!" + prefix + "/";
+              const alreadyQueued = ensuredDirs.has(dirNegation);
+              const alreadyPresent = !alreadyQueued && finalLines.some((line, index) => index > lastBroadPrePartition && line.trim() === dirNegation);
+              if (!alreadyQueued && !alreadyPresent) {
+                ensuredDirs.add(dirNegation);
+                tail.push(dirNegation);
+              }
+            }
+          }
+          tail.push(rule);
+        }
+        const rebuilt = [...ownedBody, ...tail];
+        const current2 = finalLines[finalLines.length - 1] === "" ? finalLines.slice(0, -1) : finalLines;
+        if (rebuilt.join(`
+`) !== current2.join(`
+`)) {
+          finalLines.length = 0;
+          finalLines.push(...rebuilt);
+          normalized = true;
+        }
+      }
+      const broadAfter = finalLines.map((line, index) => line.trim() === ".mstar/**" ? index : -1).filter((index) => index !== -1);
+      if (broadAfter.length > 1) {
+        const [first, ...duplicates] = broadAfter;
+        let removed2 = 0;
+        for (const duplicate of duplicates) {
+          finalLines.splice(duplicate - removed2, 1);
+          removed2++;
+        }
+        if (removed2 > 0)
+          normalized = true;
+      }
+      const broadIndexesFinal = finalLines.map((line, index) => line.trim() === ".mstar/**" ? index : -1).filter((index) => index !== -1);
+      const canonicalNegationIndexesFinal = finalLines.map((line, index) => CANONICAL_NEGATIONS[line.trim()] === true ? index : -1).filter((index) => index !== -1);
+      const firstCanonicalNegationIndexFinal = canonicalNegationIndexesFinal[0] ?? -1;
+      if (broadIndexesFinal.length > 0 && firstCanonicalNegationIndexFinal !== -1 && broadIndexesFinal[0] > firstCanonicalNegationIndexFinal) {
+        const keptIndex2 = broadIndexesFinal[0];
+        let feasible = true;
+        for (let i = firstCanonicalNegationIndexFinal;i < keptIndex2; i++) {
+          const line = finalLines[i].trim();
+          if (line === "" || line.startsWith("#"))
+            continue;
+          if (line === ".mstar/**" || line === ".mstarc")
+            continue;
+          if (CANONICAL_NEGATIONS[line] === true)
+            continue;
+          feasible = false;
+          break;
+        }
+        if (feasible) {
+          const [broadLine] = finalLines.splice(keptIndex2, 1);
+          finalLines.splice(firstCanonicalNegationIndexFinal, 0, broadLine);
+          normalized = true;
+        }
+      }
+      const broadIndexesLast = finalLines.map((line, index) => line.trim() === ".mstar/**" ? index : -1).filter((index) => index !== -1);
+      if (broadIndexesLast.length > 0) {
+        const lastBroadIndex = broadIndexesLast[broadIndexesLast.length - 1];
+        let insertIndex = finalLines.findIndex((line) => isTargetedUserMstarRule(line));
+        if (insertIndex === -1)
+          insertIndex = finalLines.length;
+        for (const negation of Object.keys(CANONICAL_NEGATIONS)) {
+          const covered = finalLines.some((line, index) => index > lastBroadIndex && line.trim() === negation);
+          if (!covered) {
+            finalLines.splice(insertIndex, 0, negation);
+            insertIndex++;
+            normalized = true;
+          }
+        }
+      }
+      if (normalized && finalLines[finalLines.length - 1] !== "")
+        finalLines.push("");
+    }
+    if (normalized) {
+      fs8.writeFileSync(gitignorePath, finalLines.join(`
+`), "utf8");
+      created.push(".gitignore (canonical harness snippet reordered)");
+    } else if (missing.length === 0) {
+      skipped.push(".gitignore (canonical harness snippet already present)");
+    }
+  } else {
+    skipped.push(".gitignore (canonical harness snippet) \u2014 custom harness layout manages its own ignore rules");
+  }
+  const agentsPath = path12.join(harnessDir, "AGENTS.md");
+  const agentsLabel = `${path12.basename(harnessDir)}/AGENTS.md`;
+  if (!fs8.existsSync(agentsPath)) {
+    fs8.writeFileSync(agentsPath, HARNESS_AGENTS_TEMPLATE, "utf8");
+    created.push(agentsLabel);
+  } else {
+    skipped.push(`${agentsLabel} (already present)`);
+  }
+  const headline = created.length > 0 ? `scaffold: harness initialized at ${harnessDir}` : `scaffold: harness ensured at ${harnessDir}`;
+  console.log(import_picocolors2.default.green(headline));
+  console.log(`  harness dir: ${harnessDir}`);
+  console.log(`  project dir: ${projectDir}`);
+  for (const item of created)
+    console.log(`  created: ${item}`);
+  for (const item of skipped)
+    console.log(`  skipped: ${item}`);
+}
 program2.name("mstar-harness").description("Morning Star harness CLI for target-based agent bootstrap").version(packageVersion);
 program2.command("init").description("Interactive/non-interactive setup for target agent bootstrap").option("-y, --yes", "Non-interactive mode").option("--target <target>", "Install target", "opencode").option("--scope <scope>", "Config scope: global|project (default: project)").option("--output <path>", "Config file path override, relative to project root").option("--dry-run", "Preview result without writing config").option("--no-fallbacks", "Skip installing the dsh-llm-fallbacks plugin (dsh target only)").option("--pm-model <model>", "Optional: model for project-manager (advanced override)").option("--strategic-models <a,b,c>", "Optional: models for architect/product-manager/prompt-engineer").option("--dev-models <a,b,c>", "Optional: models for fullstack-dev/fullstack-dev-2/frontend-dev").option("--qc-models <a,b,c>", "Optional: models for qc trio").option("--other-models <a,b,c>", "Optional: models for remaining roles").action(async (options) => {
   await runInit5({ ...options, noFallbacks: options.fallbacks === false });
 });
+var harnessCommand = program2.command("harness").description("harness bootstrap / dir-resolution helpers (engine-backed)");
+harnessCommand.command("scaffold").description("One-shot harness bootstrap: create the harness dir (default .mstar/, honoring .mstarc harness_dir/project_dir) " + "with dirs + v2 status.json + projects/_default/, append the canonical .gitignore snippet when absent " + "(skipped for non-.mstar layouts), and write a minimal {HARNESS_DIR}/AGENTS.md when absent").argument("[path]", "Root to scaffold (default: cwd)").action((pathArg) => {
+  runScaffold(pathArg);
+});
 program2.command("doctor").description("Validate Morning Star setup for a target agent config").option("--target <target>", "Target agent for doctor checks", "opencode").option("--scope <scope>", "Config scope: global|project", "project").option("--output <path>", "Config file path override, relative to project root").action((options) => {
   runDoctor5(options);
 });
@@ -10704,7 +11065,7 @@ pathCommand.command("resolve").description("Resolve {HARNESS_DIR} + {SPECS_DIR}
   const startDir = pathArg ? path12.resolve(pathArg) : process.cwd();
   const harnessDir = resolveHarnessDir(startDir);
   if (!harnessDir) {
-    const guidance = "no harness dir found \u2014 the bounded probe (.mstar/, .agents/, .plans/, plans/) walked up from " + `${startDir} only within the workspace root (git top-level of the start dir; non-git start probes only itself) \u2014 run \`mstar init\` to bootstrap, or pass a start dir inside a harness-enabled project`;
+    const guidance = "no harness dir found \u2014 the bounded probe (.mstar/, .agents/, .plans/, plans/) walked up from " + `${startDir} only within the workspace root (git top-level of the start dir; non-git start probes only itself) \u2014 run \`mstar harness scaffold\` to bootstrap, or pass a start dir inside a harness-enabled project`;
     if (options.json) {
       console.log(JSON.stringify({ ok: false, startDir, harnessDir: null, specsDir: null, workflowDir: null, projectDir: null, guidance }));
     } else {
@@ -10750,10 +11111,10 @@ statusCommand.command("validate").description("Validate a v2 status.json root or
     }
     const count = gate2.violations.length;
     console.error(import_picocolors2.default.red(`${statusPath}: FAIL (${count} violation${count === 1 ? "" : "s"})`));
-    for (const violation14 of gate2.violations) {
-      console.error(`  - [${violation14.severity}] ${violation14.code}: ${violation14.message}`);
-      if (violation14.fix)
-        console.error(`    fix: ${violation14.fix}`);
+    for (const violation9 of gate2.violations) {
+      console.error(`  - [${violation9.severity}] ${violation9.code}: ${violation9.message}`);
+      if (violation9.fix)
+        console.error(`    fix: ${violation9.fix}`);
     }
     process.exitCode = 1;
   } catch (error) {
@@ -10846,10 +11207,10 @@ function verifyLeaseRow(row, planId, snapshotPath) {
   }
   const count = result.violations.length;
   console.error(import_picocolors2.default.red(`${snapshotPath}: FAIL plan ${planId} (${count} violation${count === 1 ? "" : "s"})`));
-  for (const violation14 of result.violations) {
-    console.error(`  - [${violation14.severity}] ${violation14.code}: ${violation14.message}`);
-    if (violation14.fix)
-      console.error(`    fix: ${violation14.fix}`);
+  for (const violation9 of result.violations) {
+    console.error(`  - [${violation9.severity}] ${violation9.code}: ${violation9.message}`);
+    if (violation9.fix)
+      console.error(`    fix: ${violation9.fix}`);
   }
   process.exitCode = 1;
 }
@@ -10969,10 +11330,10 @@ function printChecklist(label, gate2) {
   }
   const count = gate2.violations.length;
   console.error(import_picocolors2.default.red(`${label}: FAIL (${count} violation${count === 1 ? "" : "s"})`));
-  for (const violation14 of gate2.violations) {
-    console.error(`  - [${violation14.severity}] ${violation14.code}: ${violation14.message}`);
-    if (violation14.fix)
-      console.error(`    fix: ${violation14.fix}`);
+  for (const violation9 of gate2.violations) {
+    console.error(`  - [${violation9.severity}] ${violation9.code}: ${violation9.message}`);
+    if (violation9.fix)
+      console.error(`    fix: ${violation9.fix}`);
   }
 }
 iterationCommand.command("gate").description("Evaluate the phase-transition gate: prints the transition (phase-2-execute / phase-3-close / phase-4-pr-delivery) " + "plus the \xA73.1 entry and \xA73.5 exit checklists. Exit 1 when the gate verdict fails \u2014 during the Phase-3 window " + "(transition: phase-3-close) exit 1 is EXPECTED until the \xA73.4 close items (status: completed + end_date) are " + "written: the exit checklist gates Phase 4, not the Phase-3 entry (qc2 F-003)").requiredOption("--workflow <id>", "Workflow id whose snapshot is evaluated").requiredOption("--compass <path>", "delivery-compass.md path").option("--harness <path>", "Harness dir override (default: resolved {HARNESS_DIR})").option("--branch <branch>", "Current branch probe (exit \xA73.5 item 5)").option("--integration <branch>", "Spec integration branch probe (exit \xA73.5 item 5)").option("--target <branch>", "PR base branch probe (exit \xA73.5 item 6)").action((options) => {
@@ -11006,10 +11367,10 @@ iterationCommand.command("push-cadence").description("\xA75.1a push-cadence prob
   }
   const count = result.violations.length;
   console.error(import_picocolors2.default.red(`push blocked (${count} violation${count === 1 ? "" : "s"})`));
-  for (const violation14 of result.violations) {
-    console.error(`  - [${violation14.severity}] ${violation14.code}: ${violation14.message}`);
-    if (violation14.fix)
-      console.error(`    fix: ${violation14.fix}`);
+  for (const violation9 of result.violations) {
+    console.error(`  - [${violation9.severity}] ${violation9.code}: ${violation9.message}`);
+    if (violation9.fix)
+      console.error(`    fix: ${violation9.fix}`);
   }
   process.exitCode = 1;
 });
@@ -11347,10 +11708,10 @@ lintCommand.description("Lint <target> (file or dir) \u2014 exit 1 on violations
       violations += result.violations.length;
       const count = result.violations.length;
       console.error(import_picocolors2.default.red(`${label}: FAIL (${count} violation${count === 1 ? "" : "s"})`));
-      for (const violation14 of result.violations) {
-        console.error(`  - [${violation14.severity}] ${violation14.code}: ${violation14.message}`);
-        if (violation14.fix)
-          console.error(`    fix: ${violation14.fix}`);
+      for (const violation9 of result.violations) {
+        console.error(`  - [${violation9.severity}] ${violation9.code}: ${violation9.message}`);
+        if (violation9.fix)
+          console.error(`    fix: ${violation9.fix}`);
       }
     }
     if (violations > 0)
@@ -11392,16 +11753,31 @@ designMdCommand.command("validate").description("Validate DESIGN.md in <dir>: to
     failScript(error, "design-md validate");
   }
 });
-function parseAuditFindings(text) {
+var AUDIT_HARDENING_KINDS = ["Hardening", "Checked and clean"];
+function parseAuditScaffoldInput(text) {
   let parsed;
   try {
     parsed = JSON.parse(text);
   } catch {
     throw new SddScriptError("usage: audit scaffold \u2014 findings file is not valid JSON", 2);
   }
-  if (!Array.isArray(parsed))
-    throw new SddScriptError("usage: audit scaffold \u2014 findings file must be a JSON array", 2);
-  return parsed.map((raw, index) => {
+  let root;
+  let needsVerificationRaw;
+  let hardeningCheckedRaw;
+  if (Array.isArray(parsed)) {
+    root = parsed;
+  } else if (typeof parsed === "object" && parsed !== null) {
+    const doc = parsed;
+    if (!Array.isArray(doc.findings)) {
+      throw new SddScriptError("usage: audit scaffold \u2014 findings file must be a JSON array or an object with a findings array", 2);
+    }
+    root = doc.findings;
+    needsVerificationRaw = doc.needsVerification;
+    hardeningCheckedRaw = doc.hardeningChecked;
+  } else {
+    throw new SddScriptError("usage: audit scaffold \u2014 findings file must be a JSON array or an object with a findings array", 2);
+  }
+  const findings = root.map((raw, index) => {
     if (typeof raw !== "object" || raw === null || Array.isArray(raw)) {
       throw new SddScriptError(`usage: audit scaffold \u2014 findings[${index}] is not an object`, 2);
     }
@@ -11444,6 +11820,49 @@ function parseAuditFindings(text) {
       dependsOn
     };
   });
+  return { findings, needsVerification: parseNeedsVerification(needsVerificationRaw), hardeningChecked: parseHardeningChecked(hardeningCheckedRaw) };
+}
+function parseNeedsVerification(raw) {
+  if (raw === undefined)
+    return;
+  if (!Array.isArray(raw)) {
+    throw new SddScriptError("usage: audit scaffold \u2014 needsVerification must be an array of {lead, how, evidence?}", 2);
+  }
+  return raw.map((entry, index) => {
+    if (typeof entry !== "object" || entry === null || Array.isArray(entry)) {
+      throw new SddScriptError(`usage: audit scaffold \u2014 needsVerification[${index}] is not an object`, 2);
+    }
+    const e = entry;
+    const lead = typeof e.lead === "string" ? e.lead.trim() : "";
+    const how = typeof e.how === "string" ? e.how.trim() : "";
+    if (lead === "" || how === "") {
+      throw new SddScriptError(`usage: audit scaffold \u2014 needsVerification[${index}] needs non-empty lead and how`, 2);
+    }
+    const evidence = typeof e.evidence === "string" && e.evidence.trim() !== "" ? e.evidence.trim() : undefined;
+    return { lead, how, evidence };
+  });
+}
+function parseHardeningChecked(raw) {
+  if (raw === undefined)
+    return;
+  if (!Array.isArray(raw)) {
+    throw new SddScriptError("usage: audit scaffold \u2014 hardeningChecked must be an array of {kind, text}", 2);
+  }
+  return raw.map((entry, index) => {
+    if (typeof entry !== "object" || entry === null || Array.isArray(entry)) {
+      throw new SddScriptError(`usage: audit scaffold \u2014 hardeningChecked[${index}] is not an object`, 2);
+    }
+    const e = entry;
+    const kind = typeof e.kind === "string" ? e.kind : "";
+    const text = typeof e.text === "string" ? e.text.trim() : "";
+    if (!AUDIT_HARDENING_KINDS.includes(kind)) {
+      throw new SddScriptError(`usage: audit scaffold \u2014 hardeningChecked[${index}].kind must be one of ${AUDIT_HARDENING_KINDS.join("|")}`, 2);
+    }
+    if (text === "") {
+      throw new SddScriptError(`usage: audit scaffold \u2014 hardeningChecked[${index}] needs non-empty text`, 2);
+    }
+    return { kind, text };
+  });
 }
 var auditCommand = program2.command("audit").description("audit plan scaffold (engine-backed)");
 function resolveAuditShortSha(cwd, override) {
@@ -11460,7 +11879,7 @@ function resolveAuditShortSha(cwd, override) {
     return "unknown";
   }
 }
-auditCommand.command("scaffold").description("Scaffold an audit-<date>/ plan directory (numbered plan files + README index) from a JSON findings file " + "(exit 2 on usage)").argument("[findings-file]", "JSON file: array of {title, priority, effort, risk, category, dependsOn?, description}").option("--dir <out-dir>", "Output directory (default: ./audit-<date> from --date or today)").option("--sha <commit>", "Short commit SHA for the Planned-at field (default: git rev-parse --short HEAD)").option("--date <YYYY-MM-DD>", "Audit date (default: today)").option("--repo <name>", "Repository name for the README title (default: repo)").action((findingsFile, options) => {
+auditCommand.command("scaffold").description("Scaffold an audit-<date>/ plan directory (numbered plan files + README index) from a JSON findings file " + "(exit 2 on usage)").argument("[findings-file]", "JSON file: array of {title, priority, effort, risk, category, dependsOn?, description}, or object {findings: [...], needsVerification?: [{lead, how, evidence?}], hardeningChecked?: [{kind, text}]}").option("--dir <out-dir>", "Output directory (default: ./audit-<date> from --date or today)").option("--sha <commit>", "Short commit SHA for the Planned-at field (default: git rev-parse --short HEAD)").option("--date <YYYY-MM-DD>", "Audit date (default: today)").option("--repo <name>", "Repository name for the README title (default: repo)").action((findingsFile, options) => {
   try {
     if (!findingsFile)
       throw new SddScriptError("usage: audit scaffold <findings-file> [--dir <out-dir>]", 2);
@@ -11475,9 +11894,15 @@ auditCommand.command("scaffold").description("Scaffold an audit-<date>/ plan dir
     }
     const date = options.date ?? new Date().toISOString().slice(0, 10);
     const outDir = options.dir !== undefined ? resolveCliPath(options.dir) : resolveCliPath(`audit-${date}`);
-    const findings = parseAuditFindings(fs8.readFileSync(abs, "utf8"));
+    const input = parseAuditScaffoldInput(fs8.readFileSync(abs, "utf8"));
     const sha = resolveAuditShortSha(process.cwd(), options.sha);
-    const result = scaffoldAuditPlan(outDir, findings, { date, repoName: options.repo, repoShortSha: sha });
+    const result = scaffoldAuditPlan(outDir, input.findings, {
+      date,
+      repoName: options.repo,
+      repoShortSha: sha,
+      needsVerification: input.needsVerification,
+      hardeningChecked: input.hardeningChecked
+    });
     const count = result.files.length;
     console.log(import_picocolors2.default.green(`audit scaffold: OK \u2014 ${count} plan file${count === 1 ? "" : "s"} in ${result.outDir}`));
     for (const file of result.files)