@mstar-harness/cli 3.4.1 → 3.5.1

package/dist/mstar-harness.js

@@ -2414,7 +2414,7 @@ var require_picocolors2 = __commonJS((exports, module) => {
 });
 
 // src/index.ts
-import { execFileSync as execFileSync9 } from "child_process";
+import { execFileSync as execFileSync10 } from "child_process";
 import fs8 from "fs";
 import path12 from "path";
 
@@ -4073,33 +4073,35 @@ import { randomUUID } from "node:crypto";
 import { basename, dirname, join, resolve } from "node:path";
 import { readFileSync as readFileSync2, statSync } from "node:fs";
 import { dirname as dirname2, isAbsolute, join as join2, relative, resolve as resolve2 } from "node:path";
-import { existsSync as existsSync5, mkdirSync as mkdirSync5, readdirSync as readdirSync4, readFileSync as readFileSync6, realpathSync as realpathSync2, statSync as statSync3, writeFileSync as writeFileSync3 } from "node:fs";
+import { existsSync as existsSync6, mkdirSync as mkdirSync5, readdirSync as readdirSync5, readFileSync as readFileSync6, realpathSync as realpathSync2, statSync as statSync3, writeFileSync as writeFileSync3 } from "node:fs";
 import { execFileSync } from "node:child_process";
-import { basename as basename2, dirname as dirname5, isAbsolute as isAbsolute3, join as join8, relative as relative2, resolve as resolve6 } from "node:path";
-import { existsSync as existsSync4, mkdirSync as mkdirSync4, readFileSync as readFileSync5, readdirSync as readdirSync3 } from "node:fs";
-import { join as join7, resolve as resolve5 } from "node:path";
+import { basename as basename3, dirname as dirname5, isAbsolute as isAbsolute4, join as join9, relative as relative2, resolve as resolve7 } from "node:path";
+import { existsSync as existsSync5, mkdirSync as mkdirSync4, readFileSync as readFileSync5, readdirSync as readdirSync4 } from "node:fs";
+import { basename as basename2, join as join8, resolve as resolve6 } from "node:path";
 import { existsSync as existsSync2, readdirSync, readFileSync as readFileSync3 } from "node:fs";
 import { mkdirSync as mkdirSync2, rmdirSync, statSync as statSync2, unlinkSync as unlinkSync2, writeFileSync as writeFileSync2 } from "node:fs";
 import { dirname as dirname3, isAbsolute as isAbsolute2, join as join4, resolve as resolve3 } from "node:path";
 import { setTimeout as sleep } from "node:timers/promises";
 import { AsyncLocalStorage as AsyncLocalStorage2 } from "node:async_hooks";
-import { existsSync as existsSync3, readFileSync as readFileSync4, readdirSync as readdirSync2, realpathSync } from "node:fs";
-import { dirname as dirname4, join as join6, resolve as resolve4, sep } from "node:path";
+import { existsSync as existsSync3, readdirSync as readdirSync2, unlinkSync as unlinkSync3 } from "node:fs";
+import { isAbsolute as isAbsolute3, join as join5, resolve as resolve4 } from "node:path";
+import { existsSync as existsSync4, readFileSync as readFileSync4, readdirSync as readdirSync3, realpathSync } from "node:fs";
+import { dirname as dirname4, join as join7, resolve as resolve5, sep } from "node:path";
 import { execFileSync as execFileSync2 } from "node:child_process";
-import { existsSync as existsSync6 } from "node:fs";
-import { isAbsolute as isAbsolute4, resolve as resolve7 } from "node:path";
+import { existsSync as existsSync7 } from "node:fs";
+import { isAbsolute as isAbsolute5, resolve as resolve8 } from "node:path";
 import { execFileSync as execFileSync3 } from "node:child_process";
-import { mkdirSync as mkdirSync6, readdirSync as readdirSync5, readFileSync as readFileSync7, realpathSync as realpathSync3, statSync as statSync4, writeFileSync as writeFileSync4 } from "node:fs";
-import { basename as basename3, dirname as dirname6, isAbsolute as isAbsolute5, join as join9, resolve as resolve8 } from "node:path";
+import { mkdirSync as mkdirSync6, readdirSync as readdirSync6, readFileSync as readFileSync7, realpathSync as realpathSync3, statSync as statSync4, writeFileSync as writeFileSync4 } from "node:fs";
+import { basename as basename4, dirname as dirname6, isAbsolute as isAbsolute6, join as join10, resolve as resolve9 } from "node:path";
 import { execFileSync as execFileSync4 } from "node:child_process";
-import { existsSync as existsSync7, mkdirSync as mkdirSync8, readdirSync as readdirSync7, readFileSync as readFileSync9, rmdirSync as rmdirSync2, rmSync, writeFileSync as writeFileSync6 } from "node:fs";
-import { basename as basename4, join as join11, resolve as resolve10, sep as sep3 } from "node:path";
-import { existsSync as existsSync8, readdirSync as readdirSync8, readFileSync as readFileSync10 } from "node:fs";
-import { basename as basename5, isAbsolute as isAbsolute7, join as join12, relative as relative4, resolve as resolve11, sep as sep4 } from "node:path";
-import { existsSync as existsSync9 } from "node:fs";
-import { join as join13 } from "node:path";
-import { readdirSync as readdirSync9 } from "node:fs";
-import { isAbsolute as isAbsolute8, join as join14 } from "node:path";
+import { existsSync as existsSync8, mkdirSync as mkdirSync8, readdirSync as readdirSync8, readFileSync as readFileSync9, rmdirSync as rmdirSync2, rmSync, writeFileSync as writeFileSync6 } from "node:fs";
+import { basename as basename5, join as join12, resolve as resolve11, sep as sep3 } from "node:path";
+import { existsSync as existsSync9, readdirSync as readdirSync9, readFileSync as readFileSync10 } from "node:fs";
+import { basename as basename6, isAbsolute as isAbsolute8, join as join13, relative as relative4, resolve as resolve12, sep as sep4 } from "node:path";
+import { existsSync as existsSync10 } from "node:fs";
+import { join as join14 } from "node:path";
+import { readdirSync as readdirSync10 } from "node:fs";
+import { isAbsolute as isAbsolute9, join as join15 } from "node:path";
 var SEVERITY_ORDER = ["critical", "high", "medium", "low", "nit"];
 function readJson(filePath) {
   if (!existsSync(filePath))
@@ -4620,6 +4622,160 @@ async function withStatusWriteLock(statusPath, fn, opts = {}) {
     } catch {}
   }
 }
+var PLAN_SHAPED_KEY_RE = /^[0-9]{8}-[a-z0-9-]+$/;
+function resolveArtifactPath(harnessRoot, ref) {
+  const { kind, key } = ref;
+  if (kind === "json") {
+    if (!isAbsolute3(key)) {
+      throw new Error(`ArtifactStore json key must be an absolute path \u2014 got ${JSON.stringify(key)}`);
+    }
+    if (key.split(/[\\/]+/).includes("..")) {
+      throw new Error(`ArtifactStore json key must not contain ".." segments \u2014 got ${JSON.stringify(key)}`);
+    }
+    return key;
+  }
+  assertSafePathComponent(key, "ArtifactStore key");
+  if (kind === "status") {
+    if (key !== "root") {
+      throw new Error(`ArtifactStore status key must be "root" \u2014 got ${JSON.stringify(key)}`);
+    }
+    return join5(harnessRoot, "status.json");
+  }
+  if (kind === "snapshot") {
+    return join5(resolveWorkflowDir(harnessRoot, { harnessDir: harnessRoot }), key, "snapshot.json");
+  }
+  if (kind === "residuals") {
+    return join5(resolveProjectDir(harnessRoot, { harnessDir: harnessRoot }), key, "residuals.json");
+  }
+  if (PLAN_SHAPED_KEY_RE.test(key)) {
+    return join5(harnessRoot, "sdd", key, "review", "report.json");
+  }
+  return join5(harnessRoot, "sdd", "_reviews", `${key}.json`);
+}
+function listDirNames(dir) {
+  return readDirEntries(dir).filter((entry) => entry.isDirectory()).map((entry) => entry.name);
+}
+function listJsonKeys(dir) {
+  return readDirEntries(dir).filter((entry) => entry.isFile() && entry.name.endsWith(".json")).map((entry) => entry.name.slice(0, -".json".length));
+}
+function readDirEntries(dir) {
+  try {
+    return readdirSync2(dir, { withFileTypes: true });
+  } catch (error) {
+    const code = error.code;
+    if (code === "ENOENT" || code === "ENOTDIR")
+      return [];
+    throw error;
+  }
+}
+function tryResolveGetPath(root, kind, key) {
+  try {
+    return resolveArtifactPath(root, { kind, key });
+  } catch {
+    return;
+  }
+}
+function createFsStore(harnessRoot) {
+  const root = resolve4(harnessRoot);
+  return {
+    root,
+    async put(doc) {
+      if (doc.schema !== undefined) {
+        throw new Error("FsStore does not persist schema ids \u2014 omit --schema or inject a store module that persists it");
+      }
+      writeJson(resolveArtifactPath(root, doc), doc.payload);
+    },
+    async get(ref) {
+      const filePath = resolveArtifactPath(root, ref);
+      if (!existsSync3(filePath))
+        return;
+      return readJson(filePath);
+    },
+    async delete(ref) {
+      const filePath = resolveArtifactPath(root, ref);
+      if (existsSync3(filePath))
+        unlinkSync3(filePath);
+    },
+    async list(kind) {
+      if (kind === "json") {
+        throw new Error("ArtifactStore json keys are absolute paths and cannot be listed");
+      }
+      const keys = [];
+      if (kind === "status") {
+        if (existsSync3(resolveArtifactPath(root, { kind, key: "root" })))
+          keys.push("root");
+      } else if (kind === "snapshot" || kind === "residuals") {
+        const baseDir = kind === "snapshot" ? resolveWorkflowDir(root, { harnessDir: root }) : resolveProjectDir(root, { harnessDir: root });
+        for (const name of listDirNames(baseDir)) {
+          const getPath = tryResolveGetPath(root, kind, name);
+          if (getPath !== undefined && existsSync3(getPath))
+            keys.push(name);
+        }
+      } else {
+        const sddDir = join5(root, "sdd");
+        for (const key of listJsonKeys(join5(sddDir, "_reviews"))) {
+          if (!PLAN_SHAPED_KEY_RE.test(key) && tryResolveGetPath(root, kind, key) !== undefined) {
+            keys.push(key);
+          }
+        }
+        for (const name of listDirNames(sddDir)) {
+          if (PLAN_SHAPED_KEY_RE.test(name)) {
+            const getPath = tryResolveGetPath(root, kind, name);
+            if (getPath !== undefined && existsSync3(getPath))
+              keys.push(name);
+          }
+        }
+      }
+      return keys.sort().map((key) => ({ kind, key }));
+    }
+  };
+}
+var injectedStore;
+function setArtifactStore(store) {
+  injectedStore = store;
+}
+function getArtifactStore() {
+  if (injectedStore !== undefined)
+    return injectedStore;
+  const root = resolveHarnessDir(process.cwd());
+  if (root === null) {
+    throw new Error(`harness dir not found from ${resolve4(process.cwd())} \u2014 cannot create the default FsStore (run \`mstar harness scaffold\`, pass opts.harnessDir, or set MSTAR_HARNESS_DIR)`);
+  }
+  return createFsStore(root);
+}
+function assertFsStorePath(store, ref, expectedPath) {
+  const root = store.root;
+  if (typeof root !== "string")
+    return;
+  const storePath = resolveArtifactPath(root, ref);
+  const expected = resolve4(expectedPath);
+  if (storePath !== expected) {
+    throw new Error(`routed writer path mismatch: the active FsStore resolves ${ref.kind}/${JSON.stringify(ref.key)} to ${JSON.stringify(storePath)} but the caller's target is ${JSON.stringify(expected)} \u2014 call setArtifactStore(createFsStore(<root>)) first when the write target differs from the active store's root`);
+  }
+}
+var URI_SCHEME_RE = /^[A-Za-z][A-Za-z0-9+.-]*:/;
+function isArtifactStore(value) {
+  return typeof value === "object" && value !== null && typeof value.put === "function" && typeof value.get === "function";
+}
+async function loadStoreModule(modulePath) {
+  if (modulePath === "") {
+    throw new Error("loadStoreModule: module path must not be empty");
+  }
+  if (URI_SCHEME_RE.test(modulePath)) {
+    throw new Error(`loadStoreModule: only filesystem paths are allowed \u2014 got ${JSON.stringify(modulePath)} (URI schemes such as http:/https:/file: are rejected)`);
+  }
+  const resolved = resolve4(modulePath);
+  if (!existsSync3(resolved)) {
+    throw new Error(`loadStoreModule: module file not found \u2014 ${JSON.stringify(resolved)}`);
+  }
+  const mod = await import(resolved);
+  const candidate = mod.createArtifactStore ?? mod.default ?? mod;
+  const store = typeof candidate === "function" ? await candidate() : candidate;
+  if (!isArtifactStore(store)) {
+    throw new Error(`loadStoreModule: module ${JSON.stringify(resolved)} does not export an ArtifactStore \u2014 expected a createArtifactStore named export, a default factory, or a default object with put() and get() functions`);
+  }
+  return store;
+}
 var BRANCH_FORMS_HINT = '"Working branch: <existing>" | "Working branch: create <new> from <base>" | "Branch policy: direct on <branch> \u2014 <reason>"';
 var REQUIRED_FIELDS = [
   { key: "executeAs", label: "Execute as", code: "execute-as" },
@@ -5052,7 +5208,7 @@ function validateStatusV2(docOrPath, opts = {}) {
   if (typeof docOrPath === "string") {
     try {
       doc = readJson(docOrPath);
-      harnessDir = dirname4(resolve4(docOrPath));
+      harnessDir = dirname4(resolve5(docOrPath));
     } catch (error) {
       return {
         ok: false,
@@ -5119,8 +5275,8 @@ function validateStatusV2(docOrPath, opts = {}) {
     for (const entry of doc.workflows) {
       if (!isPlainObject4(entry) || typeof entry.dir !== "string")
         continue;
-      const relSnapshot = join6(entry.dir, WORKFLOW_SNAPSHOT_FILE);
-      const snapshotPath = join6(harnessDir, relSnapshot);
+      const relSnapshot = join7(entry.dir, WORKFLOW_SNAPSHOT_FILE);
+      const snapshotPath = join7(harnessDir, relSnapshot);
       const label = typeof entry.id === "string" ? entry.id : relSnapshot;
       let physical;
       try {
@@ -5154,8 +5310,10 @@ function validateStatusV2(docOrPath, opts = {}) {
   return { ok: violations.length === 0, violations };
 }
 var validateStatus = validateStatusV2;
-function registerWorkflowEntryLocked(statusPath, entry) {
+async function registerWorkflowEntryLocked(statusPath, entry) {
   const harnessDir = dirname4(statusPath);
+  const store = getArtifactStore();
+  assertFsStorePath(store, { kind: "status", key: "root" }, statusPath);
   const current = readJson(statusPath);
   const fresh = Object.keys(current).length === 0;
   const doc = fresh ? { version: 2, updated_at: todayString(), workflows: [] } : current;
@@ -5173,7 +5331,7 @@ function registerWorkflowEntryLocked(statusPath, entry) {
   if (!gate.ok) {
     throw new Error(`refusing to write invalid status.json: ${gate.violations.map((v) => v.message).join("; ")}`);
   }
-  writeJson(statusPath, doc);
+  await store.put({ kind: "status", key: "root", payload: doc });
   return doc;
 }
 var PROJECT_ROADMAP_FILE = "roadmap.md";
@@ -5246,9 +5404,12 @@ async function appendProjectRegisterEntries(opts) {
   if (opts.entries.length === 0) {
     throw new Error("refusing to append residual entries: entries must not be empty");
   }
-  const registerPath = resolve5(join7(opts.projectDir, PROJECT_REGISTER_FILE));
+  const registerPath = resolve6(join8(opts.projectDir, PROJECT_REGISTER_FILE));
+  const projectKey = basename2(resolve6(opts.projectDir));
+  const store = getArtifactStore();
+  assertFsStorePath(store, { kind: "residuals", key: projectKey }, registerPath);
   mkdirSync4(opts.projectDir, { recursive: true });
-  return withStatusWriteLock(registerPath, () => {
+  return withStatusWriteLock(registerPath, async () => {
     const doc = readJson(registerPath);
     const entriesMap = doc.entries ?? {};
     let key = opts.basePlanKey;
@@ -5283,14 +5444,17 @@ async function appendProjectRegisterEntries(opts) {
     if (!gate.ok) {
       throw new Error(`refusing to write invalid project register: ${gate.violations.map((v) => v.message).join("; ")}`);
     }
-    writeJson(registerPath, register);
+    await store.put({ kind: "residuals", key: projectKey, payload: register });
     return { ok: true, key };
   });
 }
 async function closeProjectRegisterEntry(opts) {
-  const registerPath = resolve5(join7(opts.projectDir, PROJECT_REGISTER_FILE));
+  const registerPath = resolve6(join8(opts.projectDir, PROJECT_REGISTER_FILE));
+  const projectKey = basename2(resolve6(opts.projectDir));
+  const store = getArtifactStore();
+  assertFsStorePath(store, { kind: "residuals", key: projectKey }, registerPath);
   mkdirSync4(opts.projectDir, { recursive: true });
-  return withStatusWriteLock(registerPath, () => {
+  return withStatusWriteLock(registerPath, async () => {
     const doc = readJson(registerPath);
     const planEntries = doc.entries?.[opts.planKey];
     if (!Array.isArray(planEntries)) {
@@ -5310,7 +5474,7 @@ async function closeProjectRegisterEntry(opts) {
     if (!gate.ok) {
       throw new Error(`refusing to write invalid project register: ${gate.violations.map((v) => v.message).join("; ")}`);
     }
-    writeJson(registerPath, register);
+    await store.put({ kind: "residuals", key: projectKey, payload: register });
     return { ok: true };
   });
 }
@@ -5363,15 +5527,15 @@ function techDebtRollup(projectDir) {
   const items = [];
   let entries;
   try {
-    entries = readdirSync3(projectDir, { withFileTypes: true });
+    entries = readdirSync4(projectDir, { withFileTypes: true });
   } catch {
     entries = [];
   }
   for (const project of entries) {
     if (!project.isDirectory())
       continue;
-    const registerPath = join7(projectDir, project.name, PROJECT_REGISTER_FILE);
-    if (!existsSync4(registerPath))
+    const registerPath = join8(projectDir, project.name, PROJECT_REGISTER_FILE);
+    if (!existsSync5(registerPath))
       continue;
     let register;
     try {
@@ -5407,19 +5571,19 @@ function techDebtRollup(projectDir) {
   return { computed, stored, checks, overall };
 }
 function resolveHarnessDir(startDir = process.cwd(), opts = {}) {
-  const start = resolve6(startDir);
+  const start = resolve7(startDir);
   const explicit = opts.harnessDir ?? process.env.MSTAR_HARNESS_DIR;
   if (explicit)
-    return resolve6(start, explicit);
-  const boundary = resolve6(start, opts.workspaceRoot ?? defaultWorkspaceRoot(start));
+    return resolve7(start, explicit);
+  const boundary = resolve7(start, opts.workspaceRoot ?? defaultWorkspaceRoot(start));
   const rc = loadMstarc(start, boundary);
   if (rc !== null && rc.config.harnessDir)
-    return resolve6(rc.dir, rc.config.harnessDir);
+    return resolve7(rc.dir, rc.config.harnessDir);
   let dir = start;
   for (;; ) {
     if (!isAtOrBelow2(dir, boundary))
       return null;
-    for (const candidate of [join8(dir, ".mstar"), join8(dir, ".agents"), join8(dir, ".plans"), join8(dir, "plans")]) {
+    for (const candidate of [join9(dir, ".mstar"), join9(dir, ".agents"), join9(dir, ".plans"), join9(dir, "plans")]) {
       if (isDirectory(candidate))
         return candidate;
     }
@@ -5445,19 +5609,19 @@ function defaultWorkspaceRoot(startDir) {
       if (segment && segment !== ".")
         boundary = dirname5(boundary);
     }
-    return resolve6(boundary);
+    return resolve7(boundary);
   } catch {}
   return startDir;
 }
 function isAtOrBelow2(dir, root) {
   const rel = relative2(root, dir);
-  return rel === "" || !rel.startsWith("..") && !isAbsolute3(rel);
+  return rel === "" || !rel.startsWith("..") && !isAbsolute4(rel);
 }
 function mstarcDirOverride(harnessDir, key) {
-  const dir = resolve6(harnessDir);
+  const dir = resolve7(harnessDir);
   const rc = loadMstarc(dir, dirname5(dir));
   const declared = rc?.config[key];
-  return declared ? resolve6(rc.dir, declared) : null;
+  return declared ? resolve7(rc.dir, declared) : null;
 }
 function resolveSpecsDir(harnessDir, opts = {}) {
   const declared = mstarcDirOverride(harnessDir, "specsDir");
@@ -5466,20 +5630,20 @@ function resolveSpecsDir(harnessDir, opts = {}) {
       mkdirSync5(declared, { recursive: true });
     return declared;
   }
-  const harness = resolve6(harnessDir);
+  const harness = resolve7(harnessDir);
   const repoRoot = dirname5(harness);
   const candidates = [
-    join8(harness, "specs"),
-    join8(repoRoot, "docs", "specs"),
-    join8(repoRoot, "specs"),
-    join8(harness, "designs"),
-    join8(repoRoot, "designs")
+    join9(harness, "specs"),
+    join9(repoRoot, "docs", "specs"),
+    join9(repoRoot, "specs"),
+    join9(harness, "designs"),
+    join9(repoRoot, "designs")
   ];
   for (const candidate of candidates) {
     if (isDirectory(candidate) && hasFiles(candidate))
       return candidate;
   }
-  const fallback = join8(harness, "specs");
+  const fallback = join9(harness, "specs");
   if (opts.create !== false)
     mkdirSync5(fallback, { recursive: true });
   return fallback;
@@ -5491,18 +5655,18 @@ function assertSafePathComponent(value, what) {
 }
 function resolveSddDir(harnessDir, planId) {
   assertSafePathComponent(planId, "planId");
-  const base = resolve6(harnessDir);
+  const base = resolve7(harnessDir);
   const declared = mstarcDirOverride(base, "sddDir");
-  const sddBase = declared !== null ? declared : join8(base, "sdd");
-  return join8(sddBase, planId);
+  const sddBase = declared !== null ? declared : join9(base, "sdd");
+  return join9(sddBase, planId);
 }
 function resolveHarnessSubdir(startDir, opts, key, fallback) {
   const harness = resolveHarnessDir(startDir, opts);
   if (harness === null) {
-    throw new Error(`harness dir not found from ${resolve6(startDir)} \u2014 cannot resolve the ${fallback} dir (run \`mstar harness scaffold\`, pass opts.harnessDir, or set MSTAR_HARNESS_DIR)`);
+    throw new Error(`harness dir not found from ${resolve7(startDir)} \u2014 cannot resolve the ${fallback} dir (run \`mstar harness scaffold\`, pass opts.harnessDir, or set MSTAR_HARNESS_DIR)`);
   }
   const declared = mstarcDirOverride(harness, key);
-  return declared !== null ? declared : join8(resolve6(harness), fallback);
+  return declared !== null ? declared : join9(resolve7(harness), fallback);
 }
 function resolveWorkflowDir(startDir = process.cwd(), opts = {}) {
   return resolveHarnessSubdir(startDir, opts, "workflowDir", "workflows");
@@ -5517,13 +5681,13 @@ var EMPTY_STATUS_TEMPLATE = {
 };
 var SCAFFOLD_DIRS = ["plans", "iterations", "knowledge", "specs", "sdd"];
 function resolveScaffoldDirs(root) {
-  const start = resolve6(root);
-  const boundary = resolve6(start, defaultWorkspaceRoot(start));
+  const start = resolve7(root);
+  const boundary = resolve7(start, defaultWorkspaceRoot(start));
   const rc = loadMstarc(start, boundary);
   const explicit = process.env.MSTAR_HARNESS_DIR;
-  const harnessDir = explicit ? resolve6(start, explicit) : rc !== null && rc.config.harnessDir ? resolve6(rc.dir, rc.config.harnessDir) : join8(start, ".mstar");
+  const harnessDir = explicit ? resolve7(start, explicit) : rc !== null && rc.config.harnessDir ? resolve7(rc.dir, rc.config.harnessDir) : join9(start, ".mstar");
   const declaredProjectDir = mstarcDirOverride(harnessDir, "projectDir");
-  const projectDir = declaredProjectDir !== null ? declaredProjectDir : join8(harnessDir, "projects");
+  const projectDir = declaredProjectDir !== null ? declaredProjectDir : join9(harnessDir, "projects");
   return { harnessDir, projectDir };
 }
 var ROADMAP_TEMPLATE = `---
@@ -5545,18 +5709,18 @@ var EMPTY_REGISTER_TEMPLATE = {
 function scaffoldHarness(root) {
   const { harnessDir, projectDir } = resolveScaffoldDirs(root);
   for (const dir of SCAFFOLD_DIRS)
-    mkdirSync5(join8(harnessDir, dir), { recursive: true });
-  const statusPath = join8(harnessDir, "status.json");
+    mkdirSync5(join9(harnessDir, dir), { recursive: true });
+  const statusPath = join9(harnessDir, "status.json");
   if (Object.keys(readJson(statusPath)).length === 0)
     writeJson(statusPath, EMPTY_STATUS_TEMPLATE);
-  const defaultProjectDir = join8(projectDir, _DEFAULT_PROJECT);
+  const defaultProjectDir = join9(projectDir, _DEFAULT_PROJECT);
   mkdirSync5(defaultProjectDir, { recursive: true });
-  const roadmapPath = join8(defaultProjectDir, PROJECT_ROADMAP_FILE);
-  if (!existsSync5(roadmapPath)) {
+  const roadmapPath = join9(defaultProjectDir, PROJECT_ROADMAP_FILE);
+  if (!existsSync6(roadmapPath)) {
     const created = new Date().toISOString().slice(0, 10);
     writeFileSync3(roadmapPath, ROADMAP_TEMPLATE.replace("{created_at}", created), "utf8");
   }
-  const registerPath = join8(defaultProjectDir, PROJECT_REGISTER_FILE);
+  const registerPath = join9(defaultProjectDir, PROJECT_REGISTER_FILE);
   if (Object.keys(readJson(registerPath)).length === 0)
     writeJson(registerPath, EMPTY_REGISTER_TEMPLATE);
   return harnessDir;
@@ -5596,7 +5760,7 @@ function emitGitignoreSnippet(kind) {
 function detectHarnessKind(harnessDir) {
   if (!harnessDir)
     return null;
-  const name = basename2(resolve6(harnessDir));
+  const name = basename3(resolve7(harnessDir));
   if (name === ".mstar")
     return "mstar";
   if (name === ".agents")
@@ -5612,9 +5776,9 @@ function isDirectory(dir) {
 }
 function hasFiles(dir) {
   try {
-    for (const entry of readdirSync4(dir, { withFileTypes: true })) {
+    for (const entry of readdirSync5(dir, { withFileTypes: true })) {
       if (entry.isDirectory()) {
-        if (hasFiles(join8(dir, entry.name)))
+        if (hasFiles(join9(dir, entry.name)))
           return true;
       } else if (entry.isFile()) {
         return true;
@@ -5675,10 +5839,10 @@ function l1PreDispatchCheck(input, opts = {}) {
   if (leaseWorkingBranch.trim() === "") {
     violations.push(violation7("high", "worktree.l1.lease-branch-missing", `execution_lease.working_branch is empty for plan "${planId}"`, "record the lease working_branch before dispatch"));
   }
-  if (controlWorktreePath !== "" && leaseWorktreePath !== "" && resolve7(controlWorktreePath) === resolve7(leaseWorktreePath)) {
+  if (controlWorktreePath !== "" && leaseWorktreePath !== "" && resolve8(controlWorktreePath) === resolve8(leaseWorktreePath)) {
     violations.push(violation7("critical", "worktree.l1.lease-equals-control", `execution_lease.worktree_path "${leaseWorktreePath}" equals metadata.control_worktree_path \u2014 the feature worktree MUST differ from the control worktree (L1 isolation; product edits never land in the control checkout)`, "use a distinct feature worktree for the plan (git worktree add <path> <branch>) and update the lease"));
   }
-  if (leaseWorktreePath !== "" && !existsSync6(leaseWorktreePath)) {
+  if (leaseWorktreePath !== "" && !existsSync7(leaseWorktreePath)) {
     violations.push(violation7("high", "worktree.l1.feature-missing", `feature worktree directory "${leaseWorktreePath}" does not exist for plan "${planId}"`, `create it before dispatch: git worktree add ${leaseWorktreePath} <working-branch>`));
   } else if (leaseWorktreePath !== "" && leaseWorkingBranch !== "") {
     const probe = probeBranch(leaseWorktreePath, opts);
@@ -5702,17 +5866,17 @@ function l2PreDispatchCheck(input, opts = {}) {
       violations.push(violation7("high", "worktree.l2.track-invalid", `track ${index + 1} is missing worktreePath and/or workingBranch`, "fill both fields for every track"));
       return;
     }
-    if (!isAbsolute4(track.worktreePath)) {
+    if (!isAbsolute5(track.worktreePath)) {
       violations.push(violation7("high", "worktree.l2.track-path-relative", `track ${index + 1} worktreePath "${track.worktreePath}" is not an absolute path \u2014 L2 tracks MUST use absolute worktree checkout paths (consistent with the lease validator's absolute worktree_path enforcement)`, `use an absolute path for track ${index + 1} (e.g. /Users/<you>/worktrees/<branch>)`));
       return;
     }
-    const normalized = resolve7(track.worktreePath);
+    const normalized = resolve8(track.worktreePath);
     if (seenPaths.has(normalized)) {
       violations.push(violation7("high", "worktree.l2.track-path-collision", `duplicate worktreePath "${track.worktreePath}" across parallel tracks \u2014 L2 parallel-writable isolation requires a distinct absolute Worktree path per track (N parallel invokes \u2260 isolation)`, "give every parallel track its own git worktree checkout"));
       return;
     }
     seenPaths.add(normalized);
-    if (!existsSync6(track.worktreePath)) {
+    if (!existsSync7(track.worktreePath)) {
       violations.push(violation7("high", "worktree.l2.track-missing", `track worktree directory "${track.worktreePath}" does not exist`, `create it before dispatch: git worktree add ${track.worktreePath} ${track.workingBranch}`));
       return;
     }
@@ -5763,7 +5927,7 @@ function isFile2(file) {
     return false;
   }
 }
-var GIT_CAPTURE_MAX_BYTES = 64 * 1024 * 1024;
+var GIT_CAPTURE_MAX_BYTES = 67108864;
 function gitOut(cwd, args) {
   try {
     return execFileSync3("git", args, {
@@ -5777,14 +5941,14 @@ function gitOut(cwd, args) {
   }
 }
 function probeHarnessWithStatus(root) {
-  if (isFile2(join9(root, ".mstar", "status.json")))
-    return join9(root, ".mstar");
-  if (isFile2(join9(root, ".agents", "status.json")))
-    return join9(root, ".agents");
-  if (hasWorkflowSnapshot(join9(root, ".mstar")))
-    return join9(root, ".mstar");
-  if (hasWorkflowSnapshot(join9(root, ".agents")))
-    return join9(root, ".agents");
+  if (isFile2(join10(root, ".mstar", "status.json")))
+    return join10(root, ".mstar");
+  if (isFile2(join10(root, ".agents", "status.json")))
+    return join10(root, ".agents");
+  if (hasWorkflowSnapshot(join10(root, ".mstar")))
+    return join10(root, ".mstar");
+  if (hasWorkflowSnapshot(join10(root, ".agents")))
+    return join10(root, ".agents");
   return null;
 }
 function hasWorkflowSnapshot(harnessDir) {
@@ -5792,13 +5956,13 @@ function hasWorkflowSnapshot(harnessDir) {
   try {
     workflowsDir = resolveWorkflowDir(harnessDir, { harnessDir });
   } catch {
-    workflowsDir = join9(harnessDir, "workflows");
+    workflowsDir = join10(harnessDir, "workflows");
   }
   if (!isDirectory2(workflowsDir))
     return false;
   try {
-    for (const entry of readdirSync5(workflowsDir, { withFileTypes: true })) {
-      if (entry.isDirectory() && isFile2(join9(workflowsDir, entry.name, "snapshot.json")))
+    for (const entry of readdirSync6(workflowsDir, { withFileTypes: true })) {
+      if (entry.isDirectory() && isFile2(join10(workflowsDir, entry.name, "snapshot.json")))
         return true;
     }
   } catch {
@@ -5811,14 +5975,14 @@ function isLinkedWorktree(root) {
   const commonRaw = gitOut(root, ["rev-parse", "--git-common-dir"]);
   if (gitDirRaw === null || commonRaw === null)
     return false;
-  const gitDir = isAbsolute5(gitDirRaw) ? gitDirRaw : join9(root, gitDirRaw);
-  const common2 = isAbsolute5(commonRaw) ? commonRaw : join9(root, commonRaw);
+  const gitDir = isAbsolute6(gitDirRaw) ? gitDirRaw : join10(root, gitDirRaw);
+  const common2 = isAbsolute6(commonRaw) ? commonRaw : join10(root, commonRaw);
   if (gitDir.includes("/.git/worktrees/") || gitDir.includes("/worktrees/"))
     return true;
   try {
     const gdParent = realpathSync3(dirname6(gitDir));
     const cmAbs = realpathSync3(common2);
-    return join9(gdParent, basename3(gitDir)) !== cmAbs && gitDir !== cmAbs;
+    return join10(gdParent, basename4(gitDir)) !== cmAbs && gitDir !== cmAbs;
   } catch {
     return false;
   }
@@ -5826,7 +5990,7 @@ function isLinkedWorktree(root) {
 function sddWorkspace(planId, opts = {}) {
   if (!planId) {
     throw new SddScriptError(`usage: mstar sdd workspace PLAN_ID [CONTROL_ROOT]
-` + "  Set MSTAR_CONTROL_ROOT=<control_worktree_path> when running from a feature worktree.", 2);
+  Set MSTAR_CONTROL_ROOT=<control_worktree_path> when running from a feature worktree.`, 2);
   }
   const cwd = opts.cwd ?? process.cwd();
   const controlRoot = opts.controlRoot ?? (process.env.MSTAR_CONTROL_ROOT || undefined);
@@ -5842,35 +6006,35 @@ function sddWorkspace(planId, opts = {}) {
   }
   if (!controlRoot && isLinkedWorktree(root)) {
     throw new SddScriptError(`mstar sdd workspace: linked worktree at ${root} has no {HARNESS_DIR}/status.json (default gitignore).
-` + `  Refusing to create a second SDD tree under the feature checkout.
-` + `  Re-run with MSTAR_CONTROL_ROOT=<control_worktree_path> or: mstar sdd workspace ${planId} <control_worktree_path>
+  Refusing to create a second SDD tree under the feature checkout.
+  Re-run with MSTAR_CONTROL_ROOT=<control_worktree_path> or: mstar sdd workspace ${planId} <control_worktree_path>
 ` + `  See mstar-branch-worktree \u00abHarness path SSOT under default gitignore\u00bb.`, 1);
   }
   const harnessOverride = opts.harnessDir ?? (process.env.MSTAR_HARNESS_DIR || undefined);
   let harnessDir;
   if (harnessOverride) {
-    harnessDir = resolve8(root, harnessOverride);
+    harnessDir = resolve9(root, harnessOverride);
   } else {
     const rc = findMstarc(root, root);
     const rcHarnessDir = rc !== null ? parseMstarc(readFileSync7(rc, "utf8")).harnessDir : undefined;
     if (rcHarnessDir) {
-      harnessDir = resolve8(rc !== null ? dirname6(rc) : root, rcHarnessDir);
+      harnessDir = resolve9(rc !== null ? dirname6(rc) : root, rcHarnessDir);
     } else {
       const probed = probeHarnessWithStatus(root);
       if (probed) {
         harnessDir = probed;
-      } else if (isDirectory2(join9(root, ".mstar"))) {
-        harnessDir = join9(root, ".mstar");
-      } else if (isDirectory2(join9(root, ".agents"))) {
-        harnessDir = join9(root, ".agents");
+      } else if (isDirectory2(join10(root, ".mstar"))) {
+        harnessDir = join10(root, ".mstar");
+      } else if (isDirectory2(join10(root, ".agents"))) {
+        harnessDir = join10(root, ".agents");
       } else {
-        harnessDir = join9(root, ".mstar");
+        harnessDir = join10(root, ".mstar");
       }
     }
   }
   const sddDir = resolveSddDir(harnessDir, planId);
   mkdirSync6(sddDir, { recursive: true });
-  writeFileSync4(join9(sddDir, ".gitignore"), `*
+  writeFileSync4(join10(sddDir, ".gitignore"), `*
 `);
   return realpathSync3(sddDir);
 }
@@ -5893,7 +6057,7 @@ function taskBrief(planFile, taskN, outFile, opts = {}) {
       throw new SddScriptError("mstar sdd task-brief: set SDD_DIR or pass OUTFILE (run mstar sdd workspace PLAN_ID first)", 2);
     }
     mkdirSync6(sddDir, { recursive: true });
-    out = join9(sddDir, `task-${taskN}-brief.md`);
+    out = join10(sddDir, `task-${taskN}-brief.md`);
   }
   const records = content.endsWith(`
 `) ? content.split(`
@@ -5946,7 +6110,7 @@ function reviewPackage(base, head, outFile, opts = {}) {
     mkdirSync6(sddDir, { recursive: true });
     const shortBase = gitOut(cwd, ["rev-parse", "--short", base]) ?? base;
     const shortHead = gitOut(cwd, ["rev-parse", "--short", head]) ?? head;
-    out = join9(sddDir, `review-${shortBase}..${shortHead}.diff`);
+    out = join10(sddDir, `review-${shortBase}..${shortHead}.diff`);
   }
   const run = (args) => execFileSync3("git", args, { cwd, maxBuffer: GIT_CAPTURE_MAX_BYTES });
   const parts = [
@@ -6634,7 +6798,7 @@ function scanSecrets(files) {
       unreadableFiles++;
       continue;
     }
-    const base = basename4(file);
+    const base = basename5(file);
     for (const entry of NEVER_COMMIT_FILENAMES) {
       if (entry.re.test(base))
         findings.push({ file, line: 1, type: entry.type });
@@ -6686,12 +6850,12 @@ var LOCKFILE_NAMES = [
 function rootLockfiles(root) {
   let entries;
   try {
-    entries = readdirSync7(root, { withFileTypes: true });
+    entries = readdirSync8(root, { withFileTypes: true });
   } catch {
     return [];
   }
   const names = new Set(LOCKFILE_NAMES);
-  const present = entries.filter((entry) => entry.isFile() && names.has(entry.name)).map((entry) => join11(root, entry.name));
+  const present = entries.filter((entry) => entry.isFile() && names.has(entry.name)).map((entry) => join12(root, entry.name));
   if (present.length === 0)
     return [];
   try {
@@ -6700,7 +6864,7 @@ function rootLockfiles(root) {
       encoding: "utf8",
       stdio: ["ignore", "pipe", "ignore"]
     }).split("\x00").filter((f) => f !== ""));
-    return present.filter((p) => tracked.has(basename4(p)));
+    return present.filter((p) => tracked.has(basename5(p)));
   } catch {
     return present;
   }
@@ -6716,17 +6880,17 @@ function supplyChainChecks(repoRoot) {
     findings.push({ kind: "lockfile-duplicate", file: lockfiles.map((f) => f.replace(`${repoRoot}/`, "")).join(", ") });
     violations.push(violation9("medium", "audit.supply.lockfile-duplicate", `multiple lockfiles at ${repoRoot}: ${lockfiles.join(", ")}`, "keep exactly one lockfile per package manager"));
   }
-  const workflowsDir = join11(repoRoot, ".github", "workflows");
+  const workflowsDir = join12(repoRoot, ".github", "workflows");
   let wfEntries = [];
   try {
-    wfEntries = readdirSync7(workflowsDir, { withFileTypes: true });
+    wfEntries = readdirSync8(workflowsDir, { withFileTypes: true });
   } catch {
     wfEntries = [];
   }
   for (const entry of wfEntries) {
     if (!entry.isFile() || !/\.(?:ya?ml)$/.test(entry.name))
       continue;
-    const wfPath = join11(workflowsDir, entry.name);
+    const wfPath = join12(workflowsDir, entry.name);
     const relPath = `.github/workflows/${entry.name}`;
     let text;
     try {
@@ -6883,9 +7047,9 @@ function scaffoldAuditPlan(outDir, findings, options = {}) {
   const date = options.date ?? new Date().toISOString().slice(0, 10);
   const plannedAt = options.plannedAt ?? { commit: options.repoShortSha ?? "unknown", date };
   mkdirSync8(outDir, { recursive: true });
-  const existingReadme = join11(outDir, "README.md");
-  const carried = existsSync7(existingReadme) ? extractSecurityDispositionSections(readFileSync9(existingReadme, "utf8")) : { needsVerification: [], hardeningChecked: [] };
-  const existing = readdirSync7(outDir).filter((f) => /^\d{3}-.*\.md$/.test(f));
+  const existingReadme = join12(outDir, "README.md");
+  const carried = existsSync8(existingReadme) ? extractSecurityDispositionSections(readFileSync9(existingReadme, "utf8")) : { needsVerification: [], hardeningChecked: [] };
+  const existing = readdirSync8(outDir).filter((f) => /^\d{3}-.*\.md$/.test(f));
   let next = existing.reduce((max, f) => Math.max(max, Number(f.slice(0, 3))), 0) + 1;
   const redactedFindings = findings.map(redactFinding);
   const written = [];
@@ -6901,13 +7065,13 @@ function scaffoldAuditPlan(outDir, findings, options = {}) {
     }
     usedSlugs.add(slug);
     const file = `${num}-${slug}.md`;
-    writeFileSync6(join11(outDir, file), renderPlanFile(finding, plannedAt));
+    writeFileSync6(join12(outDir, file), renderPlanFile(finding, plannedAt));
     written.push(file);
     next++;
   }
   const all = [...existing, ...written].sort();
   const rows = all.map((file) => {
-    const summary = readPlanFileSummary(join11(outDir, file));
+    const summary = readPlanFileSummary(join12(outDir, file));
     const fields = summary.fields;
     return {
       num: file.slice(0, 3),
@@ -6941,7 +7105,7 @@ function scaffoldAuditPlan(outDir, findings, options = {}) {
   });
   const needsVerificationLines = options.needsVerification !== undefined ? options.needsVerification.map((nv) => `- ${escapeCell(redactText(nv.lead))}: ${escapeCell(redactText(nv.how))}${nv.evidence ? ` (${escapeCell(redactText(nv.evidence))})` : ""}`) : carried.needsVerification;
   const hardeningCheckedLines = options.hardeningChecked !== undefined ? options.hardeningChecked.map((hc) => `- ${hc.kind}: ${escapeCell(redactText(hc.text))}`) : carried.hardeningChecked;
-  writeFileSync6(join11(outDir, "README.md"), renderIndex({
+  writeFileSync6(join12(outDir, "README.md"), renderIndex({
     date,
     repoName: options.repoName ?? "repo",
     repoShortSha: options.repoShortSha ?? "unknown",
@@ -6950,7 +7114,7 @@ function scaffoldAuditPlan(outDir, findings, options = {}) {
     needsVerification: needsVerificationLines,
     hardeningChecked: hardeningCheckedLines
   }));
-  return { outDir: resolve10(outDir), date, files: written, nextNumber: next };
+  return { outDir: resolve11(outDir), date, files: written, nextNumber: next };
 }
 async function promoteAuditPlans(outDir, selected, options) {
   if (selected.length === 0) {
@@ -6959,19 +7123,19 @@ async function promoteAuditPlans(outDir, selected, options) {
   if (typeof options.harnessDir !== "string" || options.harnessDir.trim() === "") {
     throw new Error("promoteAuditPlans: options.harnessDir is required (must contain status.json + workflows/)");
   }
-  const workflowId = options.workflowId ?? basename4(resolve10(outDir));
+  const workflowId = options.workflowId ?? basename5(resolve11(outDir));
   assertSafePathComponent(workflowId, "workflow id");
-  const harnessDir = resolve10(options.harnessDir);
-  const statusPath = join11(harnessDir, "status.json");
-  const workflowDir = join11(harnessDir, "workflows", workflowId);
-  const snapshotPath = join11(workflowDir, WORKFLOW_SNAPSHOT_FILE);
+  const harnessDir = resolve11(options.harnessDir);
+  const statusPath = join12(harnessDir, "status.json");
+  const workflowDir = join12(harnessDir, "workflows", workflowId);
+  const snapshotPath = join12(workflowDir, WORKFLOW_SNAPSHOT_FILE);
   const planFiles = resolveSelectedPlanFiles(outDir, selected);
   const indexRows = readExecutionOrderIndex(outDir);
   const plans = planFiles.map((planFile) => {
     const stem = planFile.replace(/\.md$/, "");
     const num = stem.slice(0, 3);
     const indexRow = indexRows.get(num);
-    const title = indexRow?.title ?? readPlanFileSummary(join11(outDir, planFile)).title;
+    const title = indexRow?.title ?? readPlanFileSummary(join12(outDir, planFile)).title;
     return {
       id: stem,
       title,
@@ -6999,18 +7163,18 @@ async function promoteAuditPlans(outDir, selected, options) {
   if (!entryGate.ok) {
     throw new Error(`refusing to register invalid workflow entry: ${entryGate.violations.map((v) => v.message).join("; ")}`);
   }
-  await withStatusWriteLock(statusPath, () => {
-    if (existsSync7(snapshotPath)) {
-      throw new Error(`refusing to promote audit plans: workflow ${JSON.stringify(workflowId)} already exists ` + `(snapshot at ${snapshotPath}) \u2014 re-promote would drop its registered plan rows; ` + `remove that workflow before promoting again`);
+  await withStatusWriteLock(statusPath, async () => {
+    if (existsSync8(snapshotPath)) {
+      throw new Error(`refusing to promote audit plans: workflow ${JSON.stringify(workflowId)} already exists (snapshot at ${snapshotPath}) \u2014 re-promote would drop its registered plan rows; ` + `remove that workflow before promoting again`);
     }
     mkdirSync8(workflowDir, { recursive: true });
     try {
       writeJson(snapshotPath, snapshot);
-      registerWorkflowEntryLocked(statusPath, entry);
+      await registerWorkflowEntryLocked(statusPath, entry);
     } catch (error) {
       rmSync(snapshotPath, { force: true });
       try {
-        if (readdirSync7(workflowDir).length === 0) {
+        if (readdirSync8(workflowDir).length === 0) {
           rmdirSync2(workflowDir);
         }
       } catch {}
@@ -7021,7 +7185,7 @@ async function promoteAuditPlans(outDir, selected, options) {
   return { workflowId, snapshotPath };
 }
 function resolveSelectedPlanFiles(outDir, selected) {
-  const files = readdirSync7(outDir).filter((f) => /^\d{3}-.*\.md$/.test(f)).sort();
+  const files = readdirSync8(outDir).filter((f) => /^\d{3}-.*\.md$/.test(f)).sort();
   const byNum = new Map;
   const byStem = new Map;
   for (const file of files) {
@@ -7036,7 +7200,7 @@ function resolveSelectedPlanFiles(outDir, selected) {
   for (const id of selected) {
     const file = byNum.get(id) ?? byStem.get(id) ?? byStem.get(id.replace(/\.md$/, ""));
     if (file === undefined) {
-      throw new Error(`promoteAuditPlans: selected plan ${JSON.stringify(id)} does not match any NNN-*.md file in ${resolve10(outDir)}`);
+      throw new Error(`promoteAuditPlans: selected plan ${JSON.stringify(id)} does not match any NNN-*.md file in ${resolve11(outDir)}`);
     }
     if (!seen.has(file)) {
       seen.add(file);
@@ -7046,7 +7210,7 @@ function resolveSelectedPlanFiles(outDir, selected) {
   return resolved;
 }
 function readExecutionOrderIndex(outDir) {
-  const readmePath = join11(outDir, "README.md");
+  const readmePath = join12(outDir, "README.md");
   let text;
   try {
     text = readFileSync9(readmePath, "utf8");
@@ -7075,7 +7239,7 @@ function readExecutionOrderIndex(outDir) {
   return rows;
 }
 function planFileRel(outDir, planFile) {
-  const resolved = resolve10(outDir);
+  const resolved = resolve11(outDir);
   const parts = resolved.split(sep3);
   const plansIdx = parts.lastIndexOf("plans");
   if (plansIdx >= 0) {
@@ -7327,14 +7491,14 @@ function collectKnowledgeDocs(dir) {
     const current = stack.pop();
     let entries;
     try {
-      entries = readdirSync8(current, { withFileTypes: true });
+      entries = readdirSync9(current, { withFileTypes: true });
     } catch {
       continue;
     }
     for (const entry of entries) {
       if (entry.isSymbolicLink())
         continue;
-      const full = join12(current, entry.name);
+      const full = join13(current, entry.name);
       if (entry.isDirectory()) {
         stack.push(full);
       } else if (entry.name.endsWith(".md") && entry.name !== "README.md" && entry.name !== "index.md") {
@@ -7354,8 +7518,8 @@ function normalizeIndexRef(cell) {
 }
 function assertIndexRows(knowledgeDir) {
   const violations = [];
-  const readmePath = join12(knowledgeDir, "README.md");
-  if (!existsSync8(readmePath)) {
+  const readmePath = join13(knowledgeDir, "README.md");
+  if (!existsSync9(readmePath)) {
     violations.push(violation10("medium", "compound.index.missing-readme", `missing ${readmePath} \u2014 the knowledge index is required (mstar-compound Phase 6: every doc gets a README.md row)`, "create knowledge/README.md with a Document / Source Plan / Description / Status table"));
     return { ok: false, violations };
   }
@@ -7379,12 +7543,12 @@ function assertIndexRows(knowledgeDir) {
   return { ok: violations.length === 0, violations };
 }
 function isFileLikeRoot(root) {
-  return /^[^.]*\.[A-Za-z0-9]{1,10}$/.test(basename5(root));
+  return /^[^.]*\.[A-Za-z0-9]{1,10}$/.test(basename6(root));
 }
 function scopeGuard(path2, allowedRoots) {
-  const resolved = resolve11(path2);
+  const resolved = resolve12(path2);
   for (const root of allowedRoots) {
-    const r = resolve11(root);
+    const r = resolve12(root);
     if (isFileLikeRoot(r)) {
       if (resolved === r)
         return { ok: true, violations: [] };
@@ -7685,8 +7849,8 @@ function validateRoleMapping(rolesDir, options = {}) {
   const violations = [];
   const referenceById = new Map(mapping.map((m) => [m.agentId, m.reference]));
   for (const { agentId, reference } of mapping) {
-    if (!existsSync9(join13(rolesDir, reference))) {
-      violations.push(violation12("medium", "roles.mapping.reference.missing", `role "${agentId}" maps to ${reference} which does not exist under ${rolesDir} (mstar-roles \u00a7 Role Reference Mapping)`, `create ${join13(rolesDir, reference)} or fix the mapping row`));
+    if (!existsSync10(join14(rolesDir, reference))) {
+      violations.push(violation12("medium", "roles.mapping.reference.missing", `role "${agentId}" maps to ${reference} which does not exist under ${rolesDir} (mstar-roles \u00a7 Role Reference Mapping)`, `create ${join14(rolesDir, reference)} or fix the mapping row`));
     }
   }
   for (const { family, memberIds } of families) {
@@ -7912,9 +8076,135 @@ function computePrTally(input) {
   const scorePct = Math.max(0, 100 - 40 * mustFix - 15 * shouldFix - 3 * nit - 10 * unverified);
   const verdict = mustFix >= 1 ? "blocked" : shouldFix >= 1 ? "needs fixes" : "ship it";
   const chatHeader = `${verdict} \u00b7 ${scorePct}%
-` + `must-fix=${mustFix} should-fix=${shouldFix} nit=${nit} unverified=${unverified}`;
+must-fix=${mustFix} should-fix=${shouldFix} nit=${nit} unverified=${unverified}`;
   return { verdict, scorePct, tally: { mustFix, shouldFix, nit, unverified }, chatHeader };
 }
+var REVIEW_SCHEMA_ID = "mstar.review/v1";
+var INSPECTOR_VERDICTS = ["comment", "request_changes", "approve"];
+var INSPECTOR_SEVERITIES = ["critical", "warning", "suggestion", "info"];
+function isPlainObject7(value) {
+  return typeof value === "object" && value !== null && !Array.isArray(value);
+}
+var TALLY_COUNT_KEYS = ["mustFix", "shouldFix", "nit", "unverified"];
+function checkProvidedTallyShape(tally, violations) {
+  if (typeof tally.verdict !== "string" || !PR_VERDICTS.includes(tally.verdict)) {
+    violations.push(violation14("high", "review.tally-malformed", `tally.verdict "${String(tally.verdict)}" is not one of ${JSON.stringify(PR_VERDICTS)}`, `use one of: ${PR_VERDICTS.join(" | ")}`));
+  }
+  if (typeof tally.scorePct !== "number" || !Number.isInteger(tally.scorePct) || tally.scorePct < 0 || tally.scorePct > 100) {
+    violations.push(violation14("high", "review.tally-malformed", `tally.scorePct must be an integer in [0, 100] - got ${String(tally.scorePct)}`));
+  }
+  if (!isPlainObject7(tally.tally)) {
+    violations.push(violation14("high", "review.tally-malformed", "tally.tally must be an object carrying the four class counts"));
+  } else {
+    for (const key of TALLY_COUNT_KEYS) {
+      const count = tally.tally[key];
+      if (typeof count !== "number" || !Number.isInteger(count) || count < 0) {
+        violations.push(violation14("high", "review.tally-malformed", `tally.tally.${key} must be a non-negative integer - got ${String(count)}`));
+      }
+    }
+  }
+  if (typeof tally.chatHeader !== "string") {
+    violations.push(violation14("high", "review.tally-malformed", `tally.chatHeader must be a string - got ${typeof tally.chatHeader}`));
+  }
+}
+function validateMstarReviewV1(doc) {
+  const violations = [];
+  if (!isPlainObject7(doc)) {
+    return {
+      ok: false,
+      violations: [violation14("high", "review.not-object", "review document must be a JSON object")]
+    };
+  }
+  if (doc.schema === undefined) {
+    violations.push(violation14("high", "review.missing-schema", "missing required field: schema"));
+  } else if (doc.schema !== REVIEW_SCHEMA_ID) {
+    violations.push(violation14("high", "review.invalid-schema", `schema "${String(doc.schema)}" is not "${REVIEW_SCHEMA_ID}"`));
+  }
+  if (doc.verdict === undefined) {
+    violations.push(violation14("high", "review.missing-verdict", "missing required field: verdict"));
+  } else if (typeof doc.verdict !== "string") {
+    violations.push(violation14("high", "review.invalid-verdict", `verdict must be a string - got ${typeof doc.verdict}`));
+  } else if (INSPECTOR_VERDICTS.includes(doc.verdict)) {
+    violations.push(violation14("high", "review.inspector-vocab", `verdict "${doc.verdict}" is inspector M1 vocab - harness verdicts are ${JSON.stringify(PR_VERDICTS)}`, `use one of: ${PR_VERDICTS.join(" | ")}`));
+  } else if (!PR_VERDICTS.includes(doc.verdict)) {
+    violations.push(violation14("high", "review.invalid-verdict", `verdict "${doc.verdict}" is not one of ${JSON.stringify(PR_VERDICTS)}`, `use one of: ${PR_VERDICTS.join(" | ")}`));
+  }
+  if (doc.summary_md === undefined || typeof doc.summary_md !== "string" || doc.summary_md.trim() === "") {
+    violations.push(violation14("high", "review.missing-summary", "summary_md must be a non-empty string"));
+  }
+  if (doc.findings === undefined || !Array.isArray(doc.findings)) {
+    violations.push(violation14("high", "review.findings-not-array", "findings must be an array"));
+  } else {
+    doc.findings.forEach((finding, index) => {
+      if (!isPlainObject7(finding)) {
+        violations.push(violation14("high", "review.invalid-finding", `findings[${index}] must be an object`));
+        return;
+      }
+      if (finding.severity !== undefined) {
+        violations.push(violation14("high", "review.inspector-vocab", `findings[${index}] carries inspector M1 field "severity" - harness merge classes are ${JSON.stringify(MERGE_CLASSES)}`, "use mergeClass: must-fix | should-fix | nit"));
+      }
+      if (finding.mergeClass === undefined) {
+        violations.push(violation14("high", "review.missing-merge-class", `findings[${index}] missing required field: mergeClass`));
+      } else if (typeof finding.mergeClass !== "string") {
+        violations.push(violation14("high", "review.invalid-merge-class", `findings[${index}].mergeClass must be a string - got ${typeof finding.mergeClass}`));
+      } else if (INSPECTOR_SEVERITIES.includes(finding.mergeClass)) {
+        violations.push(violation14("high", "review.inspector-vocab", `findings[${index}].mergeClass "${finding.mergeClass}" is inspector M1 severity vocab - harness merge classes are ${JSON.stringify(MERGE_CLASSES)}`, `use one of: ${MERGE_CLASSES.join(" | ")}`));
+      } else if (!MERGE_CLASSES.includes(finding.mergeClass)) {
+        violations.push(violation14("high", "review.invalid-merge-class", `findings[${index}].mergeClass "${finding.mergeClass}" is not one of ${JSON.stringify(MERGE_CLASSES)}`, `use one of: ${MERGE_CLASSES.join(" | ")}`));
+      }
+      if (finding.title === undefined || typeof finding.title !== "string" || finding.title.trim() === "") {
+        violations.push(violation14("high", "review.empty-title", `findings[${index}].title must be a non-empty string`));
+      }
+      if (finding.body === undefined || typeof finding.body !== "string" || finding.body.trim() === "") {
+        violations.push(violation14("high", "review.empty-body", `findings[${index}].body must be a non-empty string`));
+      }
+      if (finding.category !== undefined && typeof finding.category !== "string") {
+        violations.push(violation14("high", "review.invalid-category", `findings[${index}].category must be a string`));
+      }
+      if (finding.file_path !== undefined && finding.file_path !== null && typeof finding.file_path !== "string") {
+        violations.push(violation14("high", "review.invalid-file-path", `findings[${index}].file_path must be a string or null`));
+      }
+      if (finding.line_start !== undefined && finding.line_start !== null && typeof finding.line_start !== "number") {
+        violations.push(violation14("high", "review.invalid-line-start", `findings[${index}].line_start must be a number or null`));
+      }
+      if (finding.line_end !== undefined && finding.line_end !== null && typeof finding.line_end !== "number") {
+        violations.push(violation14("high", "review.invalid-line-end", `findings[${index}].line_end must be a number or null`));
+      }
+      if (finding.fingerprint_hint !== undefined && typeof finding.fingerprint_hint !== "string") {
+        violations.push(violation14("high", "review.invalid-fingerprint-hint", `findings[${index}].fingerprint_hint must be a string`));
+      }
+    });
+  }
+  if (doc.tally !== undefined) {
+    if (!isPlainObject7(doc.tally)) {
+      violations.push(violation14("high", "review.invalid-tally", "tally must be a PrTallyResult object"));
+    } else {
+      checkProvidedTallyShape(doc.tally, violations);
+      if (doc.tally.verdict !== doc.verdict) {
+        violations.push(violation14("high", "review.verdict-tally-mismatch", `tally.verdict "${String(doc.tally.verdict)}" does not equal the top-level verdict "${String(doc.verdict)}" - the envelope verdict and tally must agree (consistency rule)`));
+      }
+    }
+  }
+  if (doc.target !== undefined) {
+    if (!isPlainObject7(doc.target)) {
+      violations.push(violation14("high", "review.invalid-target", "target must be an object"));
+    } else {
+      if (doc.target.owner !== undefined && typeof doc.target.owner !== "string") {
+        violations.push(violation14("high", "review.invalid-target", "target.owner must be a string"));
+      }
+      if (doc.target.repo !== undefined && typeof doc.target.repo !== "string") {
+        violations.push(violation14("high", "review.invalid-target", "target.repo must be a string"));
+      }
+      if (doc.target.pr !== undefined && typeof doc.target.pr !== "number") {
+        violations.push(violation14("high", "review.invalid-target", "target.pr must be a number"));
+      }
+      if (doc.target.head_sha !== undefined && typeof doc.target.head_sha !== "string") {
+        violations.push(violation14("high", "review.invalid-target", "target.head_sha must be a string"));
+      }
+    }
+  }
+  return { ok: violations.length === 0, violations };
+}
 var SHORT_SHA_WIDTH = 7;
 var DATE_RE6 = /^\d{4}-\d{2}-\d{2}$/;
 function todayString4() {
@@ -7962,7 +8252,7 @@ function prReviewReportPath(opts) {
   const sameStem = new RegExp(`^${escaped}(?:-r([0-9]+))?\\.md$`);
   let dirents;
   try {
-    dirents = readdirSync9(opts.reportsDir, { withFileTypes: true });
+    dirents = readdirSync10(opts.reportsDir, { withFileTypes: true });
   } catch (error) {
     if (error.code === "ENOENT")
       dirents = [];
@@ -7978,7 +8268,7 @@ function prReviewReportPath(opts) {
   }
   const revision = maxRevision + 1;
   const name = revision === 1 ? `${finalStem}.md` : `${finalStem}-r${revision}.md`;
-  return join14(opts.reportsDir, name);
+  return join15(opts.reportsDir, name);
 }
 var PR_TIERS = ["quick", "default", "deep"];
 function violation14(severity, code, message, fix) {
@@ -8248,10 +8538,10 @@ function prReviewSeatPrompt(opts) {
   }
   const skillRoot = opts.skillRoot.trim();
   const worktreePath = opts.worktreePath.trim();
-  if (!isAbsolute8(skillRoot)) {
+  if (!isAbsolute9(skillRoot)) {
     throw new TypeError(`prReviewSeatPrompt: skillRoot must be an absolute path - got ${JSON.stringify(opts.skillRoot)}`);
   }
-  if (!isAbsolute8(worktreePath)) {
+  if (!isAbsolute9(worktreePath)) {
     throw new TypeError(`prReviewSeatPrompt: worktreePath must be an absolute path - got ${JSON.stringify(opts.worktreePath)}`);
   }
   const slug = `${domain}-${seat}`;
@@ -8275,14 +8565,14 @@ function prReviewSeatPrompt(opts) {
   lines.push("");
   lines.push("## Read first");
   lines.push("");
-  const prReviewRef = join14(skillRoot, "references", "pr-review.md");
+  const prReviewRef = join15(skillRoot, "references", "pr-review.md");
   const sections = opts.stage === 1 ? tier === "quick" ? "Scoping, Evidence rules" : "Review pipeline, Worktree isolation, Scoping, Evidence rules" : "Merge class, Attack and vet, Evidence rules, Sizing & change shape";
   lines.push(`1. \`${prReviewRef}\` \u2014 read at least these sections: ${sections}.`);
   lines.push(`2. The review worktree: \`${worktreePath}\` \u2014 your ONLY working directory this session; read-only (no edits, no fixes, no stash, no commits, no posts).`);
   if (opts.stage === 2) {
-    lines.push(`3. \`${join14(skillRoot, "references", "finding-format.md")}\` \u2014 the template every finding follows.`);
+    lines.push(`3. \`${join15(skillRoot, "references", "finding-format.md")}\` \u2014 the template every finding follows.`);
     if (opts.securitySeat === true) {
-      lines.push(`4. \`${join14(skillRoot, "references", "security-review.md")}\` \u2014 the security lens.`);
+      lines.push(`4. \`${join15(skillRoot, "references", "security-review.md")}\` \u2014 the security lens.`);
     }
   }
   lines.push("");
@@ -8452,28 +8742,30 @@ function resolvePrReviewTier(input) {
 }
 
 // ../engine/dist/engine.js
-import { existsSync as existsSync10, mkdirSync as mkdirSync3, readFileSync as readFileSync8, renameSync as renameSync2, unlinkSync as unlinkSync3, writeFileSync as writeFileSync5 } from "node:fs";
+import { existsSync as existsSync11, mkdirSync as mkdirSync3, readFileSync as readFileSync8, renameSync as renameSync2, unlinkSync as unlinkSync4, writeFileSync as writeFileSync5 } from "node:fs";
 import { randomUUID as randomUUID2 } from "node:crypto";
-import { basename as basename6, dirname as dirname7, join as join3, resolve as resolve9 } from "node:path";
+import { basename as basename7, dirname as dirname7, join as join3, resolve as resolve10 } from "node:path";
 import { fileURLToPath } from "node:url";
 import { readFileSync as readFileSync22, statSync as statSync5 } from "node:fs";
-import { dirname as dirname22, isAbsolute as isAbsolute6, join as join22, relative as relative3, resolve as resolve22 } from "node:path";
-import { existsSync as existsSync52, mkdirSync as mkdirSync52, readdirSync as readdirSync42, readFileSync as readFileSync62, realpathSync as realpathSync22, statSync as statSync32, writeFileSync as writeFileSync32 } from "node:fs";
+import { dirname as dirname22, isAbsolute as isAbsolute7, join as join22, relative as relative3, resolve as resolve22 } from "node:path";
+import { existsSync as existsSync62, mkdirSync as mkdirSync52, readdirSync as readdirSync52, readFileSync as readFileSync62, realpathSync as realpathSync22, statSync as statSync32, writeFileSync as writeFileSync32 } from "node:fs";
 import { execFileSync as execFileSync5 } from "node:child_process";
-import { basename as basename22, dirname as dirname52, isAbsolute as isAbsolute32, join as join82, relative as relative22, resolve as resolve62 } from "node:path";
+import { basename as basename32, dirname as dirname52, isAbsolute as isAbsolute42, join as join92, relative as relative22, resolve as resolve72 } from "node:path";
 import { mkdirSync as mkdirSync22, rmdirSync as rmdirSync3, statSync as statSync22, unlinkSync as unlinkSync22, writeFileSync as writeFileSync22 } from "node:fs";
 import { dirname as dirname32, isAbsolute as isAbsolute22, join as join42, resolve as resolve32 } from "node:path";
 import { setTimeout as sleep2 } from "node:timers/promises";
 import { AsyncLocalStorage as AsyncLocalStorage3 } from "node:async_hooks";
-import { existsSync as existsSync32, readFileSync as readFileSync42, readdirSync as readdirSync22, realpathSync as realpathSync4 } from "node:fs";
-import { dirname as dirname42, join as join62, resolve as resolve42, sep as sep2 } from "node:path";
+import { existsSync as existsSync32, readdirSync as readdirSync22, unlinkSync as unlinkSync32 } from "node:fs";
+import { isAbsolute as isAbsolute32, join as join52, resolve as resolve42 } from "node:path";
+import { existsSync as existsSync42, readFileSync as readFileSync42, readdirSync as readdirSync32, realpathSync as realpathSync4 } from "node:fs";
+import { dirname as dirname42, join as join72, resolve as resolve52, sep as sep2 } from "node:path";
 import { mkdirSync as mkdirSync32 } from "node:fs";
-import { join as join5 } from "node:path";
-import { copyFileSync, mkdirSync as mkdirSync7, readFileSync as readFileSync82, readdirSync as readdirSync6, writeFileSync as writeFileSync52 } from "node:fs";
-import { dirname as dirname72, isAbsolute as isAbsolute62, join as join10, relative as relative32, resolve as resolve92, sep as sep22 } from "node:path";
+import { join as join6 } from "node:path";
+import { copyFileSync, mkdirSync as mkdirSync7, readFileSync as readFileSync82, readdirSync as readdirSync7, writeFileSync as writeFileSync52 } from "node:fs";
+import { dirname as dirname72, isAbsolute as isAbsolute72, join as join11, relative as relative32, resolve as resolve102, sep as sep22 } from "node:path";
 var SEVERITY_ORDER2 = ["critical", "high", "medium", "low", "nit"];
 function readJson2(filePath) {
-  if (!existsSync10(filePath))
+  if (!existsSync11(filePath))
     return {};
   const content = readFileSync8(filePath, "utf8").trim();
   if (!content)
@@ -8487,23 +8779,23 @@ function readJson2(filePath) {
 function writeJson2(filePath, value) {
   const parent = dirname7(filePath);
   mkdirSync3(parent, { recursive: true });
-  const tmp = join3(parent, `.${basename6(filePath)}.${process.pid}.${randomUUID2()}.tmp`);
+  const tmp = join3(parent, `.${basename7(filePath)}.${process.pid}.${randomUUID2()}.tmp`);
   try {
     writeFileSync5(tmp, `${JSON.stringify(value, null, 2)}
 `, "utf8");
     renameSync2(tmp, filePath);
   } catch (error) {
     try {
-      unlinkSync3(tmp);
+      unlinkSync4(tmp);
     } catch {}
     throw error;
   }
 }
 function resolveProjectRoot(startDir = process.cwd()) {
-  const start = resolve9(startDir);
+  const start = resolve10(startDir);
   let dir = start;
   for (;; ) {
-    if (existsSync10(join3(dir, "package.json")) || existsSync10(join3(dir, "bun.lock")))
+    if (existsSync11(join3(dir, "package.json")) || existsSync11(join3(dir, "bun.lock")))
       return dir;
     const parent = dirname7(dir);
     if (parent === dir)
@@ -8514,7 +8806,7 @@ function resolveProjectRoot(startDir = process.cwd()) {
 function findRootPackageJson(startDir) {
   let dir = startDir;
   for (;; ) {
-    const candidate = resolve9(dir, "package.json");
+    const candidate = resolve10(dir, "package.json");
     try {
       const pkg = JSON.parse(readFileSync8(candidate, "utf8"));
       if (pkg.name === "morning-star")
@@ -8629,7 +8921,7 @@ function loadMstarc2(startDir, boundary) {
 }
 function isAtOrBelow3(dir, root) {
   const rel = relative3(root, dir);
-  return rel === "" || !rel.startsWith("..") && !isAbsolute6(rel);
+  return rel === "" || !rel.startsWith("..") && !isAbsolute7(rel);
 }
 function parseCompassFrontmatterText2(content, filePath) {
   const lines = content.split(/\r?\n/);
@@ -8838,6 +9130,137 @@ async function withStatusWriteLock2(statusPath, fn, opts = {}) {
     } catch {}
   }
 }
+var PLAN_SHAPED_KEY_RE2 = /^[0-9]{8}-[a-z0-9-]+$/;
+function resolveArtifactPath2(harnessRoot, ref) {
+  const { kind, key } = ref;
+  if (kind === "json") {
+    if (!isAbsolute32(key)) {
+      throw new Error(`ArtifactStore json key must be an absolute path \u2014 got ${JSON.stringify(key)}`);
+    }
+    if (key.split(/[\\/]+/).includes("..")) {
+      throw new Error(`ArtifactStore json key must not contain ".." segments \u2014 got ${JSON.stringify(key)}`);
+    }
+    return key;
+  }
+  assertSafePathComponent2(key, "ArtifactStore key");
+  if (kind === "status") {
+    if (key !== "root") {
+      throw new Error(`ArtifactStore status key must be "root" \u2014 got ${JSON.stringify(key)}`);
+    }
+    return join52(harnessRoot, "status.json");
+  }
+  if (kind === "snapshot") {
+    return join52(resolveWorkflowDir2(harnessRoot, { harnessDir: harnessRoot }), key, "snapshot.json");
+  }
+  if (kind === "residuals") {
+    return join52(resolveProjectDir2(harnessRoot, { harnessDir: harnessRoot }), key, "residuals.json");
+  }
+  if (PLAN_SHAPED_KEY_RE2.test(key)) {
+    return join52(harnessRoot, "sdd", key, "review", "report.json");
+  }
+  return join52(harnessRoot, "sdd", "_reviews", `${key}.json`);
+}
+function listDirNames2(dir) {
+  return readDirEntries2(dir).filter((entry) => entry.isDirectory()).map((entry) => entry.name);
+}
+function listJsonKeys2(dir) {
+  return readDirEntries2(dir).filter((entry) => entry.isFile() && entry.name.endsWith(".json")).map((entry) => entry.name.slice(0, -".json".length));
+}
+function readDirEntries2(dir) {
+  try {
+    return readdirSync22(dir, { withFileTypes: true });
+  } catch (error) {
+    const code = error.code;
+    if (code === "ENOENT" || code === "ENOTDIR")
+      return [];
+    throw error;
+  }
+}
+function tryResolveGetPath2(root, kind, key) {
+  try {
+    return resolveArtifactPath2(root, { kind, key });
+  } catch {
+    return;
+  }
+}
+function createFsStore2(harnessRoot) {
+  const root = resolve42(harnessRoot);
+  return {
+    root,
+    async put(doc) {
+      if (doc.schema !== undefined) {
+        throw new Error("FsStore does not persist schema ids \u2014 omit --schema or inject a store module that persists it");
+      }
+      writeJson2(resolveArtifactPath2(root, doc), doc.payload);
+    },
+    async get(ref) {
+      const filePath = resolveArtifactPath2(root, ref);
+      if (!existsSync32(filePath))
+        return;
+      return readJson2(filePath);
+    },
+    async delete(ref) {
+      const filePath = resolveArtifactPath2(root, ref);
+      if (existsSync32(filePath))
+        unlinkSync32(filePath);
+    },
+    async list(kind) {
+      if (kind === "json") {
+        throw new Error("ArtifactStore json keys are absolute paths and cannot be listed");
+      }
+      const keys = [];
+      if (kind === "status") {
+        if (existsSync32(resolveArtifactPath2(root, { kind, key: "root" })))
+          keys.push("root");
+      } else if (kind === "snapshot" || kind === "residuals") {
+        const baseDir = kind === "snapshot" ? resolveWorkflowDir2(root, { harnessDir: root }) : resolveProjectDir2(root, { harnessDir: root });
+        for (const name of listDirNames2(baseDir)) {
+          const getPath = tryResolveGetPath2(root, kind, name);
+          if (getPath !== undefined && existsSync32(getPath))
+            keys.push(name);
+        }
+      } else {
+        const sddDir = join52(root, "sdd");
+        for (const key of listJsonKeys2(join52(sddDir, "_reviews"))) {
+          if (!PLAN_SHAPED_KEY_RE2.test(key) && tryResolveGetPath2(root, kind, key) !== undefined) {
+            keys.push(key);
+          }
+        }
+        for (const name of listDirNames2(sddDir)) {
+          if (PLAN_SHAPED_KEY_RE2.test(name)) {
+            const getPath = tryResolveGetPath2(root, kind, name);
+            if (getPath !== undefined && existsSync32(getPath))
+              keys.push(name);
+          }
+        }
+      }
+      return keys.sort().map((key) => ({ kind, key }));
+    }
+  };
+}
+var injectedStore2;
+function setArtifactStore2(store) {
+  injectedStore2 = store;
+}
+function getArtifactStore2() {
+  if (injectedStore2 !== undefined)
+    return injectedStore2;
+  const root = resolveHarnessDir2(process.cwd());
+  if (root === null) {
+    throw new Error(`harness dir not found from ${resolve42(process.cwd())} \u2014 cannot create the default FsStore (run \`mstar harness scaffold\`, pass opts.harnessDir, or set MSTAR_HARNESS_DIR)`);
+  }
+  return createFsStore2(root);
+}
+function assertFsStorePath2(store, ref, expectedPath) {
+  const root = store.root;
+  if (typeof root !== "string")
+    return;
+  const storePath = resolveArtifactPath2(root, ref);
+  const expected = resolve42(expectedPath);
+  if (storePath !== expected) {
+    throw new Error(`routed writer path mismatch: the active FsStore resolves ${ref.kind}/${JSON.stringify(ref.key)} to ${JSON.stringify(storePath)} but the caller's target is ${JSON.stringify(expected)} \u2014 call setArtifactStore(createFsStore(<root>)) first when the write target differs from the active store's root`);
+  }
+}
 var WORKFLOW_SNAPSHOT_FILE2 = "snapshot.json";
 var WORKFLOW_LIFECYCLE_STATUSES2 = ["running", "paused", "completed", "failed", "stopped"];
 var WORKFLOW_TERMINAL_STATUSES2 = ["completed", "failed", "stopped"];
@@ -8954,10 +9377,12 @@ async function writeWorkflowSnapshot(snapshot, dir) {
     const detail = gate2.violations.map((v) => v.message).join("; ");
     throw new Error(`refusing to write invalid workflow snapshot: ${detail}`);
   }
-  const snapshotPath = join5(dir, WORKFLOW_SNAPSHOT_FILE2);
+  const snapshotPath = join6(dir, WORKFLOW_SNAPSHOT_FILE2);
+  const store = getArtifactStore2();
+  assertFsStorePath2(store, { kind: "snapshot", key: snapshot.id }, snapshotPath);
   mkdirSync32(dir, { recursive: true });
-  await withStatusWriteLock2(snapshotPath, () => {
-    writeJson2(snapshotPath, snapshot);
+  await withStatusWriteLock2(snapshotPath, async () => {
+    await store.put({ kind: "snapshot", key: snapshot.id, payload: snapshot });
   });
 }
 var DATE_RE22 = /^\d{4}-\d{2}-\d{2}$/;
@@ -9109,7 +9534,7 @@ function validateStatusV22(docOrPath, opts = {}) {
   if (typeof docOrPath === "string") {
     try {
       doc = readJson2(docOrPath);
-      harnessDir = dirname42(resolve42(docOrPath));
+      harnessDir = dirname42(resolve52(docOrPath));
     } catch (error) {
       return {
         ok: false,
@@ -9176,8 +9601,8 @@ function validateStatusV22(docOrPath, opts = {}) {
     for (const entry of doc.workflows) {
       if (!isPlainObject42(entry) || typeof entry.dir !== "string")
         continue;
-      const relSnapshot = join62(entry.dir, WORKFLOW_SNAPSHOT_FILE2);
-      const snapshotPath = join62(harnessDir, relSnapshot);
+      const relSnapshot = join72(entry.dir, WORKFLOW_SNAPSHOT_FILE2);
+      const snapshotPath = join72(harnessDir, relSnapshot);
       const label = typeof entry.id === "string" ? entry.id : relSnapshot;
       let physical;
       try {
@@ -9270,19 +9695,19 @@ function validateProjectRegister2(doc) {
   return { ok: violations.length === 0, violations };
 }
 function resolveHarnessDir2(startDir = process.cwd(), opts = {}) {
-  const start = resolve62(startDir);
+  const start = resolve72(startDir);
   const explicit = opts.harnessDir ?? process.env.MSTAR_HARNESS_DIR;
   if (explicit)
-    return resolve62(start, explicit);
-  const boundary = resolve62(start, opts.workspaceRoot ?? defaultWorkspaceRoot2(start));
+    return resolve72(start, explicit);
+  const boundary = resolve72(start, opts.workspaceRoot ?? defaultWorkspaceRoot2(start));
   const rc = loadMstarc2(start, boundary);
   if (rc !== null && rc.config.harnessDir)
-    return resolve62(rc.dir, rc.config.harnessDir);
+    return resolve72(rc.dir, rc.config.harnessDir);
   let dir = start;
   for (;; ) {
     if (!isAtOrBelow22(dir, boundary))
       return null;
-    for (const candidate of [join82(dir, ".mstar"), join82(dir, ".agents"), join82(dir, ".plans"), join82(dir, "plans")]) {
+    for (const candidate of [join92(dir, ".mstar"), join92(dir, ".agents"), join92(dir, ".plans"), join92(dir, "plans")]) {
       if (isDirectory3(candidate))
         return candidate;
     }
@@ -9308,19 +9733,19 @@ function defaultWorkspaceRoot2(startDir) {
       if (segment && segment !== ".")
         boundary = dirname52(boundary);
     }
-    return resolve62(boundary);
+    return resolve72(boundary);
   } catch {}
   return startDir;
 }
 function isAtOrBelow22(dir, root) {
   const rel = relative22(root, dir);
-  return rel === "" || !rel.startsWith("..") && !isAbsolute32(rel);
+  return rel === "" || !rel.startsWith("..") && !isAbsolute42(rel);
 }
 function mstarcDirOverride2(harnessDir, key) {
-  const dir = resolve62(harnessDir);
+  const dir = resolve72(harnessDir);
   const rc = loadMstarc2(dir, dirname52(dir));
   const declared = rc?.config[key];
-  return declared ? resolve62(rc.dir, declared) : null;
+  return declared ? resolve72(rc.dir, declared) : null;
 }
 function assertSafePathComponent2(value, what) {
   if (value === "" || value === "." || value === ".." || !/^[A-Za-z0-9._-]+$/.test(value)) {
@@ -9330,10 +9755,10 @@ function assertSafePathComponent2(value, what) {
 function resolveHarnessSubdir2(startDir, opts, key, fallback) {
   const harness = resolveHarnessDir2(startDir, opts);
   if (harness === null) {
-    throw new Error(`harness dir not found from ${resolve62(startDir)} \u2014 cannot resolve the ${fallback} dir (run \`mstar harness scaffold\`, pass opts.harnessDir, or set MSTAR_HARNESS_DIR)`);
+    throw new Error(`harness dir not found from ${resolve72(startDir)} \u2014 cannot resolve the ${fallback} dir (run \`mstar harness scaffold\`, pass opts.harnessDir, or set MSTAR_HARNESS_DIR)`);
   }
   const declared = mstarcDirOverride2(harness, key);
-  return declared !== null ? declared : join82(resolve62(harness), fallback);
+  return declared !== null ? declared : join92(resolve72(harness), fallback);
 }
 function resolveWorkflowDir2(startDir = process.cwd(), opts = {}) {
   return resolveHarnessSubdir2(startDir, opts, "workflowDir", "workflows");
@@ -9373,7 +9798,6 @@ function isDirectory3(dir) {
     return false;
   }
 }
-var GIT_CAPTURE_MAX_BYTES2 = 64 * 1024 * 1024;
 var MIGRATE_STATUS_FILE = "status.json";
 var ARCHIVED_STATUS_V1_FILE = "archived/status.v1.json";
 var NOTES_LEDGER_FILE = "notes.jsonl";
@@ -9413,18 +9837,18 @@ function todayString3() {
   return `${now.getFullYear()}-${month}-${day}`;
 }
 function scanCompasses(harnessDir) {
-  const iterationsDir = join10(harnessDir, "iterations");
+  const iterationsDir = join11(harnessDir, "iterations");
   const out = [];
   let entries;
   try {
-    entries = readdirSync6(iterationsDir, { withFileTypes: true });
+    entries = readdirSync7(iterationsDir, { withFileTypes: true });
   } catch {
     return out;
   }
   for (const entry of entries) {
     if (!entry.isDirectory())
       continue;
-    const compassPath = join10(iterationsDir, entry.name, "delivery-compass.md");
+    const compassPath = join11(iterationsDir, entry.name, "delivery-compass.md");
     let content;
     try {
       content = readFileSync82(compassPath, "utf8");
@@ -9504,8 +9928,8 @@ function buildIterationSnapshot(compass, rowById, rootUpdatedAt) {
     id: compass.id,
     type: "iteration",
     status,
-    file: join10("workflows", compass.id, WORKFLOW_SNAPSHOT_FILE2),
-    source: join10("iterations", compass.id, "delivery-compass.md"),
+    file: join11("workflows", compass.id, WORKFLOW_SNAPSHOT_FILE2),
+    source: join11("iterations", compass.id, "delivery-compass.md"),
     data: snapshot
   };
 }
@@ -9540,7 +9964,7 @@ function buildStandaloneSnapshot(row, rootUpdatedAt, migrationNotes) {
     id,
     type: "plan",
     status,
-    file: join10("workflows", id, WORKFLOW_SNAPSHOT_FILE2),
+    file: join11("workflows", id, WORKFLOW_SNAPSHOT_FILE2),
     source: "status.json plans[] row",
     data: snapshot
   };
@@ -9648,7 +10072,7 @@ function buildRegister(residualFindings, byPlan, projectId, migratedAt) {
     return null;
   const doc = { entries };
   return {
-    file: join10("projects", projectId, PROJECT_REGISTER_FILE2),
+    file: join11("projects", projectId, PROJECT_REGISTER_FILE2),
     source: "status.json residual_findings",
     data: doc
   };
@@ -9679,7 +10103,7 @@ function collectNotesFiles(snapshots) {
     if (lines.length === 0)
       continue;
     out.push({
-      file: join10(dirname72(snapshot.file), NOTES_LEDGER_FILE),
+      file: join11(dirname72(snapshot.file), NOTES_LEDGER_FILE),
       source,
       lines
     });
@@ -9687,11 +10111,11 @@ function collectNotesFiles(snapshots) {
   return out;
 }
 function migrateHarnessTree(root, opts = {}) {
-  const harnessDir = resolve92(root);
+  const harnessDir = resolve102(root);
   const workflowDir = resolveWorkflowDir2(harnessDir, { harnessDir });
   const projectDir = resolveProjectDir2(harnessDir, { harnessDir });
   const projectId = opts.projectId ?? _DEFAULT_PROJECT2;
-  const statusPath = join10(harnessDir, MIGRATE_STATUS_FILE);
+  const statusPath = join11(harnessDir, MIGRATE_STATUS_FILE);
   const legacy = readJson2(statusPath);
   if (legacy.version === 2) {
     const updatedAt = typeof legacy.updated_at === "string" && legacy.updated_at !== "" ? legacy.updated_at : "1970-01-01";
@@ -9787,7 +10211,7 @@ function migrateHarnessTree(root, opts = {}) {
       migrationNotes.push(`roadmap title sanitized for frontmatter (line breaks replaced with spaces): ${JSON.stringify(rawTitle)}`);
     }
     roadmap = {
-      file: join10("projects", projectId, PROJECT_ROADMAP_FILE2),
+      file: join11("projects", projectId, PROJECT_ROADMAP_FILE2),
       source: "status.json metadata.program_roadmap",
       content: buildRoadmap({ ...programRoadmap, title: sanitizedTitle }, projectId, migratedAt)
     };
@@ -9836,19 +10260,19 @@ async function applyMigratePlan(plan) {
   if (plan.dryRun) {
     return { applied: false, message: `dry-run: ${plan.steps.length} steps planned (source \u2192 destination), zero writes` };
   }
-  const statusPath = join10(plan.root, MIGRATE_STATUS_FILE);
+  const statusPath = join11(plan.root, MIGRATE_STATUS_FILE);
   const current = readJson2(statusPath);
   if (current.version === 2) {
     return { applied: false, message: "no-op: status.json already at schema version 2 (migrated) \u2014 nothing to do" };
   }
-  const harnessRoot = resolve92(plan.root);
-  const workflowRoot = resolve92(plan.workflowDir);
-  const projectRoot = resolve92(plan.projectDir);
-  if (!isAbsolute62(plan.workflowDir) || !isAbsolute62(plan.projectDir)) {
+  const harnessRoot = resolve102(plan.root);
+  const workflowRoot = resolve102(plan.workflowDir);
+  const projectRoot = resolve102(plan.projectDir);
+  if (!isAbsolute72(plan.workflowDir) || !isAbsolute72(plan.projectDir)) {
     throw new Error(`refusing to apply migration: plan workflowDir/projectDir must be absolute (got ${JSON.stringify(plan.workflowDir)} / ${JSON.stringify(plan.projectDir)})`);
   }
-  const workflowTargetOf = (canonicalFile) => join10(workflowRoot, relative32("workflows", canonicalFile));
-  const projectTargetOf = (canonicalFile) => join10(projectRoot, relative32("projects", canonicalFile));
+  const workflowTargetOf = (canonicalFile) => join11(workflowRoot, relative32("workflows", canonicalFile));
+  const projectTargetOf = (canonicalFile) => join11(projectRoot, relative32("projects", canonicalFile));
   const allDestinations = [
     plan.archive.file,
     ...plan.snapshots.map((snapshot) => snapshot.file),
@@ -9857,14 +10281,14 @@ async function applyMigratePlan(plan) {
     ...plan.roadmap !== null ? [plan.roadmap.file] : []
   ];
   for (const destination of allDestinations) {
-    const resolvedDest = resolve92(join10(plan.root, destination));
+    const resolvedDest = resolve102(join11(plan.root, destination));
     const inside = (dir) => resolvedDest === dir || resolvedDest.startsWith(`${dir}${sep22}`);
     if (!inside(harnessRoot) && !inside(workflowRoot) && !inside(projectRoot)) {
       throw new Error(`refusing to apply migration: destination escapes the harness dir (${JSON.stringify(destination)}) \u2014 every write must stay under ${JSON.stringify(plan.root)}, the workflow dir (${JSON.stringify(plan.workflowDir)}) or the project dir (${JSON.stringify(plan.projectDir)})`);
     }
   }
-  mkdirSync7(join10(plan.root, dirname72(plan.archive.file)), { recursive: true });
-  copyFileSync(statusPath, join10(plan.root, plan.archive.file));
+  mkdirSync7(join11(plan.root, dirname72(plan.archive.file)), { recursive: true });
+  copyFileSync(statusPath, join11(plan.root, plan.archive.file));
   for (const snapshot of plan.snapshots) {
     await writeWorkflowSnapshot(snapshot.data, dirname72(workflowTargetOf(snapshot.file)));
   }
@@ -9920,7 +10344,7 @@ var RISK_ENUM_RE2 = new RegExp(`^(?:${AUDIT_RISKS2.join("|")})(?:\\b|$)`);
 var CONFIDENCE_ENUM_RE2 = new RegExp(`^(${[...AUDIT_CONFIDENCES2, "MEDIUM"].join("|")})\\b`, "i");
 // src/commands/migrate.ts
 var import_picocolors = __toESM(require_picocolors2(), 1);
-import { resolve as resolve12 } from "node:path";
+import { resolve as resolve13 } from "node:path";
 function validatePlannedDocs(plan) {
   const warnings = [];
   for (const snapshot of plan.snapshots) {
@@ -9942,7 +10366,8 @@ function validatePlannedDocs(plan) {
   return warnings;
 }
 async function runMigrateCommand(options) {
-  const root = options.path ? resolve12(options.path) : resolveHarnessDir2() ?? process.cwd();
+  const root = options.path ? resolve13(options.path) : resolveHarnessDir2() ?? process.cwd();
+  setArtifactStore2(createFsStore2(root));
   let plan;
   try {
     plan = migrateHarnessTree(root, { dryRun: options.dryRun === true });
@@ -10097,7 +10522,7 @@ function describeType(value) {
     return "array";
   return typeof value;
 }
-function isPlainObject7(value) {
+function isPlainObject8(value) {
   return typeof value === "object" && value !== null && !Array.isArray(value);
 }
 function parseScalar3(raw) {
@@ -10141,7 +10566,7 @@ function isValidMcpUrl(raw) {
   return true;
 }
 function validateManifest(manifest, errors2, warnings) {
-  if (!isPlainObject7(manifest)) {
+  if (!isPlainObject8(manifest)) {
     errors2.push("plugin.json: manifest must be a JSON object");
     return;
   }
@@ -10177,7 +10602,7 @@ function validateManifest(manifest, errors2, warnings) {
     }
   }
   if (doc.author !== undefined) {
-    if (!isPlainObject7(doc.author)) {
+    if (!isPlainObject8(doc.author)) {
       errors2.push('plugin.json: "author" must be an object with optional string fields name/email/url');
     } else {
       const author = doc.author;
@@ -10200,11 +10625,11 @@ function validateManifest(manifest, errors2, warnings) {
     }
   }
   if (doc.extensions !== undefined) {
-    if (!isPlainObject7(doc.extensions)) {
+    if (!isPlainObject8(doc.extensions)) {
       warnings.push('plugin.json: "extensions" is not an object \u2014 ignored');
     } else {
       for (const [namespace, value] of Object.entries(doc.extensions)) {
-        if (!isPlainObject7(value)) {
+        if (!isPlainObject8(value)) {
           warnings.push(`plugin.json: "extensions.${namespace}" is not an object \u2014 ignored`);
         }
       }
@@ -10213,7 +10638,7 @@ function validateManifest(manifest, errors2, warnings) {
 }
 function validateMcpServer(name, entry, errors2) {
   const prefix = `mcp.json: mcpServers.${name}`;
-  if (!isPlainObject7(entry)) {
+  if (!isPlainObject8(entry)) {
     errors2.push(`${prefix} must be an object`);
     return;
   }
@@ -10247,7 +10672,7 @@ function validateMcpServer(name, entry, errors2) {
       }
     }
     if (server.env !== undefined) {
-      if (!isPlainObject7(server.env)) {
+      if (!isPlainObject8(server.env)) {
         errors2.push(`${prefix}: "env" must be an object of strings`);
       } else {
         for (const [key, value] of Object.entries(server.env)) {
@@ -10286,7 +10711,7 @@ function validateMcpServer(name, entry, errors2) {
     errors2.push(`${prefix}: "url" must be an absolute http(s) URL without user info or fragment; non-loopback endpoints must use https`);
   }
   if (server.headers !== undefined) {
-    if (!isPlainObject7(server.headers)) {
+    if (!isPlainObject8(server.headers)) {
       errors2.push(`${prefix}: "headers" must be an object of strings`);
     } else {
       const seen = new Set;
@@ -10323,7 +10748,7 @@ function validateMcp(root, manifestSchema, errors2) {
     errors2.push(`mcp.json: ${error.message}`);
     return;
   }
-  if (!isPlainObject7(parsed)) {
+  if (!isPlainObject8(parsed)) {
     errors2.push("mcp.json: configuration must be a JSON object");
     return;
   }
@@ -10346,7 +10771,7 @@ function validateMcp(root, manifestSchema, errors2) {
     }
   }
   const servers = doc.mcpServers;
-  if (!isPlainObject7(servers)) {
+  if (!isPlainObject8(servers)) {
     errors2.push('mcp.json: "mcpServers" is required and must be an object');
     return;
   }
@@ -10431,7 +10856,7 @@ function validateAgentPlugin(root) {
     return { ok: false, errors: errors2, warnings };
   }
   validateManifest(manifest, errors2, warnings);
-  const manifestSchema = isPlainObject7(manifest) ? manifest["$schema"] : undefined;
+  const manifestSchema = isPlainObject8(manifest) ? manifest["$schema"] : undefined;
   validateMcp(root, manifestSchema, errors2);
   validateSkills(root, errors2, warnings);
   return { ok: errors2.length === 0, errors: errors2, warnings };
@@ -11706,6 +12131,68 @@ function getAdapter(target) {
   return adapter;
 }
 
+// src/global-cli.ts
+import { execFileSync as execFileSync9 } from "node:child_process";
+var CLI_NAME = "mstar-harness";
+var NPM_INSTALL_TIMEOUT_MS = 300000;
+var NPM_INSTALL_TIMEOUT_ENV = "MSTAR_CLI_INSTALL_TIMEOUT_MS";
+function installTimeoutMs() {
+  const raw = process.env[NPM_INSTALL_TIMEOUT_ENV];
+  if (raw === undefined || raw.trim() === "")
+    return NPM_INSTALL_TIMEOUT_MS;
+  const parsed = Number(raw);
+  return Number.isFinite(parsed) && parsed > 0 ? parsed : NPM_INSTALL_TIMEOUT_MS;
+}
+function defaultDetectVersion() {
+  try {
+    const out = execFileSync9(CLI_NAME, ["--version"], { encoding: "utf8", env: process.env });
+    return out.trim();
+  } catch {
+    return null;
+  }
+}
+function defaultInstall(spec) {
+  runCliCommand(["npm", "i", "-g", spec], { timeoutMs: installTimeoutMs() });
+}
+function ensureGlobalCli(opts) {
+  const spec = `@mstar-harness/cli@${opts.version}`;
+  const log = opts.log ?? ((line) => console.log(line));
+  if (opts.noGlobalCli) {
+    log("Skipping global CLI install (--no-global-cli).");
+    return { action: "skipped", reason: "flag" };
+  }
+  if (opts.dryRun) {
+    log(`Would run: npm i -g ${spec}`);
+    return { action: "skipped", reason: "dry-run" };
+  }
+  const current = (opts.detectVersion ?? defaultDetectVersion)();
+  if (current === opts.version) {
+    log(`${CLI_NAME} ${current} already on PATH.`);
+    return { action: "skipped", reason: "already-matching" };
+  }
+  try {
+    (opts.install ?? defaultInstall)(spec);
+    log(`Installed ${spec} globally.`);
+    return { action: "installed", spec };
+  } catch (err) {
+    const message = err instanceof Error ? err.message : String(err);
+    const kind = /EACCES|EPERM/.test(message) ? "permission" : "npm";
+    log(`Global CLI install failed: ${message}`);
+    log(`Failure kind: ${kind} (retry: npm i -g ${spec})`);
+    log(`Hint: run \`mstar-harness doctor\` to check the CLI on PATH.`);
+    return { action: "failed", spec, message };
+  }
+}
+function formatCliDoctorNote(detected, expected) {
+  if (detected === null) {
+    return `CLI on PATH: ${CLI_NAME} not found (expected version ${expected})`;
+  }
+  if (detected !== expected) {
+    return `CLI on PATH: ${CLI_NAME} ${detected} (expected ${expected})`;
+  }
+  return `CLI on PATH: ${CLI_NAME} ${detected} (matching)`;
+}
+
 // src/types.ts
 var SUPPORTED_TARGETS = ["opencode", "cursor", "codex", "zcode", "omp", "dsh"];
 
@@ -11811,6 +12298,7 @@ async function runInit5(options) {
     for (const note of installResult.notes) {
       console.log(`  - ${note}`);
     }
+    ensureGlobalCli({ version: packageVersion, dryRun: !!options.dryRun, noGlobalCli: !!options.noGlobalCli });
     return;
   }
   const useExplicitModels = hasExplicitModelFlags(options);
@@ -11854,12 +12342,14 @@ async function runInit5(options) {
       console.log(`  - ${roleId}: ${modelId}`);
     }
   }
+  ensureGlobalCli({ version: packageVersion, dryRun: !!options.dryRun, noGlobalCli: !!options.noGlobalCli });
 }
 function runDoctor5(options) {
   const target = options.target || "opencode";
   const adapter = getAdapter(target);
   const scope = options.scope || "project";
   console.log(`Target: ${target}`);
+  console.log(formatCliDoctorNote(defaultDetectVersion(), packageVersion));
   if (adapter.mode === "install") {
     const result = adapter.runInstallDoctor?.(scope);
     if (!result) {
@@ -11947,7 +12437,7 @@ var CANONICAL_NEGATIONS = {
 };
 function gitWorkspaceRoot(startDir) {
   try {
-    const cdup = execFileSync9("git", ["rev-parse", "--show-cdup"], {
+    const cdup = execFileSync10("git", ["rev-parse", "--show-cdup"], {
       cwd: startDir,
       encoding: "utf8",
       stdio: ["ignore", "pipe", "ignore"]
@@ -12196,8 +12686,12 @@ function runScaffold(pathArg) {
     console.log(`  skipped: ${item}`);
 }
 program2.name("mstar-harness").description("Morning Star harness CLI for target-based agent bootstrap").version(packageVersion);
-program2.command("init").description("Interactive/non-interactive setup for target agent bootstrap").option("-y, --yes", "Non-interactive mode").option("--target <target>", "Install target", "opencode").option("--scope <scope>", "Config scope: global|project (default: project)").option("--output <path>", "Config file path override, relative to project root").option("--dry-run", "Preview result without writing config").option("--no-fallbacks", "Skip installing the dsh-llm-fallbacks plugin (dsh target only)").option("--pm-model <model>", "Optional: model for project-manager (advanced override)").option("--strategic-models <a,b,c>", "Optional: models for architect/product-manager/prompt-engineer").option("--dev-models <a,b,c>", "Optional: models for fullstack-dev/fullstack-dev-2/frontend-dev").option("--qc-models <a,b,c>", "Optional: models for qc trio").option("--other-models <a,b,c>", "Optional: models for remaining roles").action(async (options) => {
-  await runInit5({ ...options, noFallbacks: options.fallbacks === false });
+program2.command("init").description("Interactive/non-interactive setup for target agent bootstrap").option("-y, --yes", "Non-interactive mode").option("--target <target>", "Install target", "opencode").option("--scope <scope>", "Config scope: global|project (default: project)").option("--output <path>", "Config file path override, relative to project root").option("--dry-run", "Preview result without writing config").option("--no-fallbacks", "Skip installing the dsh-llm-fallbacks plugin (dsh target only)").option("--no-global-cli", "Skip installing the matching-version @mstar-harness/cli globally after init").option("--pm-model <model>", "Optional: model for project-manager (advanced override)").option("--strategic-models <a,b,c>", "Optional: models for architect/product-manager/prompt-engineer").option("--dev-models <a,b,c>", "Optional: models for fullstack-dev/fullstack-dev-2/frontend-dev").option("--qc-models <a,b,c>", "Optional: models for qc trio").option("--other-models <a,b,c>", "Optional: models for remaining roles").action(async (options) => {
+  await runInit5({
+    ...options,
+    noFallbacks: options.fallbacks === false,
+    noGlobalCli: options.globalCli === false
+  });
 });
 var harnessCommand = program2.command("harness").description("harness bootstrap / dir-resolution helpers (engine-backed)");
 harnessCommand.command("scaffold").description("One-shot harness bootstrap: create the harness dir (default .mstar/, honoring .mstarc harness_dir/project_dir) " + "with dirs + v2 status.json + projects/_default/, append the canonical .gitignore snippet when absent " + "(skipped for non-.mstar layouts), and write a minimal {HARNESS_DIR}/AGENTS.md when absent").argument("[path]", "Root to scaffold (default: cwd)").action((pathArg) => {
@@ -12342,6 +12836,8 @@ statusCommand.command("backlog-register").description("Register deferred-PR back
     }
     const projectId = sanitizeProjectId(options.project ?? _DEFAULT_PROJECT);
     const projectRoot = resolveProjectDir(process.cwd(), options.harness ? { harnessDir: options.harness } : {});
+    if (options.harness)
+      setArtifactStore(createFsStore(options.harness));
     const projectDir = path12.join(projectRoot, projectId);
     const registeredAt = todayString5();
     const entries = entriesRaw.map((raw, index) => {
@@ -12367,6 +12863,8 @@ statusCommand.command("backlog-close").description("Close one project-register b
   try {
     const projectId = sanitizeProjectId(options.project ?? _DEFAULT_PROJECT);
     const projectRoot = resolveProjectDir(process.cwd(), options.harness ? { harnessDir: options.harness } : {});
+    if (options.harness)
+      setArtifactStore(createFsStore(options.harness));
     const projectDir = path12.join(projectRoot, projectId);
     await closeProjectRegisterEntry({
       projectDir,
@@ -12387,6 +12885,143 @@ statusCommand.command("archive-residuals").description("Removed in v3 \u2014 res
 var migrateCommand = program2.command("migrate").description("Migrate a v1 {HARNESS_DIR} status.json tree to v2 (engine-backed; exit 0 ok/idempotent no-op, 1 plan-invalid, 2 apply-failure)").option("--dry-run", "Print the migration step plan (source \u2192 destination) + planned-document validation warnings without writing anything").option("--path <root>", "Harness root to migrate (default: resolved {HARNESS_DIR}, else cwd)").option("--json", "Machine-readable JSON output").action(async (options) => {
   await runMigrateCommand(options);
 });
+var persistCommand = program2.command("persist").description("Persist one JSON coordination doc through the ArtifactStore (status / snapshot / residuals / review / json). " + "Faces: put (default), get [--validate], list (keys only, no header), delete (idempotent). " + "The default FsStore resolves the harness dir from the cwd / MSTAR_HARNESS_DIR; --store <module> or " + "MSTAR_STORE_MODULE injects a module-backed store (filesystem paths only) for the process.");
+var PERSIST_KINDS = ["status", "snapshot", "residuals", "review", "json"];
+function parsePersistKind(kind) {
+  if (PERSIST_KINDS.includes(kind))
+    return kind;
+  throw new SddScriptError(`usage: persist <kind> --key <key> [--file <path>|--stdin] [--store <module>] [--schema <id>]
+` + `       persist get <kind> --key <key> [--validate] [--store <module>]
+` + `       persist list <kind> [--store <module>]
+` + `       persist delete <kind> --key <key> [--store <module>]
+` + `  unknown kind ${JSON.stringify(kind)} \u2014 expected status | snapshot | residuals | review | json`, 2);
+}
+async function resolvePersistStore(storeFlag) {
+  const modulePath = storeFlag ?? process.env.MSTAR_STORE_MODULE;
+  if (modulePath === undefined)
+    return;
+  setArtifactStore(await loadStoreModule(modulePath));
+}
+function readPersistPayload(options) {
+  if (options.file !== undefined && options.stdin === true) {
+    throw new SddScriptError("usage: persist --file <path> and --stdin are mutually exclusive", 2);
+  }
+  if (options.file !== undefined) {
+    const filePath = path12.resolve(options.file);
+    if (!fs8.existsSync(filePath)) {
+      throw new Error(`persist payload file not found: ${filePath}`);
+    }
+    return fs8.readFileSync(filePath, "utf8");
+  }
+  return fs8.readFileSync(0, "utf8");
+}
+function validatePersistPayload(kind, payload) {
+  let gate2;
+  if (kind === "status")
+    gate2 = validateStatusV2(payload);
+  else if (kind === "snapshot")
+    gate2 = validateWorkflowSnapshot(payload);
+  else if (kind === "residuals")
+    gate2 = validateProjectRegister(payload);
+  else if (kind === "review")
+    gate2 = validateMstarReviewV1(payload);
+  else
+    return;
+  if (gate2.ok)
+    return;
+  const detail = gate2.violations.map((v) => `[${v.severity}] ${v.code}: ${v.message}`).join("; ");
+  throw new Error(`refusing to persist invalid ${kind} document: ${detail}`);
+}
+persistCommand.argument("<kind>", "status | snapshot | residuals | review | json").option("--key <key>", 'Stable key inside the kind (status: "root"; json: absolute file path)').option("--file <path>", "Payload JSON file (default: read stdin)").option("--stdin", "Read the payload JSON from stdin").option("--store <module>", "Store module path (filesystem only; overrides MSTAR_STORE_MODULE)").option("--schema <id>", "Optional schema id stored on the artifact doc (e.g. mstar.review/v1); stored only by store modules that persist it \u2014 the default FsStore rejects it (exit 1)").action(async (kind, options) => {
+  try {
+    const parsedKind = parsePersistKind(kind);
+    if (options.key === undefined) {
+      throw new SddScriptError("usage: persist <kind> --key <key> [--file <path>|--stdin] [--store <module>] [--schema <id>]", 2);
+    }
+    const raw = readPersistPayload(options);
+    let payload;
+    try {
+      payload = JSON.parse(raw);
+    } catch (error) {
+      throw new Error(`persist payload is not valid JSON: ${error.message}`);
+    }
+    validatePersistPayload(parsedKind, payload);
+    await resolvePersistStore(options.store);
+    await getArtifactStore().put({
+      kind: parsedKind,
+      key: options.key,
+      payload,
+      ...options.schema !== undefined ? { schema: options.schema } : {}
+    });
+    console.log(import_picocolors2.default.green(`persist ${parsedKind}/${options.key}: OK`));
+  } catch (error) {
+    failScript(error, "persist");
+  }
+});
+persistCommand.command("get").description("Print the stored payload JSON for <kind>/<key>, or exit 1 when absent").argument("<kind>", "status | snapshot | residuals | review | json").option("--validate", "Run the kind's validator on the fetched payload (notes on stderr; invalid \u2192 exit 1)").action(async (kind, options, command) => {
+  try {
+    const parsedKind = parsePersistKind(kind);
+    const parentOpts = command.parent?.opts() ?? {};
+    const key = typeof parentOpts.key === "string" ? parentOpts.key : undefined;
+    const store = typeof parentOpts.store === "string" ? parentOpts.store : undefined;
+    if (key === undefined) {
+      throw new SddScriptError("usage: persist get <kind> --key <key> [--validate] [--store <module>]", 2);
+    }
+    await resolvePersistStore(store);
+    const payload = await getArtifactStore().get({ kind: parsedKind, key });
+    if (payload === undefined) {
+      throw new Error(`persist get ${parsedKind}/${key}: no stored document`);
+    }
+    if (options.validate === true) {
+      validatePersistPayload(parsedKind, payload);
+      console.error(parsedKind === "json" ? "json: parse-only" : "validation: ok");
+    }
+    console.log(JSON.stringify(payload, null, 2));
+  } catch (error) {
+    failScript(error, "persist get");
+  }
+});
+persistCommand.command("list").description("Print the stored keys for <kind>, one per line, ascending, no header (json is not listable)").argument("<kind>", "status | snapshot | residuals | review | json").action(async (kind, _options, command) => {
+  try {
+    const parsedKind = parsePersistKind(kind);
+    if (parsedKind === "json") {
+      throw new SddScriptError("ArtifactStore json keys are absolute paths and cannot be listed", 2);
+    }
+    const parentOpts = command.parent?.opts() ?? {};
+    const store = typeof parentOpts.store === "string" ? parentOpts.store : undefined;
+    await resolvePersistStore(store);
+    const artifactStore = getArtifactStore();
+    if (typeof artifactStore.list !== "function") {
+      throw new SddScriptError("store does not support list", 2);
+    }
+    const refs = await artifactStore.list(parsedKind);
+    for (const key of refs.map((ref) => ref.key).sort()) {
+      console.log(key);
+    }
+  } catch (error) {
+    failScript(error, "persist list");
+  }
+});
+persistCommand.command("delete").description("Delete the stored document for <kind>/<key> (idempotent: absent is a no-op; no prompt)").argument("<kind>", "status | snapshot | residuals | review | json").action(async (kind, _options, command) => {
+  try {
+    const parsedKind = parsePersistKind(kind);
+    const parentOpts = command.parent?.opts() ?? {};
+    const key = typeof parentOpts.key === "string" ? parentOpts.key : undefined;
+    const store = typeof parentOpts.store === "string" ? parentOpts.store : undefined;
+    if (key === undefined) {
+      throw new SddScriptError("usage: persist delete <kind> --key <key> [--store <module>]", 2);
+    }
+    await resolvePersistStore(store);
+    const artifactStore = getArtifactStore();
+    if (typeof artifactStore.delete !== "function") {
+      throw new SddScriptError("store does not support delete", 2);
+    }
+    await artifactStore.delete({ kind: parsedKind, key });
+    console.log(`deleted ${parsedKind}/${key}`);
+  } catch (error) {
+    failScript(error, "persist delete");
+  }
+});
 var leaseCommand = program2.command("lease").description("execution_lease / integration_merge_lease checks (engine-backed)");
 function resolveLeaseHarnessDir(harnessArg) {
   if (harnessArg)
@@ -13098,7 +13733,7 @@ function resolveAuditShortSha(cwd, override) {
   if (override !== undefined && override !== "")
     return override;
   try {
-    const out = execFileSync9("git", ["rev-parse", "--short", "HEAD"], {
+    const out = execFileSync10("git", ["rev-parse", "--short", "HEAD"], {
       cwd,
       encoding: "utf8",
       stdio: ["ignore", "pipe", "ignore"]
@@ -13154,6 +13789,7 @@ auditCommand.command("promote").description("Promote selected audit plans into t
       throw new Error(`audit dir not found: ${outDir}`);
     }
     const harnessDir = resolveLeaseHarnessDir(options.harness);
+    setArtifactStore(createFsStore(harnessDir));
     const result = await promoteAuditPlans(outDir, selected, {
       harnessDir,
       ...options.workflow !== undefined ? { workflowId: options.workflow } : {}
@@ -13167,7 +13803,7 @@ auditCommand.command("promote").description("Promote selected audit plans into t
 function listTrackedFiles(root) {
   let out;
   try {
-    out = execFileSync9("git", ["ls-files", "-z", "--", "."], {
+    out = execFileSync10("git", ["ls-files", "-z", "--", "."], {
       cwd: root,
       encoding: "utf8",
       stdio: ["ignore", "pipe", "ignore"]
@@ -13515,17 +14151,17 @@ prReviewCommand.command("validate-report").description("Validate a saved local P
   }
 });
 function gitSync(args, cwd) {
-  return execFileSync9("git", args, { cwd, encoding: "utf8", stdio: ["ignore", "pipe", "pipe"] }).trim();
+  return execFileSync10("git", args, { cwd, encoding: "utf8", stdio: ["ignore", "pipe", "pipe"] }).trim();
 }
 function ghSync(args, input) {
-  return execFileSync9("gh", args, { encoding: "utf8", stdio: ["ignore", "pipe", "pipe"], ...input !== undefined ? { input } : {} }).trim();
+  return execFileSync10("gh", args, { encoding: "utf8", stdio: ["ignore", "pipe", "pipe"], ...input !== undefined ? { input } : {} }).trim();
 }
 function cliToday() {
   const iso = new Date().toISOString();
   return iso.slice(0, 10);
 }
 function listLocalBranches(cwd) {
-  const out = execFileSync9("git", ["for-each-ref", "--format=%(refname:short)", "refs/heads"], {
+  const out = execFileSync10("git", ["for-each-ref", "--format=%(refname:short)", "refs/heads"], {
     cwd,
     encoding: "utf8",
     stdio: ["ignore", "pipe", "pipe"]
@@ -13534,7 +14170,7 @@ function listLocalBranches(cwd) {
 }
 function refResolves(ref, cwd) {
   try {
-    execFileSync9("git", ["rev-parse", "--verify", "--quiet", ref], { cwd, encoding: "utf8", stdio: ["ignore", "pipe", "ignore"] });
+    execFileSync10("git", ["rev-parse", "--verify", "--quiet", ref], { cwd, encoding: "utf8", stdio: ["ignore", "pipe", "ignore"] });
     return true;
   } catch {
     return false;
@@ -13547,7 +14183,7 @@ function probeChangesetEmpty(diffCmdArgs, cwd, worktreePath) {
       return false;
     let untracked = "";
     try {
-      untracked = execFileSync9("git", ["ls-files", "--others", "--exclude-standard"], {
+      untracked = execFileSync10("git", ["ls-files", "--others", "--exclude-standard"], {
         cwd: worktreePath,
         encoding: "utf8",
         stdio: ["ignore", "pipe", "ignore"]
@@ -13565,7 +14201,7 @@ function probeChangesetEmpty(diffCmdArgs, cwd, worktreePath) {
 }
 function gitIf(args, cwd) {
   try {
-    return execFileSync9("git", args, { cwd, encoding: "utf8", stdio: ["ignore", "pipe", "ignore"] });
+    return execFileSync10("git", args, { cwd, encoding: "utf8", stdio: ["ignore", "pipe", "ignore"] });
   } catch {
     return "";
   }
@@ -13690,7 +14326,7 @@ function foldIntoBody(body, entries) {
 `);
 }
 function ghApi(apiPath, payload) {
-  return execFileSync9("gh", ["api", "--method", "POST", apiPath, "--input", "-"], {
+  return execFileSync10("gh", ["api", "--method", "POST", apiPath, "--input", "-"], {
     encoding: "utf8",
     stdio: ["ignore", "pipe", "pipe"],
     input: payload
@@ -13744,7 +14380,7 @@ prReviewCommand.command("worktree-setup").description("Create the isolated revie
     let headSpec = "";
     if (mode === "pr") {
       prNumber = Number(options.pr);
-      baseRef = execFileSync9("gh", ["pr", "view", String(prNumber), "--json", "baseRefName", "--jq", ".baseRefName"], {
+      baseRef = execFileSync10("gh", ["pr", "view", String(prNumber), "--json", "baseRefName", "--jq", ".baseRefName"], {
         encoding: "utf8",
         stdio: ["ignore", "pipe", "pipe"]
       }).trim();