@nurix/etna 0.20.22 → 0.20.24

package/data/catalog/index.json

@@ -1,6 +1,7 @@
 {
     "rules": [
         "changelog",
+        "cli",
         "cloudflare",
         "code-eval-batcher",
         "database",

package/data/catalog/rules/cli.md

@@ -0,0 +1,68 @@
+---
+paths:
+  - "**/packages/cli/**"
+  - "**/packages/*-cli/**"
+  - "**/bin/*.js"
+  - "**/bin/*.mjs"
+  - "**/src/cli/**"
+  - "**/src/commands/**"
+---
+# CLI — credentials, login doors, and the machine contract
+
+What a `@nurix/*` command-line tool holds true about **how it authenticates, where it keeps what it is given, and how a script or an agent drives it**. Packaging, `npx` distribution, self-update, managed file blocks and publishing are the `nustack` skill's `cli-design.md` reference; the product API's own gate is the product's feature doc. A CLI that talks to no authenticated service reads only §5.
+
+## 1. Two credentials, and the order they are read in
+
+| Credential | Held by | Arrives by | Lives | Dies by | Verified by |
+| --- | --- | --- | --- | --- | --- |
+| **Grant** — an OAuth refresh token, rotated on every use | a person's machine | a login door (§2) | until revoked | revocation at the auth service | the auth service; the CLI never sees a secret it can check |
+| **Token** — an opaque, prefixed secret (`nst_pat_…`) | a pipeline, an agent, a headless host | the `<TOOL>_TOKEN` environment variable | until revoked or expired | a column on its row | the product API, locally, against a stored hash |
+
+- **Resolution order is fixed and never prompts: env token → OS store → file store → signed out.** A `<TOOL>_TOKEN` in the environment wins outright and touches no store; `login`, `logout` and `doctor` say so instead of acting on the store behind it.
+- **The grant refreshes; the token never does.** A grant spends the refresh token for a fifteen-minute access JWT per resource and writes the rotated pair back. A token is presented as-is on every call, and a `401` against it is final — no refresh, no retry, no browser.
+- **Only the refresh token and the cached access tokens are stored — never a password, never an ID token, never the token a pipeline injected.**
+- **Never a `--token` flag.** `argv` is readable in `ps` and shell history on every host the command runs on; the environment is the only way a secret enters a process. A flag that exists for a legacy caller is documented as deprecated, never added new.
+- **A token cannot mint a token.** Minting, listing and revoking are person-only routes; a credential that can create credentials turns one leak into an unbounded family.
+
+## 2. Three login doors, one per situation
+
+| Door | When | Shape |
+| --- | --- | --- |
+| **Loopback** | a browser runs on the same machine | authorization code + PKCE; `redirect_uri` is `http://127.0.0.1:<ephemeral>/callback`; the listener answers one matching `state` and closes |
+| **Pasted code** | the browser cannot reach the terminal — SSH, a container | the same authorize URL with `redirect_uri` set to the auth service's own code page; the person pastes the code the page shows |
+| **Device grant** (RFC 8628) | a GUI app with no listener of its own | `/device/code`, a `user_code`, polling `/oauth2/token` |
+
+- **The CLI hardcodes one hostname — the product's.** The auth service's base URL, the client id and the resource audiences come from the product's discovery route (`GET /api/v1/auth/config`); a literal auth URL in a client pins every installed copy to one deployment.
+- **Send `provider=<id>` on the authorize URL when the client already knows the provider** — the auth service's sign-in page starts that provider server-side with no paint when there is no session. Omitting it is the "click Google, then click Google again" defect.
+- **Never open a browser, and never prompt, when stdin or stdout is not a TTY or when the env token is set.** The refusal is the CLI's own `SIGNED_OUT` code naming the login command, exit 1 — never a bare HTTP status, never a hang waiting on a page nobody can see.
+- **Refusals are coded, and only two spend the credential.** `invalid_grant` is a dead grant: clear the item, run the login door, resume the command. `invalid_target` is a live grant asked for a resource it never covered: re-authorize wider, keep the item. A network failure, a `5xx` or a `429` keeps the item and raises — the item is shared with every client on the machine, and clearing it on a blip signs all of them out.
+
+## 3. Where a credential lives
+
+- **OS store where one is probed present, a `0600` file where none is, and the absence of an OS store is never a reason to refuse login.** macOS `security`, Linux `secret-tool` (libsecret); otherwise `~/.<tool>/credentials.json`, mode `0600`, in a `0700` directory, written atomically (temp file + rename). `<TOOL>_CREDENTIAL_STORE=auto|keychain|file` overrides the probe.
+- **Never `localStorage`, never a world-readable file, never the project directory.** The link file a project carries (`.<tool>/project.json`) holds identifiers only — a project id, a host, a stack — and is committed; a secret beside it ships with the repo.
+- **One item, several clients — read-modify-write with the schema versioned.** A CLI and a desktop app sharing an item merge into it, preserve keys they do not know, and stamp `schema_version`; a newer schema is refused whole and an older one reads as *sign in again*. Concurrent refreshes race by design — the auth service's reuse window absorbs the honest double refresh, so the second loser is a rotation, never a wipe.
+- **Logout is revoke-then-clear, best effort on the revoke.** An offline machine still clears its local material.
+
+## 4. The server's doors
+
+- **Every machine credential carries a prefix the gate routes by, and the prefixed branches are ordered after the JWT branch.** Two credentials both presented as `Authorization: Bearer <opaque>` with no prefix cannot be told apart; a prefixed branch ahead of the JWT branch would have to decline every JWT correctly on every path, while one placed last cannot shadow a credential that already resolved.
+- **One credential, one door.** A token minted for one surface is refused at every other, whatever it is worth — the audience rule is what bounds a leak.
+- **A token row is `id`, owner, `label`, `token_hash`, `token_prefix`, `expires_at`, `revoked_at`, `last_used_at`.** The raw value appears in the `201` that minted it and nowhere else; the prefix is what a list shows; revocation sets a column and keeps the row, so the audit trail stays readable and the hash can never be re-issued; an expired, a revoked and an unknown token all answer the same `401`, so a caller never learns which.
+
+## 5. The machine contract
+
+A script or an agent drives the CLI as often as a person does, and it reads three channels: **stdout carries the one datum** — the URL, the id, or the `--json` envelope — **stderr carries everything else, and the exit code is the verdict.** `cmd > out.txt` with a `0` exit is the whole contract for the caller; a progress line on stdout breaks it. TTY detection, `--yes`, and failing loudly outside a TTY are `cli-design.md` §5; on top of it:
+
+- **`--json` implies non-interactive**, and every error is a coded envelope, never prose.
+- **A command that waits on a remote job offers `--no-wait`** (return the id at once) **and, where the job streams a log, `--ci`** (stream the build log, exit with the job's verdict, fall back to polling when the stream dies). The default waits and streams.
+- **Upload and go-live are separate verbs when the platform has a pointer.** `deploy --no-promote` stages, `promote` and `rollback` move the pointer, and a `deploy` without the flag does both. A rollback that rebuilds is a redeploy, not a rollback.
+- **Pack what git would ship.** `.gitignore` plus a `.<tool>ignore` decide what leaves the machine; `--no-gitignore` is the escape hatch, named, never the default.
+
+## 6. Pitfalls — symptom → cause → fix
+
+- **The sign-in page painted although the client sent `provider=`** → the hint fell off a hop, or the URL carries `error=` from an earlier attempt (the page always paints on `error=`) → follow the chain hop by hop with `curl -s -o /dev/null -D - <url>` and read each `location:`; the hint must survive every hop.
+- **Works on macOS, asks to log in on every run elsewhere** → OS-store-only storage with no file fallback → §3.
+- **CI hangs at the first authenticated command** → a prompt or a browser opened outside a TTY → §2; the fix is the `SIGNED_OUT` refusal, not a longer timeout.
+- **Two commands at once, and the machine is "signed out"** → a concurrent refresh treated `invalid_grant` on the loser as a dead grant → check the service's reuse window before clearing anything (§3).
+- **A `401` on a `<TOOL>_TOKEN` call loops or opens a browser** → the token took the grant's refresh path → §1: a token's `401` is final.

package/data/catalog/rules/pnpm.md

@@ -9,7 +9,7 @@ paths:
 ---
 # pnpm — `@nurix/*` Workspaces: naming, boundaries, and consuming
 
-How a `@nurix/*` repo is **named**, **structured**, and how its packages are **consumed** — every repo takes the workspace shape, single-package frontends included. Publishing and CLI design live in the `nustack` skill, not here — no `nustack` skill in the runtime ⇒ ask before crossing the publish boundary.
+How a `@nurix/*` repo is **named**, **structured**, and how its packages are **consumed** — every repo takes the workspace shape, single-package frontends included. Publishing and a CLI's packaging live in the `nustack` skill, not here — no `nustack` skill in the runtime ⇒ ask before crossing the publish boundary.
 
 ---
 

package/data/harness-index.json

@@ -1,5 +1,5 @@
 {
-    "fingerprint": "e02eaf6819db",
+    "fingerprint": "73da5d8c28fc",
     "harnesses": {
         "code": {
             "plugin": "code",

package/data/harnesses/code/harness.json

@@ -1,7 +1,7 @@
 {
   "harness": "code",
   "name": "code",
-  "version": "3.18.1",
+  "version": "3.19.2",
   "files": [
     ".prettierignore",
     ".prettierrc.json",
@@ -25,5 +25,5 @@
     }
   ],
   "docsRoot": "docs",
-  "digest": "6c141ff0afec"
+  "digest": "42dd88faa621"
 }

package/data/harnesses/code/hooks/awareness.mjs

@@ -49,6 +49,22 @@ import {
   pruneState,
 } from "./lib/claims.mjs";
 import { appendEvent } from "./lib/session-log.mjs";
+import { wallsAllowlist } from "./lib/graph-store.mjs";
+import { exitWallsAllowlist } from "./lib/exit-store.mjs";
+import { wallEnabled } from "./lib/walls.mjs";
+
+// Whether anything will ever read a row: a run whose allowlist switches off both walls the queue feeds —
+// the Stop wall and the commit wall — has nobody to drain it, so its rows would only ride the run's output
+// into the project (docs/harness/code/exit-check.md).
+function queueHasReader(projectDir) {
+  let allowlist = null;
+  try {
+    allowlist = wallsAllowlist(projectDir) ?? exitWallsAllowlist(projectDir);
+  } catch (e) {
+    allowlist = null;
+  }
+  return wallEnabled(allowlist, "queue") || wallEnabled(allowlist, "bookkeeping");
+}
 
 // ---------------------------------------------------------------------------
 // SessionStart
@@ -566,7 +582,7 @@ function postToolUse(projectDir, payload) {
       detectOutcomes(projectDir, meta, rows);
     }
   }
-  appendRows(projectDir, rows);
+  if (rows.length > 0 && queueHasReader(projectDir)) appendRows(projectDir, rows);
 }
 
 // ---------------------------------------------------------------------------

package/data/harnesses/code/hooks/compliance.mjs

@@ -25,6 +25,7 @@ import { appendEvent, unresolvedDenials, sessionLogPath, malformedEventLines } f
 import { approvedPackages, rejectedPackages } from "./lib/approved.mjs";
 import { claimActivity, releaseActivity, recentForeignTouches } from "./lib/claims.mjs";
 import { atStop, graphDenial, wallsAllowlist } from "./lib/graph-store.mjs";
+import { exitAtStop, exitWallsAllowlist, recordUnreadable } from "./lib/exit-store.mjs";
 import { WALLS, wallEnabled } from "./lib/walls.mjs";
 
 // --- the build graph's switch ------------------------------------------------------------
@@ -32,12 +33,13 @@ import { WALLS, wallEnabled } from "./lib/walls.mjs";
 // allowlist over lib/walls.mjs. Every wall it does not name is off for that session — because
 // the compliance set assumes a session that can dispatch a bookkeeper and a user who can answer
 // an ask, and a generation box has neither: its walls would be unresolvable blocks, not guard
-// rails. No graph, or a graph with no `mode` block, leaves every wall exactly as it was.
+// rails. No graph, or a graph with no `mode` block, leaves every wall exactly as it was. With no graph
+// declaring one, an exit set (docs/harness/code/exit-check.md) may carry the same block.
 let allowlistCache;
 function wallOn(projectDir, name) {
   if (allowlistCache === undefined) {
     try {
-      allowlistCache = wallsAllowlist(projectDir);
+      allowlistCache = wallsAllowlist(projectDir) ?? exitWallsAllowlist(projectDir);
     } catch (e) {
       allowlistCache = null; // a broken graph never switches a wall off
     }
@@ -524,6 +526,29 @@ function graphStop(projectDir, stopHookActive) {
   };
 }
 
+// The exit check (docs/harness/code/exit-check.md): authority, so a crash blocks rather than passes. It
+// blocks once — the box walls `.claude/state`, so the model cannot repair the file — and the second stop
+// records `blocked`, so the node still ends failed instead of met.
+function exitStop(projectDir, stopHookActive) {
+  let step;
+  try {
+    step = exitAtStop(projectDir);
+  } catch (e) {
+    const reason = `EXIT CHECK FAILED — ${e?.message || e}`;
+    if (!stopHookActive) {
+      return { decision: "block", reason: `${reason}. This node's exit set cannot be read, so it is not finished. (Said once — the next Stop ends the node blocked.)` };
+    }
+    try {
+      recordUnreadable(projectDir, reason);
+    } catch (e2) {
+      /* nowhere to record it; the box seals without a verdict and the run owner's own check decides */
+    }
+    return null;
+  }
+  if (!step || step.allow) return null;
+  return { decision: "block", reason: step.block };
+}
+
 function stopGate(projectDir, payload) {
   // The build graph is asked BEFORE the runtime's loop guard, and deliberately ignores it. The
   // guard exists because an unbounded Stop hook is a hang; the walker is bounded instead — every
@@ -538,6 +563,9 @@ function stopGate(projectDir, payload) {
   // hand-written graph should know it.
   const graph = graphStop(projectDir, payload.stop_hook_active);
   if (graph) return graph;
+  // The exit check is asked before the loop guard for the walker's reason: it is bounded by its own attempts.
+  const exit = exitStop(projectDir, payload.stop_hook_active);
+  if (exit) return exit;
 
   if (payload.stop_hook_active) return null; // the runtime's infinite-loop guard — never re-block
 

package/data/harnesses/code/hooks/lib/exit-store.mjs

@@ -0,0 +1,152 @@
+// harness/code/hooks/lib/exit-store.mjs — the exit check: what a NuStack generation box hands the harness
+// instead of a build graph. The box writes `.claude/state/exit.json` naming the documents a node owes; at
+// every Stop this module checks that each one EXISTS — never its shape — and hands the turn back naming what
+// is missing until the attempts run out, then records `blocked` (docs/harness/code/exit-check.md).
+//
+// This is authority, not hygiene: the caller turns a thrown error into a block, never a pass.
+
+import fs from "node:fs";
+import path from "node:path";
+import { atomicWrite, stateDir } from "./state.mjs";
+
+export const EXIT_VERSION = 1;
+export const EXIT_FILE = "exit.json";
+export const EXIT_VERDICT_FILE = "exit-verdict.json";
+
+const SKIPPED_DIRS = new Set(["node_modules", ".git"]);
+
+// Read through a plain join: absence is dormancy, and asking must never create the folder.
+export function exitFile(projectDir) {
+  return path.join(projectDir, ".claude", "state", EXIT_FILE);
+}
+
+export function exitVerdictFile(projectDir) {
+  return path.join(stateDir(projectDir), EXIT_VERDICT_FILE);
+}
+
+// Absent → null. Present but not a v1 exit set → throws: a set nobody can read is not a set that is met.
+export function loadExit(projectDir) {
+  let text;
+  try {
+    text = fs.readFileSync(exitFile(projectDir), "utf8");
+  } catch (e) {
+    return null;
+  }
+  const set = JSON.parse(text);
+  const attempts = set?.attempts;
+  if (!set || set.v !== EXIT_VERSION || !Array.isArray(set.owed) || !Number.isInteger(attempts?.used) || !Number.isInteger(attempts?.max)) {
+    throw new Error(`.claude/state/${EXIT_FILE} is not a v${EXIT_VERSION} exit set`);
+  }
+  return set;
+}
+
+// `*` matches within one path segment; everything else is literal.
+export function globMatches(glob, rel) {
+  const pattern = glob
+    .split("*")
+    .map((part) => part.replace(/[.+?^${}()|[\]\\]/g, "\\$&"))
+    .join("[^/]+");
+  return new RegExp(`^${pattern}$`).test(rel);
+}
+
+function isFile(projectDir, rel) {
+  try {
+    return fs.statSync(path.join(projectDir, rel)).isFile();
+  } catch (e) {
+    return false;
+  }
+}
+
+// How many files match a glob, walking only below its literal prefix.
+function globCount(projectDir, glob) {
+  const segments = glob.split("/");
+  const wild = segments.findIndex((segment) => segment.includes("*"));
+  const base = wild === -1 ? path.posix.dirname(glob) : segments.slice(0, wild).join("/");
+  let count = 0;
+  const walk = (rel) => {
+    let entries;
+    try {
+      entries = fs.readdirSync(path.join(projectDir, rel), { withFileTypes: true });
+    } catch (e) {
+      return;
+    }
+    for (const entry of entries) {
+      if (SKIPPED_DIRS.has(entry.name)) continue;
+      const child = rel ? `${rel}/${entry.name}` : entry.name;
+      if (entry.isDirectory()) walk(child);
+      else if (entry.isFile() && globMatches(glob, child)) count += 1;
+    }
+  };
+  walk(base === "." ? "" : base);
+  return count;
+}
+
+// The owed entries not on disk: a path that is not a file, or a glob matching fewer files than its floor.
+export function missingOf(projectDir, set) {
+  const missing = [];
+  for (const entry of set.owed) {
+    if (typeof entry?.path === "string") {
+      if (!isFile(projectDir, entry.path)) missing.push({ type: entry.type, path: entry.path });
+    } else if (typeof entry?.glob === "string") {
+      const min = Number.isInteger(entry.min) && entry.min > 0 ? entry.min : 1;
+      const found = globCount(projectDir, entry.glob);
+      if (found < min) missing.push({ type: entry.type, glob: entry.glob, min, found });
+    } else {
+      throw new Error(`an owed entry names neither a path nor a glob: ${JSON.stringify(entry)}`);
+    }
+  }
+  return missing;
+}
+
+function describeMissing(entry) {
+  return entry.path
+    ? `\`${entry.path}\` (${entry.type})`
+    : `at least ${entry.min} file(s) matching \`${entry.glob}\` (${entry.type}, ${entry.found} found)`;
+}
+
+export function writeVerdict(projectDir, verdict) {
+  atomicWrite(exitVerdictFile(projectDir), `${JSON.stringify({ v: EXIT_VERSION, ...verdict }, null, 2)}\n`);
+}
+
+// Stop: null when dormant; `{ allow, verdict }` when the set is met or its attempts are spent; `{ block }` otherwise, charging one attempt.
+export function exitAtStop(projectDir) {
+  const set = loadExit(projectDir);
+  if (!set) return null;
+  const missing = missingOf(projectDir, set);
+  const nodeSlug = set.nodeSlug ?? null;
+  if (missing.length === 0) {
+    writeVerdict(projectDir, { nodeSlug, verdict: "done", missing, attempts: set.attempts });
+    return { allow: true, verdict: "done", missing };
+  }
+  if (set.attempts.used >= set.attempts.max) {
+    writeVerdict(projectDir, { nodeSlug, verdict: "blocked", missing, attempts: set.attempts });
+    return { allow: true, verdict: "blocked", missing };
+  }
+  const attempts = { ...set.attempts, used: set.attempts.used + 1 };
+  atomicWrite(exitFile(projectDir), `${JSON.stringify({ ...set, attempts }, null, 2)}\n`);
+  const left = attempts.max - attempts.used;
+  return {
+    block:
+      `EXIT CHECK — this node owes documents that do not exist yet: ${missing.map(describeMissing).join("; ")}. Write them, then stop. ` +
+      (left > 0
+        ? `This stop was handed back; ${left} more will be, and after that the node ends blocked.`
+        : "The next stop ends the node blocked if any of them is still missing."),
+    missing,
+    attempts,
+  };
+}
+
+// A set that cannot be read still ends the node — as blocked, naming why — rather than as met.
+export function recordUnreadable(projectDir, reason) {
+  writeVerdict(projectDir, { nodeSlug: null, verdict: "blocked", missing: [{ type: "exit-check", reason }], attempts: { used: 0, max: 0 } });
+}
+
+// The set's `mode.walls` allowlist, or null. A broken file switches no wall off: hygiene fails open.
+export function exitWallsAllowlist(projectDir) {
+  try {
+    const set = loadExit(projectDir);
+    return Array.isArray(set?.mode?.walls) ? set.mode.walls : null;
+  } catch (e) {
+    return null;
+  }
+}

package/data/harnesses/code/rules/cli.md

@@ -0,0 +1,68 @@
+---
+paths:
+  - "**/packages/cli/**"
+  - "**/packages/*-cli/**"
+  - "**/bin/*.js"
+  - "**/bin/*.mjs"
+  - "**/src/cli/**"
+  - "**/src/commands/**"
+---
+# CLI — credentials, login doors, and the machine contract
+
+What a `@nurix/*` command-line tool holds true about **how it authenticates, where it keeps what it is given, and how a script or an agent drives it**. Packaging, `npx` distribution, self-update, managed file blocks and publishing are the `nustack` skill's `cli-design.md` reference; the product API's own gate is the product's feature doc. A CLI that talks to no authenticated service reads only §5.
+
+## 1. Two credentials, and the order they are read in
+
+| Credential | Held by | Arrives by | Lives | Dies by | Verified by |
+| --- | --- | --- | --- | --- | --- |
+| **Grant** — an OAuth refresh token, rotated on every use | a person's machine | a login door (§2) | until revoked | revocation at the auth service | the auth service; the CLI never sees a secret it can check |
+| **Token** — an opaque, prefixed secret (`nst_pat_…`) | a pipeline, an agent, a headless host | the `<TOOL>_TOKEN` environment variable | until revoked or expired | a column on its row | the product API, locally, against a stored hash |
+
+- **Resolution order is fixed and never prompts: env token → OS store → file store → signed out.** A `<TOOL>_TOKEN` in the environment wins outright and touches no store; `login`, `logout` and `doctor` say so instead of acting on the store behind it.
+- **The grant refreshes; the token never does.** A grant spends the refresh token for a fifteen-minute access JWT per resource and writes the rotated pair back. A token is presented as-is on every call, and a `401` against it is final — no refresh, no retry, no browser.
+- **Only the refresh token and the cached access tokens are stored — never a password, never an ID token, never the token a pipeline injected.**
+- **Never a `--token` flag.** `argv` is readable in `ps` and shell history on every host the command runs on; the environment is the only way a secret enters a process. A flag that exists for a legacy caller is documented as deprecated, never added new.
+- **A token cannot mint a token.** Minting, listing and revoking are person-only routes; a credential that can create credentials turns one leak into an unbounded family.
+
+## 2. Three login doors, one per situation
+
+| Door | When | Shape |
+| --- | --- | --- |
+| **Loopback** | a browser runs on the same machine | authorization code + PKCE; `redirect_uri` is `http://127.0.0.1:<ephemeral>/callback`; the listener answers one matching `state` and closes |
+| **Pasted code** | the browser cannot reach the terminal — SSH, a container | the same authorize URL with `redirect_uri` set to the auth service's own code page; the person pastes the code the page shows |
+| **Device grant** (RFC 8628) | a GUI app with no listener of its own | `/device/code`, a `user_code`, polling `/oauth2/token` |
+
+- **The CLI hardcodes one hostname — the product's.** The auth service's base URL, the client id and the resource audiences come from the product's discovery route (`GET /api/v1/auth/config`); a literal auth URL in a client pins every installed copy to one deployment.
+- **Send `provider=<id>` on the authorize URL when the client already knows the provider** — the auth service's sign-in page starts that provider server-side with no paint when there is no session. Omitting it is the "click Google, then click Google again" defect.
+- **Never open a browser, and never prompt, when stdin or stdout is not a TTY or when the env token is set.** The refusal is the CLI's own `SIGNED_OUT` code naming the login command, exit 1 — never a bare HTTP status, never a hang waiting on a page nobody can see.
+- **Refusals are coded, and only two spend the credential.** `invalid_grant` is a dead grant: clear the item, run the login door, resume the command. `invalid_target` is a live grant asked for a resource it never covered: re-authorize wider, keep the item. A network failure, a `5xx` or a `429` keeps the item and raises — the item is shared with every client on the machine, and clearing it on a blip signs all of them out.
+
+## 3. Where a credential lives
+
+- **OS store where one is probed present, a `0600` file where none is, and the absence of an OS store is never a reason to refuse login.** macOS `security`, Linux `secret-tool` (libsecret); otherwise `~/.<tool>/credentials.json`, mode `0600`, in a `0700` directory, written atomically (temp file + rename). `<TOOL>_CREDENTIAL_STORE=auto|keychain|file` overrides the probe.
+- **Never `localStorage`, never a world-readable file, never the project directory.** The link file a project carries (`.<tool>/project.json`) holds identifiers only — a project id, a host, a stack — and is committed; a secret beside it ships with the repo.
+- **One item, several clients — read-modify-write with the schema versioned.** A CLI and a desktop app sharing an item merge into it, preserve keys they do not know, and stamp `schema_version`; a newer schema is refused whole and an older one reads as *sign in again*. Concurrent refreshes race by design — the auth service's reuse window absorbs the honest double refresh, so the second loser is a rotation, never a wipe.
+- **Logout is revoke-then-clear, best effort on the revoke.** An offline machine still clears its local material.
+
+## 4. The server's doors
+
+- **Every machine credential carries a prefix the gate routes by, and the prefixed branches are ordered after the JWT branch.** Two credentials both presented as `Authorization: Bearer <opaque>` with no prefix cannot be told apart; a prefixed branch ahead of the JWT branch would have to decline every JWT correctly on every path, while one placed last cannot shadow a credential that already resolved.
+- **One credential, one door.** A token minted for one surface is refused at every other, whatever it is worth — the audience rule is what bounds a leak.
+- **A token row is `id`, owner, `label`, `token_hash`, `token_prefix`, `expires_at`, `revoked_at`, `last_used_at`.** The raw value appears in the `201` that minted it and nowhere else; the prefix is what a list shows; revocation sets a column and keeps the row, so the audit trail stays readable and the hash can never be re-issued; an expired, a revoked and an unknown token all answer the same `401`, so a caller never learns which.
+
+## 5. The machine contract
+
+A script or an agent drives the CLI as often as a person does, and it reads three channels: **stdout carries the one datum** — the URL, the id, or the `--json` envelope — **stderr carries everything else, and the exit code is the verdict.** `cmd > out.txt` with a `0` exit is the whole contract for the caller; a progress line on stdout breaks it. TTY detection, `--yes`, and failing loudly outside a TTY are `cli-design.md` §5; on top of it:
+
+- **`--json` implies non-interactive**, and every error is a coded envelope, never prose.
+- **A command that waits on a remote job offers `--no-wait`** (return the id at once) **and, where the job streams a log, `--ci`** (stream the build log, exit with the job's verdict, fall back to polling when the stream dies). The default waits and streams.
+- **Upload and go-live are separate verbs when the platform has a pointer.** `deploy --no-promote` stages, `promote` and `rollback` move the pointer, and a `deploy` without the flag does both. A rollback that rebuilds is a redeploy, not a rollback.
+- **Pack what git would ship.** `.gitignore` plus a `.<tool>ignore` decide what leaves the machine; `--no-gitignore` is the escape hatch, named, never the default.
+
+## 6. Pitfalls — symptom → cause → fix
+
+- **The sign-in page painted although the client sent `provider=`** → the hint fell off a hop, or the URL carries `error=` from an earlier attempt (the page always paints on `error=`) → follow the chain hop by hop with `curl -s -o /dev/null -D - <url>` and read each `location:`; the hint must survive every hop.
+- **Works on macOS, asks to log in on every run elsewhere** → OS-store-only storage with no file fallback → §3.
+- **CI hangs at the first authenticated command** → a prompt or a browser opened outside a TTY → §2; the fix is the `SIGNED_OUT` refusal, not a longer timeout.
+- **Two commands at once, and the machine is "signed out"** → a concurrent refresh treated `invalid_grant` on the loser as a dead grant → check the service's reuse window before clearing anything (§3).
+- **A `401` on a `<TOOL>_TOKEN` call loops or opens a browser** → the token took the grant's refresh path → §1: a token's `401` is final.

package/data/harnesses/code/rules/pnpm.md

@@ -9,7 +9,7 @@ paths:
 ---
 # pnpm — `@nurix/*` Workspaces: naming, boundaries, and consuming
 
-How a `@nurix/*` repo is **named**, **structured**, and how its packages are **consumed** — every repo takes the workspace shape, single-package frontends included. Publishing and CLI design live in the `nustack` skill, not here — no `nustack` skill in the runtime ⇒ ask before crossing the publish boundary.
+How a `@nurix/*` repo is **named**, **structured**, and how its packages are **consumed** — every repo takes the workspace shape, single-package frontends included. Publishing and a CLI's packaging live in the `nustack` skill, not here — no `nustack` skill in the runtime ⇒ ask before crossing the publish boundary.
 
 ---
 

package/data/harnesses/code/skills/design/components/index.md

@@ -14,20 +14,21 @@ button,inputs,Button (element/button),Button,"native <button>, variants via clas
 text-input,inputs,"Input (element/input) — onSave commit, regex validator",Input,"<input type=text>, commit on blur/Enter"
 number-input,inputs,"NumberInput (element/number-input) — min/max/step",—,"<input inputmode=numeric>, clamp on commit, Escape reverts"
 textarea,inputs,"Textarea (element/textarea) — Cmd/Ctrl+Enter commits",Textarea,"<textarea>, blur commits, Escape resets draft"
+inline-edit,inputs,"InlineEdit (element/inline-edit) — click-to-edit contentEditable span",—,"span[contenteditable] reading as a label until focused, Enter/blur commits, Escape reverts"
 checkbox,inputs,Checkbox (element/checkbox),Checkbox,"<input type=checkbox> + label, indeterminate via JS"
 switch,inputs,Switch (element/switch),Switch,"role=switch button, aria-checked, Space toggles"
 radio-group,inputs,"RadioGroup + card/segmented variants (element/radio-group)",RadioGroup,"fieldset of <input type=radio>, arrow-key roving focus"
-select,inputs,"Select — searchable, multi, async (element/select)","Select; Combobox (Popover + Command)","<select> or listbox popover, typeahead, option objects not raw values"
-native-select,inputs,"Select* Radix family (element/native-select)",Select,"plain <select> behind a styled trigger"
+combobox,inputs,"Combobox — searchable, multi, async (compound/combobox)","Combobox (Popover + Command)","input + filtered listbox popup, typeahead, option objects not raw values"
+calendar,inputs,"Calendar (compound/calendar) — react-day-picker",Calendar,"month grid <table>, arrow-key day navigation"
+select,inputs,"Select — closed listbox, one string value, no query field (element/select)",Select,"<select> or listbox popup, typeahead, one string value"
 date-picker,inputs,DatePicker (compound/date-picker),Date Picker (Calendar + Popover),"<input type=date> or calendar popover, ISO value"
 date-range-picker,inputs,"DateRangePicker — presets sidebar (compound/date-picker)",—,"two bound date inputs, partial selection reverts on close"
-calendar,inputs,"Calendar (element/calendar) — react-day-picker",Calendar,"month grid <table>, arrow-key day navigation"
 slider,inputs,Slider (element/slider),Slider,"<input type=range> with visible value readout"
 rating,inputs,Rating (element/rating),—,"radio group of icon buttons, half-step optional"
-toggle,inputs,"Toggle · ToggleGroup (element/toggle, element/toggle-group)","Toggle, Toggle Group","aria-pressed buttons, single or multiple selection"
+toggle,inputs,"Toggle · ToggleGroup (element/toggle, compound/toggle-group)","Toggle, Toggle Group","aria-pressed buttons, single or multiple selection"
 otp-input,inputs,InputOTP (compound/input-otp),Input OTP,"segmented one-char inputs, paste distributes across slots"
 icon-picker,inputs,"IconPicker · Icon (compound/icon-picker)",—,"searchable icon grid in a popover, categorized"
-file-upload,inputs,MediaFilePicker (compound/media-file-picker),—,"<input type=file> + drop zone, previews, size and count caps"
+file-upload,inputs,"FileUpload family — dropzone, list, item progress (compound/file-picker) · FilePreview (compound/file-preview)",—,"<input type=file> + drop zone, previews, size and count caps"
 form-field,inputs,"Cell — label/content/helper/error slots (compound/cell)",Form + FormField (react-hook-form),"label + control + helper in one block, error slot below control"
 form-validation,inputs,,Form (react-hook-form),"form element with submit-time validation and inline field errors"
 rich-text-editor,inputs,,—,"@tiptap/react editor with toolbar and markdown shortcuts"
@@ -39,19 +40,20 @@ bottom-drawer,overlays,Sheet side=bottom (block/sheet),Drawer (vaul),"fixed bott
 command-palette,overlays,Command (compound/command),Command (cmdk),"filtered list in a dialog, ⌘K opens, arrow-key + Enter"
 dropdown-menu,overlays,DropdownMenu (compound/dropdown-menu),Dropdown Menu,"role=menu under a trigger, arrow-key nav, outside click closes"
 context-menu,overlays,ContextMenu (compound/context-menu),Context Menu,"right-click menu at pointer position"
+speed-dial,overlays,SpeedDial (compound/speed-dial),—,"floating trigger button that fans a bounded set of icon actions out along one axis; the trigger doubles as the close affordance"
 popover,overlays,Popover (element/popover),Popover,"anchored floating panel, dismiss on outside/ESC"
 hover-card,overlays,HoverCard (element/popover),Hover Card,"preview panel on hover intent, delayed open/close"
 tooltip,overlays,Tooltip (element/tooltip),Tooltip,"short hint on hover/focus, never load-bearing content"
 data-table,collections,"Table + defineColumn (block/table)","<Table> + TanStack Table","semantic <table>, sticky header, tabular-nums, real pagination, status chips"
 table-primitives,collections,UiTable* family (block/ui-table),Table,"bare styled <table>/<thead>/<tbody> parts"
 list,collections,"List + ListToolbar + ListPagination (block/list)",—,"<ul> of rows with toolbar and pager"
-record-header,collections,"Header — config-driven (block/app-header)",—,"page-top block: breadcrumbs, title, status bar, actions"
-page-header-stats,collections,"PageHeader — Stat/Crumb/BackLink (block/page-header)",—,"title row + KPI strip + back link"
-gantt-timeline,collections,GanttChart (activity-timeline),—,"time-scaled task rows, date axis, horizontal scroll"
+record-header,collections,,—,"page-top block: breadcrumbs, title, status bar, actions"
+page-header-stats,collections,"Heading (element/heading) · Stat (element/stat) — composed at the call site",—,"title row + KPI strip + back link"
+gantt-timeline,collections,,—,"time-scaled task rows, date axis, horizontal scroll"
 changes-feed,collections,ChangesList (block/changes-list),—,"grouped change-history feed, entity + operation labels"
-message-thread,collections,"Message family + MessageScroller (compound/message, block/message-scroller)",—,"scrolling feed pinned to bottom, jump-to-new button"
-chat-bubble,collections,BubbleGroup + Bubble (element/bubble),—,"aligned bubble rows with reactions row"
-attachment,collections,Attachment family (compound/attachment),—,"file card: media, title, actions, error state, dashed idle border"
+message-thread,collections,"MessageScroller + useMessageScroller (block/message-scroller)",—,"scrolling feed pinned to bottom, jump-to-new button"
+chat-bubble,collections,,—,"aligned bubble rows with reactions row"
+attachment,collections,"FilePreview (compound/file-preview)",—,"file card: media, title, actions, error state, dashed idle border"
 thread-marker,collections,"Marker — separator/border variants (element/marker)",—,"inline separator row with icon and label"
 json-viewer,collections,,—,"react18-json-view collapsible tree, mono"
 virtualized-list,collections,,—,"react-window fixed-row virtualization for 1k+ rows"
@@ -65,79 +67,79 @@ file-tree,navigation,FileTree (block/sidebar),—,"nested tree with disclosure c
 breadcrumb,navigation,Breadcrumb (compound/breadcrumb),Breadcrumb,"<nav aria-label=breadcrumb>, current page unlinked"
 tabs,navigation,Tabs (compound/tabs),Tabs,"role=tablist, arrow-key switching, one panel per tab"
 pagination,navigation,Pagination (compound/pagination),Pagination,"page buttons + prev/next, aria-current on active page"
-navbar,navigation,Navbar (block/app-header),—,"horizontal top <nav> with links and actions"
+navbar,navigation,,—,"horizontal top <nav> with links and actions"
 navigation-menu,navigation,NavigationMenu (compound/navigation-menu),Navigation Menu,"top-level nav with flyout panels"
 menubar,navigation,Menubar (compound/menubar),Menubar,"desktop-app menu strip with full keyboard model"
-slide-out-menu,navigation,SlideOutMenu (block/slide-out-menu),—,"off-canvas nav panel for narrow viewports"
 icon-rail,navigation,VerticalIconBar (block/vertical-icon-bar),—,"narrow vertical icon strip with tooltips"
 stepper,navigation,,—,"ordered steps with done/current/todo states, aria-current=step"
-alert,feedback,Alert (element/alert),Alert,"role=alert block, tone via border + icon"
+alert,feedback,Alert (compound/alert),Alert,"role=alert block, tone via border + icon"
 empty-state,feedback,EmptyState (compound/empty-state),Empty,"icon + heading + motivation line + primary action"
 error-boundary,feedback,ErrorBoundary (lib/error-boundary),—,"React boundary rendering a retry block"
 not-found,feedback,NotFound (compound/empty-state),—,"404 block with a way back"
 skeleton,feedback,Skeleton (element/skeleton),Skeleton,"pulsing placeholder matching the final layout"
 loader,feedback,Loader (element/loader),Spinner,"centered spinner with optional label"
-text-spinner,feedback,"Braille (braille) · spinner frames (element/loader)",—,"animated unicode frames inline with text"
+text-spinner,feedback,,—,"animated unicode frames inline with text"
 progress,feedback,Progress (element/progress),Progress,"role=progressbar with aria-valuenow"
 toast,feedback,Toaster (compound/sonner),Sonner,"stacked corner notifications, auto-dismiss, action slot"
-typing-indicator,feedback,TypingIndicator (element/typing-indicator),—,"three-dot pulse row"
-sparkline,charts,"Spark — line|bar|pie (element/spark) · Sparkline (sparkline)",—,"inline no-axis SVG mark, token or self-contained color"
-inline-bar,charts,BarGraph (element/bar-graph),—,"compact bar SVG with skeleton, token colors"
-inline-line,charts,LineGraph (line-graph),—,"compact line SVG with skeleton"
-pie-donut,charts,"PieGraph — pie|half-pie|doughnut|half-doughnut (pie-graph)",—,"SVG arcs, max ~6 slices, center slot in doughnut"
-segmented-progress,charts,ProgressBar (progress-bar),—,"stacked horizontal segments with legend"
-area-chart,charts,"AreaChart + Area/RangeArea marks (charts)",Chart (recharts),"axes + gridlines + filled series + tooltip"
-bar-chart,charts,"BarChart + ParetoLine, BarSort, stack modes (charts)",Chart (recharts),"grouped/stacked bars, value labels opt-in"
-line-chart,charts,"LineChart + projection/reference overlays (charts)",Chart (recharts),"multi-series lines, reference lines, brush"
-scatter-chart,charts,ScatterChart + Scatter (charts),—,"x/y point field, hover ring, box select"
-composed-chart,charts,ComposedChart (charts),—,"mixed marks over one shared scale pair"
-histogram,charts,Histogram + computeHistogramBins (charts),—,"binned bars over a continuous axis"
+typing-indicator,feedback,"Loader — pulsing dots (element/loader)",—,"three-dot pulse row"
+sparkline,charts,"Spark — line|bar|pie (element/spark)",—,"inline no-axis SVG mark, token or self-contained color"
+status-timeline,charts,"StatusTimeline + .Skeleton (compound/status-timeline)",—,"one stacked bar per day of uptime status, hover card per day — no axis, not a bar chart"
+inline-line,charts,"Spark — line (element/spark)",—,"compact line SVG with skeleton"
+pie-donut,charts,"Chart — pie spec (block/chart)",—,"SVG arcs, max ~6 slices, center slot in doughnut"
+segmented-progress,charts,"Chart — progress spec (block/chart)",—,"stacked horizontal segments with legend"
+area-chart,charts,"Chart — area spec (block/chart)",Chart (recharts),"axes + gridlines + filled series + tooltip"
+bar-chart,charts,"Chart — bar spec (block/chart)",Chart (recharts),"grouped/stacked bars, value labels opt-in"
+line-chart,charts,"Chart — line spec (block/chart)",Chart (recharts),"multi-series lines, reference lines, brush"
+scatter-chart,charts,"Chart — scatter spec (block/chart)",—,"x/y point field, hover ring, box select"
+composed-chart,charts,"Chart — composed spec (block/chart)",—,"mixed marks over one shared scale pair"
+histogram,charts,"Chart — bar spec with mode: histogram (block/chart)",—,"binned bars over a continuous axis"
 bullet-chart,charts,"Bullet (gauge; also charts)",—,"measure bar + target tick + zone bands"
-funnel,charts,"Funnel + FunnelTooltip/FunnelLegend (funnel)",—,"ordered stage bands, percent-of-previous labels"
-gauge,charts,"Gauge — arc or notch track, zones, target (gauge)",—,"value arc with threshold zones and center readout"
-contribution-heatmap,charts,Heatmap + chrome (heatmap),—,"calendar cell grid with level legend"
-matrix-heatmap,charts,MatrixHeatmap + legend/tooltip (heatmap),—,"x-by-y cell matrix on the tokenized ramp"
-radar,charts,Radar (radar),—,"spider axes with series polygons"
-ring,charts,Ring (ring),—,"segmented circular progress with center info"
-chart-chrome,charts,"ChartEmpty · ChartHoverCard · ChartLegend (chart-primitives)",—,"shared empty/tooltip/legend chrome for inline charts"
+funnel,charts,"Chart — funnel spec (block/chart)",—,"ordered stage bands, percent-of-previous labels"
+gauge,charts,"Chart — gauge spec (block/chart)",—,"value arc with threshold zones and center readout"
+contribution-heatmap,charts,"Chart — heatmap-calendar spec (block/chart)",—,"calendar cell grid with level legend"
+matrix-heatmap,charts,"Chart — heatmap-matrix spec (block/chart)",—,"x-by-y cell matrix on the tokenized ramp"
+radar,charts,"Chart — radar spec (block/chart)",—,"spider axes with series polygons"
+ring,charts,"Chart — ring spec (block/chart)",—,"segmented circular progress with center info"
+chart-chrome,charts,"Chart chrome — legend, tooltip and empty state set by the spec theme · ChartErrorCard (block/chart)",—,"shared empty/tooltip/legend chrome for inline charts"
 card,layout,Card family (block/card),Card,"bordered section: header, content, footer"
-stat-card,layout,Statistics family (statistics),—,"number + comparison + trend + state + door, composable regions"
+stat-card,layout,"Stat (element/stat) · Chart — stat spec (block/chart)",—,"number + comparison + trend + state + door, composable regions"
 accordion,layout,Accordion (compound/accordion),Accordion,"stacked disclosure sections, single or multiple open"
+collapsible-panel,layout,SidePanel (block/side-panel),—,"in-flow side region docked left or right that collapses to a rail instead of disappearing; siblings reflow, nothing overlays"
 collapsible,layout,"Collapsible (element/collapsible) · CollapsiblePanel (compound/accordion)",Collapsible,"button-controlled region with hidden state"
 split-panes,layout,ResizablePanelGroup (block/resizable),Resizable,"draggable divider panes, keyboard resize"
 scroll-area,layout,ScrollArea (element/scroll-area),Scroll Area,"styled overflow container, visible-on-hover scrollbar"
 separator,layout,"Separator (element/separator) · SeparatorWithText (element/separator)",Separator,"<hr>/role=separator, optional centered label"
 aspect-ratio,layout,AspectRatio (element/aspect-ratio),Aspect Ratio,"CSS aspect-ratio box"
 carousel,layout,Carousel (compound/carousel),Carousel,"scroll-snap track with prev/next controls"
-bento-grid,layout,BentoGrid + BentoCard (bento-grid),—,"asymmetric feature grid with spanning cells"
-editable-card,layout,EditableCard (compound/editable-card),—,"card with edit-in-place body and commit footer"
+bento-grid,layout,,—,"asymmetric feature grid with spanning cells"
+editable-card,layout,,—,"card with edit-in-place body and commit footer"
 drag-reorder,layout,Sortable family (compound/sortable),—,"dnd-kit list reorder, keyboard sortable, drag overlay ghost"
-text,typography,Text (element/text),Typography,"semantic p/span with size and weight scale"
-badge,typography,Badge (element/badge),Badge,"small status pill, tokenized tone"
+text,typography,,Typography,"semantic p/span with size and weight scale"
+badge,typography,"Chip (element/chip)",Badge,"small status pill, tokenized tone"
 chip,typography,"Chip (element/chip) · Option display (element/select)",—,"removable tag, optional color dot"
 code,typography,Code (element/code),—,"inline <code>, mono"
 kbd,typography,Kbd (element/kbd),Kbd,"<kbd> keycap"
 label,typography,Label (element/label),Label,"<label for> bound to a control"
 link,typography,Link (element/link),—,"<a> with underline discipline"
-secure-text,typography,SecureText (secure-text),—,"masked value with reveal toggle, mono"
+secure-text,typography,"SecureText · maskText (element/secure-text)",—,"masked value with reveal toggle, mono"
 markdown,typography,Markdown (element/markdown),—,"react-markdown rendering with typographic defaults"
 avatar,media,Avatar (element/avatar),Avatar,"image with initials fallback, round"
 copy-button,media,CopyButton (compound/copy-button),—,"clipboard write with copied-state swap"
-icon,media,"IconRenderer (element/icon-renderer) + icons-data (lib/icons-data)",—,"lucide icon by name, consistent stroke and size grid"
-voice-waveform,media,"LiveWaveform (element/live-waveform) · MicIcon (element/mic-icon)",—,"animated level bars from mic input"
+icon,media,"Icon · IconPicker (compound/icon-picker) + iconsData (lib/icons-data)",—,"lucide icon by name, consistent stroke and size grid"
+voice-waveform,chat,"MicInput (compound/mic-input)",—,"latched dictation button plus mic level bars; button={false} for the meter alone, recorder={…} for record-then-review"
 brand-logo,media,"Logo — blue-black|white-white|lime-white|blue-white (element/logo)",—,"inline SVG logo sized by height"
 shine-border,media,ShineBorder (effect/shine-border),—,"animated gradient border wrapper, decorative"
-theme-toggle,media,ThemeToggler (element/theme-toggler),—,"light/dark switch writing data-theme"
+theme-toggle,media,"ThemeToggle (effect/theme-toggle)",—,"light/dark switch toggling the .dark class on the root element"
 view-switcher,media,ViewSwitcher (compound/tabs),—,"segmented control switching view-type projections"
 animated-number,motion,"AnimatedNumber (element/animated-number) · SlidingNumber (element/animated-number)",—,"tick-up numerals, renders plain text until JS ready"
-stagger-entrance,motion,AnimatedGroup (effect/animated-group),—,"staggered child arrival, identity moments only, never on 100×/day actions"
+stagger-entrance,motion,"AnimatedList (effect/animated-list)",—,"staggered child arrival, identity moments only, never on 100×/day actions"
 text-effects,motion,"TextEffect · TextMorph · TextScramble · TextShimmer (effect/*)",—,"per-character text animation, low-frequency surfaces only"
 morphing-overlay,motion,"MorphingDialog · MorphingPopover (effect/*)",—,"trigger morphs into overlay, interruptible"
-panel-transitions,motion,"TransitionPanel · Disclosure · motion Accordion (effect/*) · animated Tabs (animate-ui)",—,"crossfade/slide between sibling panels, height-animated reveal, interruptible"
+panel-transitions,motion,"TransitionPanel (effect/transition-panel) · Accordion (compound/accordion) · Tabs (compound/tabs)",—,"crossfade/slide between sibling panels, height-animated reveal, interruptible"
 decorative-effects,motion,"Spotlight · GlowEffect · AnimatedBackground · InfiniteSlider · Highlight (effect/*, effect/*)",—,"pointer-tracked washes and loops, decorative only, never on data"
-dynamic-toolbar,motion,ToolbarDynamic (effect/toolbar-dynamic),—,"toolbar expanding to contextual actions"
+dynamic-toolbar,motion,,—,"toolbar expanding to contextual actions"
 utility-hooks,hooks,"useClickOutside · useFileUpload · useMediaQuery · useIsMobile (lib/*)",—,"outside-click, file-upload state, matchMedia boolean, <768px boolean"
 class-merge,utils,cn (lib/utils),cn,"clsx + tailwind-merge"
-formatting-utils,utils,"formatDate (lib/format) · generateId (lib/id) · getErrorMessage (lib/handle-error)",—,"Intl date formatting, nanoid ids, error-to-message normalization"
+formatting-utils,utils,"formatDate (lib/format) · generateId (lib/id) · formatRelativeTime (lib/time)",—,"Intl date formatting, nanoid ids, relative-time strings"
 composition-utils,utils,"getStrictContext (lib/get-strict-context) · composeRefs (lib/compose-refs)",—,"throwing Provider/hook pair, ref composition"
 ```

package/package.json

@@ -1,6 +1,6 @@
 {
   "name": "@nurix/etna",
-  "version": "0.20.22",
+  "version": "0.20.24",
   "description": "Bootstrap a project with a Nurix harness — copies the harness's CLAUDE.md, skills, agents, rules, and hooks directly into the project from a bundled payload (no marketplace fetch, no network).",
   "type": "module",
   "bin": {
@@ -42,5 +42,5 @@
     "agent",
     "plugin"
   ],
-  "etnaFingerprint": "e02eaf6819db"
+  "etnaFingerprint": "73da5d8c28fc"
 }