@osfactory/har 0.6.0 → 0.7.0

package/dist/index.js

@@ -765,14 +765,14 @@ var require_url_state_machine = __commonJS({
       return url.replace(/\u0009|\u000A|\u000D/g, "");
     }
     function shortenPath(url) {
-      const path32 = url.path;
-      if (path32.length === 0) {
+      const path37 = url.path;
+      if (path37.length === 0) {
         return;
       }
-      if (url.scheme === "file" && path32.length === 1 && isNormalizedWindowsDriveLetter(path32[0])) {
+      if (url.scheme === "file" && path37.length === 1 && isNormalizedWindowsDriveLetter(path37[0])) {
         return;
       }
-      path32.pop();
+      path37.pop();
     }
     function includesCredentials(url) {
       return url.username !== "" || url.password !== "";
@@ -2092,7 +2092,7 @@ var require_lib2 = __commonJS({
       let accum = [];
       let accumBytes = 0;
       let abort = false;
-      return new Body.Promise(function(resolve24, reject) {
+      return new Body.Promise(function(resolve26, reject) {
         let resTimeout;
         if (_this4.timeout) {
           resTimeout = setTimeout(function() {
@@ -2126,7 +2126,7 @@ var require_lib2 = __commonJS({
           }
           clearTimeout(resTimeout);
           try {
-            resolve24(Buffer.concat(accum, accumBytes));
+            resolve26(Buffer.concat(accum, accumBytes));
           } catch (err) {
             reject(new FetchError(`Could not create Buffer from response body for ${_this4.url}: ${err.message}`, "system", err));
           }
@@ -2801,7 +2801,7 @@ var require_lib2 = __commonJS({
         throw new Error("native promise missing, set fetch.Promise to your favorite alternative");
       }
       Body.Promise = fetch3.Promise;
-      return new fetch3.Promise(function(resolve24, reject) {
+      return new fetch3.Promise(function(resolve26, reject) {
         const request = new Request3(url, opts);
         const options = getNodeRequestOptions(request);
         const send = (options.protocol === "https:" ? https : http).request;
@@ -2934,7 +2934,7 @@ var require_lib2 = __commonJS({
                   requestOpts.body = void 0;
                   requestOpts.headers.delete("content-length");
                 }
-                resolve24(fetch3(new Request3(locationURL, requestOpts)));
+                resolve26(fetch3(new Request3(locationURL, requestOpts)));
                 finalize();
                 return;
             }
@@ -2955,7 +2955,7 @@ var require_lib2 = __commonJS({
           const codings = headers.get("Content-Encoding");
           if (!request.compress || request.method === "HEAD" || codings === null || res.statusCode === 204 || res.statusCode === 304) {
             response = new Response3(body, response_options);
-            resolve24(response);
+            resolve26(response);
             return;
           }
           const zlibOptions = {
@@ -2965,7 +2965,7 @@ var require_lib2 = __commonJS({
           if (codings == "gzip" || codings == "x-gzip") {
             body = body.pipe(zlib.createGunzip(zlibOptions));
             response = new Response3(body, response_options);
-            resolve24(response);
+            resolve26(response);
             return;
           }
           if (codings == "deflate" || codings == "x-deflate") {
@@ -2977,12 +2977,12 @@ var require_lib2 = __commonJS({
                 body = body.pipe(zlib.createInflateRaw());
               }
               response = new Response3(body, response_options);
-              resolve24(response);
+              resolve26(response);
             });
             raw.on("end", function() {
               if (!response) {
                 response = new Response3(body, response_options);
-                resolve24(response);
+                resolve26(response);
               }
             });
             return;
@@ -2990,11 +2990,11 @@ var require_lib2 = __commonJS({
           if (codings == "br" && typeof zlib.createBrotliDecompress === "function") {
             body = body.pipe(zlib.createBrotliDecompress());
             response = new Response3(body, response_options);
-            resolve24(response);
+            resolve26(response);
             return;
           }
           response = new Response3(body, response_options);
-          resolve24(response);
+          resolve26(response);
         });
         writeToStream(req, request);
       });
@@ -6351,14 +6351,14 @@ __export(fileFromPath_exports, {
   fileFromPathSync: () => fileFromPathSync,
   isFile: () => isFile
 });
-function createFileFromPath(path32, { mtimeMs, size }, filenameOrOptions, options = {}) {
+function createFileFromPath(path37, { mtimeMs, size }, filenameOrOptions, options = {}) {
   let filename;
   if (isPlainObject_default2(filenameOrOptions)) {
     [options, filename] = [filenameOrOptions, void 0];
   } else {
     filename = filenameOrOptions;
   }
-  const file = new FileFromPath({ path: path32, size, lastModified: mtimeMs });
+  const file = new FileFromPath({ path: path37, size, lastModified: mtimeMs });
   if (!filename) {
     filename = file.name;
   }
@@ -6367,13 +6367,13 @@ function createFileFromPath(path32, { mtimeMs, size }, filenameOrOptions, option
     lastModified: file.lastModified
   });
 }
-function fileFromPathSync(path32, filenameOrOptions, options = {}) {
-  const stats = (0, import_fs5.statSync)(path32);
-  return createFileFromPath(path32, stats, filenameOrOptions, options);
+function fileFromPathSync(path37, filenameOrOptions, options = {}) {
+  const stats = (0, import_fs5.statSync)(path37);
+  return createFileFromPath(path37, stats, filenameOrOptions, options);
 }
-async function fileFromPath2(path32, filenameOrOptions, options) {
-  const stats = await import_fs5.promises.stat(path32);
-  return createFileFromPath(path32, stats, filenameOrOptions, options);
+async function fileFromPath2(path37, filenameOrOptions, options) {
+  const stats = await import_fs5.promises.stat(path37);
+  return createFileFromPath(path37, stats, filenameOrOptions, options);
 }
 var import_fs5, import_path5, import_node_domexception, __classPrivateFieldSet5, __classPrivateFieldGet6, _FileFromPath_path, _FileFromPath_start, MESSAGE, FileFromPath;
 var init_fileFromPath = __esm({
@@ -9384,7 +9384,7 @@ var require_compile = __commonJS({
       const schOrFunc = root.refs[ref];
       if (schOrFunc)
         return schOrFunc;
-      let _sch = resolve24.call(this, root, ref);
+      let _sch = resolve26.call(this, root, ref);
       if (_sch === void 0) {
         const schema = (_a3 = root.localRefs) === null || _a3 === void 0 ? void 0 : _a3[ref];
         const { schemaId } = this.opts;
@@ -9411,7 +9411,7 @@ var require_compile = __commonJS({
     function sameSchemaEnv(s1, s2) {
       return s1.schema === s2.schema && s1.root === s2.root && s1.baseId === s2.baseId;
     }
-    function resolve24(root, ref) {
+    function resolve26(root, ref) {
       let sch;
       while (typeof (sch = this.refs[ref]) == "string")
         ref = sch;
@@ -9629,8 +9629,8 @@ var require_utils2 = __commonJS({
       }
       return ind;
     }
-    function removeDotSegments(path32) {
-      let input = path32;
+    function removeDotSegments(path37) {
+      let input = path37;
       const output = [];
       let nextSlash = -1;
       let len = 0;
@@ -9882,8 +9882,8 @@ var require_schemes = __commonJS({
         wsComponent.secure = void 0;
       }
       if (wsComponent.resourceName) {
-        const [path32, query] = wsComponent.resourceName.split("?");
-        wsComponent.path = path32 && path32 !== "/" ? path32 : void 0;
+        const [path37, query] = wsComponent.resourceName.split("?");
+        wsComponent.path = path37 && path37 !== "/" ? path37 : void 0;
         wsComponent.query = query;
         wsComponent.resourceName = void 0;
       }
@@ -10042,7 +10042,7 @@ var require_fast_uri = __commonJS({
       }
       return uri;
     }
-    function resolve24(baseURI, relativeURI, options) {
+    function resolve26(baseURI, relativeURI, options) {
       const schemelessOptions = options ? Object.assign({ scheme: "null" }, options) : { scheme: "null" };
       const resolved = resolveComponent(parse4(baseURI, schemelessOptions), parse4(relativeURI, schemelessOptions), schemelessOptions, true);
       schemelessOptions.skipEscape = true;
@@ -10300,7 +10300,7 @@ var require_fast_uri = __commonJS({
     var fastUri = {
       SCHEMES,
       normalize: normalize3,
-      resolve: resolve24,
+      resolve: resolve26,
       resolveComponent,
       equal,
       serialize,
@@ -13276,12 +13276,12 @@ var require_dist = __commonJS({
         throw new Error(`Unknown format "${name}"`);
       return f2;
     };
-    function addFormats(ajv, list, fs28, exportName) {
+    function addFormats(ajv, list, fs32, exportName) {
       var _a3;
       var _b2;
       (_a3 = (_b2 = ajv.opts.code).formats) !== null && _a3 !== void 0 ? _a3 : _b2.formats = (0, codegen_1._)`require("ajv-formats/dist/formats").${exportName}`;
       for (const f2 of list)
-        ajv.addFormat(f2, fs28[f2]);
+        ajv.addFormat(f2, fs32[f2]);
     }
     module2.exports = exports2 = formatsPlugin;
     Object.defineProperty(exports2, "__esModule", { value: true });
@@ -14565,11 +14565,11 @@ var parser = new YargsParser({
   resolve: import_path2.resolve,
   // TODO: figure  out a  way to combine ESM and CJS coverage, such  that
   // we can exercise all the lines below:
-  require: (path32) => {
+  require: (path37) => {
     if (typeof require !== "undefined") {
-      return require(path32);
-    } else if (path32.match(/\.json$/)) {
-      return JSON.parse((0, import_fs2.readFileSync)(path32, "utf8"));
+      return require(path37);
+    } else if (path37.match(/\.json$/)) {
+      return JSON.parse((0, import_fs2.readFileSync)(path37, "utf8"));
     } else {
       throw Error("only .json config files are supported in ESM");
     }
@@ -17095,12 +17095,12 @@ var YargsInstance = class {
   async getCompletion(args, done) {
     argsert("<array> [function]", [args, done], arguments.length);
     if (!done) {
-      return new Promise((resolve24, reject) => {
+      return new Promise((resolve26, reject) => {
         __classPrivateFieldGet(this, _YargsInstance_completion, "f").getCompletion(args, (err, completions) => {
           if (err)
             reject(err);
           else
-            resolve24(completions);
+            resolve26(completions);
         });
       });
     } else {
@@ -18139,26 +18139,45 @@ function isYargsInstance(y2) {
 var Yargs = YargsFactory(esm_default);
 var yargs_default = Yargs;
 
+// src/core/package-version.ts
+var fs = __toESM(require("fs"));
+var path = __toESM(require("path"));
+function getHarPackageVersion() {
+  if (process.env.HAR_PACKAGE_VERSION) {
+    return process.env.HAR_PACKAGE_VERSION;
+  }
+  const candidates = [
+    path.resolve(__dirname, "..", "package.json"),
+    path.resolve(__dirname, "..", "..", "package.json")
+  ];
+  for (const packageJsonPath of candidates) {
+    if (!fs.existsSync(packageJsonPath)) continue;
+    const pkg = JSON.parse(fs.readFileSync(packageJsonPath, "utf8"));
+    return pkg.version;
+  }
+  throw new Error("Could not resolve @osfactory/har package.json for version lookup");
+}
+
 // src/cli/commands/env.ts
-var path25 = __toESM(require("path"));
+var path31 = __toESM(require("path"));
 
 // src/core/harness.ts
-var fs16 = __toESM(require("fs"));
-var path14 = __toESM(require("path"));
+var fs18 = __toESM(require("fs"));
+var path16 = __toESM(require("path"));
 
 // src/harness/generator.ts
-var fs5 = __toESM(require("fs"));
-var path5 = __toESM(require("path"));
+var fs6 = __toESM(require("fs"));
+var path6 = __toESM(require("path"));
 
 // src/utils/file-ops.ts
-var fs = __toESM(require("fs"));
-var path = __toESM(require("path"));
+var fs2 = __toESM(require("fs"));
+var path2 = __toESM(require("path"));
 function readFile(filePath, maxChars = 8e3) {
-  if (!fs.existsSync(filePath)) return `[file not found: ${filePath}]`;
-  if (fs.statSync(filePath).isDirectory()) {
+  if (!fs2.existsSync(filePath)) return `[file not found: ${filePath}]`;
+  if (fs2.statSync(filePath).isDirectory()) {
     return `[path is a directory, not a file: ${filePath}. Use listDir instead.]`;
   }
-  const content = fs.readFileSync(filePath, "utf8");
+  const content = fs2.readFileSync(filePath, "utf8");
   if (content.length > maxChars) {
     return content.slice(0, maxChars) + `
 ... [truncated at ${maxChars} chars]`;
@@ -18166,8 +18185,8 @@ function readFile(filePath, maxChars = 8e3) {
   return content;
 }
 function listDir(dirPath, maxFiles = 60) {
-  if (!fs.existsSync(dirPath)) return [];
-  const entries = fs.readdirSync(dirPath, { withFileTypes: true });
+  if (!fs2.existsSync(dirPath)) return [];
+  const entries = fs2.readdirSync(dirPath, { withFileTypes: true });
   const result = [];
   for (const entry of entries.slice(0, maxFiles)) {
     const name = entry.isDirectory() ? entry.name + "/" : entry.name;
@@ -18176,30 +18195,30 @@ function listDir(dirPath, maxFiles = 60) {
   return result;
 }
 function writeFileSafe(filePath, content) {
-  fs.mkdirSync(path.dirname(filePath), { recursive: true });
-  fs.writeFileSync(filePath, content);
+  fs2.mkdirSync(path2.dirname(filePath), { recursive: true });
+  fs2.writeFileSync(filePath, content);
 }
 function copyDirRecursive(srcDir, destDir) {
-  fs.mkdirSync(destDir, { recursive: true });
-  for (const entry of fs.readdirSync(srcDir, { withFileTypes: true })) {
-    const srcPath = path.join(srcDir, entry.name);
-    const destPath = path.join(destDir, entry.name);
+  fs2.mkdirSync(destDir, { recursive: true });
+  for (const entry of fs2.readdirSync(srcDir, { withFileTypes: true })) {
+    const srcPath = path2.join(srcDir, entry.name);
+    const destPath = path2.join(destDir, entry.name);
     if (entry.isDirectory()) {
       copyDirRecursive(srcPath, destPath);
     } else {
-      fs.mkdirSync(path.dirname(destPath), { recursive: true });
-      fs.copyFileSync(srcPath, destPath);
+      fs2.mkdirSync(path2.dirname(destPath), { recursive: true });
+      fs2.copyFileSync(srcPath, destPath);
       if (entry.name.endsWith(".sh")) {
-        fs.chmodSync(destPath, 493);
+        fs2.chmodSync(destPath, 493);
       }
     }
   }
 }
 function resolveSafePath(baseDir, relativePath) {
-  const normalized = path.normalize(relativePath).replace(/^(\.\.(\/|\\|$))+/, "");
-  const resolved = path.resolve(baseDir, normalized);
-  const base = path.resolve(baseDir);
-  if (!resolved.startsWith(base + path.sep) && resolved !== base) {
+  const normalized = path2.normalize(relativePath).replace(/^(\.\.(\/|\\|$))+/, "");
+  const resolved = path2.resolve(baseDir, normalized);
+  const base = path2.resolve(baseDir);
+  if (!resolved.startsWith(base + path2.sep) && resolved !== base) {
     throw new Error(`Path escapes harness directory: ${relativePath}`);
   }
   return resolved;
@@ -18721,45 +18740,45 @@ function divider() {
 }
 
 // src/utils/paths.ts
-var fs2 = __toESM(require("fs"));
-var path2 = __toESM(require("path"));
+var fs3 = __toESM(require("fs"));
+var path3 = __toESM(require("path"));
 function resolveTemplatesDir() {
   const candidates = [
-    path2.join(__dirname, "templates"),
-    path2.join(__dirname, "..", "templates"),
-    path2.join(__dirname, "..", "harness", "templates")
+    path3.join(__dirname, "templates"),
+    path3.join(__dirname, "..", "templates"),
+    path3.join(__dirname, "..", "harness", "templates")
   ];
   for (const dir of candidates) {
-    if (fs2.existsSync(path2.join(dir, "har-boilerplate"))) return dir;
+    if (fs3.existsSync(path3.join(dir, "har-boilerplate"))) return dir;
   }
   throw new Error("Templates directory not found. Run npm run build.");
 }
 function resolvePromptPath(name) {
   const candidates = [
-    path2.join(__dirname, "prompts", name),
-    path2.join(__dirname, "..", "llm", "prompts", name)
+    path3.join(__dirname, "prompts", name),
+    path3.join(__dirname, "..", "llm", "prompts", name)
   ];
   for (const p2 of candidates) {
-    if (fs2.existsSync(p2)) return p2;
+    if (fs3.existsSync(p2)) return p2;
   }
   return candidates[0];
 }
 function resolveTemplateFile(name) {
   const dir = resolveTemplatesDir();
-  const filePath = path2.join(dir, name);
-  return fs2.existsSync(filePath) ? filePath : null;
+  const filePath = path3.join(dir, name);
+  return fs3.existsSync(filePath) ? filePath : null;
 }
 
 // src/core/gitignore.ts
-var fs3 = __toESM(require("fs"));
-var path3 = __toESM(require("path"));
+var fs4 = __toESM(require("fs"));
+var path4 = __toESM(require("path"));
 var HARNESS_ROOT_GITIGNORE_PATTERNS = [
   ".env.agent.*",
   "ecosystem.agent.*.config.cjs"
 ];
 function ensureRootGitignorePatterns(checkoutDir) {
-  const gitignorePath = path3.join(checkoutDir, ".gitignore");
-  const content = fs3.existsSync(gitignorePath) ? fs3.readFileSync(gitignorePath, "utf8") : "";
+  const gitignorePath = path4.join(checkoutDir, ".gitignore");
+  const content = fs4.existsSync(gitignorePath) ? fs4.readFileSync(gitignorePath, "utf8") : "";
   const lines = content.split("\n").map((line) => line.trim());
   const missing = HARNESS_ROOT_GITIGNORE_PATTERNS.filter((pattern) => !lines.includes(pattern));
   if (missing.length === 0) return;
@@ -18768,13 +18787,13 @@ function ensureRootGitignorePatterns(checkoutDir) {
   const block = lines.some((line) => line.includes("HAR agent slot artifacts")) || header2.length === 0 ? `${missing.join("\n")}
 ` : `${header2}${missing.join("\n")}
 `;
-  fs3.writeFileSync(gitignorePath, `${content}${suffix}${block}`);
+  fs4.writeFileSync(gitignorePath, `${content}${suffix}${block}`);
 }
 
 // src/harness/manifest.ts
 var crypto = __toESM(require("crypto"));
-var fs4 = __toESM(require("fs"));
-var path4 = __toESM(require("path"));
+var fs5 = __toESM(require("fs"));
+var path5 = __toESM(require("path"));
 
 // node_modules/zod/v3/external.js
 var external_exports = {};
@@ -19254,8 +19273,8 @@ function getErrorMap() {
 
 // node_modules/zod/v3/helpers/parseUtil.js
 var makeIssue = (params) => {
-  const { data, path: path32, errorMaps, issueData } = params;
-  const fullPath = [...path32, ...issueData.path || []];
+  const { data, path: path37, errorMaps, issueData } = params;
+  const fullPath = [...path37, ...issueData.path || []];
   const fullIssue = {
     ...issueData,
     path: fullPath
@@ -19371,11 +19390,11 @@ var errorUtil;
 
 // node_modules/zod/v3/types.js
 var ParseInputLazyPath = class {
-  constructor(parent, value, path32, key) {
+  constructor(parent, value, path37, key) {
     this._cachedPath = [];
     this.parent = parent;
     this.data = value;
-    this._path = path32;
+    this._path = path37;
     this._key = key;
   }
   get path() {
@@ -22999,6 +23018,22 @@ var AgentSlotHarnessUsageSchema = external_exports.enum([
   "none",
   "bypass_warning"
 ]);
+var PreflightBlockerSchema = external_exports.object({
+  code: external_exports.string(),
+  message: external_exports.string(),
+  remediation: external_exports.string().optional(),
+  details: external_exports.record(external_exports.unknown()).optional()
+});
+var SlotReadinessSchema = external_exports.object({
+  canLaunch: external_exports.boolean(),
+  verdict: external_exports.enum(["ready", "blocked"]),
+  blockers: external_exports.array(PreflightBlockerSchema),
+  remediations: external_exports.array(external_exports.string()),
+  ports: external_exports.record(external_exports.number()).optional(),
+  allocatedPorts: external_exports.boolean().optional(),
+  /** Non-blocking notices (e.g. har control up holds the default port but an alternate was picked). */
+  warnings: external_exports.array(external_exports.string()).optional()
+});
 var AgentSlotStatusSchema = external_exports.object({
   agentId: external_exports.number().int().min(HAR_AGENT_SLOT_MIN),
   active: external_exports.boolean(),
@@ -23019,6 +23054,8 @@ var AgentSlotStatusSchema = external_exports.object({
   purpose: external_exports.string().optional(),
   sessionStatus: external_exports.enum(["starting", "active", "failed", "completed"]).optional(),
   lastError: external_exports.string().optional(),
+  /** Set when a failed/starting session can be resumed without --replace. */
+  resumeHint: external_exports.string().optional(),
   /** Worktree checked out to no branch (legacy failure mode; should not happen with sessions). */
   detachedHead: external_exports.boolean().optional(),
   /** Worktree has uncommitted changes. */
@@ -23027,7 +23064,13 @@ var AgentSlotStatusSchema = external_exports.object({
   ahead: external_exports.number().int().optional(),
   /** Main checkout has commits the session base doesn't (worktree serves stale code). */
   behind: external_exports.number().int().optional(),
-  stale: external_exports.boolean().optional()
+  stale: external_exports.boolean().optional(),
+  /** Persisted host ports from the slot registry (when dynamically allocated). */
+  ports: external_exports.record(external_exports.number()).optional(),
+  /** PM2 namespace mismatch — foreign or legacy processes for this slot id. */
+  pm2Issue: external_exports.enum(["foreign_pm2", "registry_missing", "project_mismatch"]).optional(),
+  /** Launch readiness slice — same core as `har env preflight`. */
+  readiness: SlotReadinessSchema.optional()
 });
 var EnvironmentStatusSchema = external_exports.object({
   repoPath: external_exports.string(),
@@ -23081,17 +23124,22 @@ var SyncValidationsInputSchema = external_exports.object({
 var GENERATOR_VERSION = "0.4.0";
 var MANIFEST_VERSION = "1";
 var DEFAULT_HAR_DIR = ".har";
-var CHECKSUM_SKIP = /* @__PURE__ */ new Set(["manifest.json", "AGENT.md.proposed", "AGENT.md.proposed.meta.json"]);
+var CHECKSUM_SKIP = /* @__PURE__ */ new Set([
+  "manifest.json",
+  "AGENT.md.proposed",
+  "AGENT.md.proposed.meta.json",
+  "ADAPT-PROMPT.md"
+]);
 function getHarnessDir(repoPath) {
-  return path4.join(repoPath, DEFAULT_HAR_DIR);
+  return path5.join(repoPath, DEFAULT_HAR_DIR);
 }
 function getManifestPath(repoPath) {
-  return path4.join(getHarnessDir(repoPath), "manifest.json");
+  return path5.join(getHarnessDir(repoPath), "manifest.json");
 }
 function readManifest(repoPath) {
   const manifestPath = getManifestPath(repoPath);
-  if (!fs4.existsSync(manifestPath)) return null;
-  const raw = JSON.parse(fs4.readFileSync(manifestPath, "utf8"));
+  if (!fs5.existsSync(manifestPath)) return null;
+  const raw = JSON.parse(fs5.readFileSync(manifestPath, "utf8"));
   const result = HarnessManifestSchema.safeParse(raw);
   return result.success ? result.data : null;
 }
@@ -23104,11 +23152,11 @@ function computeFileChecksum(content) {
 }
 function computeHarnessChecksums(harnessDir) {
   const checksums = {};
-  if (!fs4.existsSync(harnessDir)) return checksums;
-  for (const entry of fs4.readdirSync(harnessDir, { withFileTypes: true })) {
+  if (!fs5.existsSync(harnessDir)) return checksums;
+  for (const entry of fs5.readdirSync(harnessDir, { withFileTypes: true })) {
     if (!entry.isFile() || CHECKSUM_SKIP.has(entry.name)) continue;
-    const full = path4.join(harnessDir, entry.name);
-    checksums[entry.name] = computeFileChecksum(fs4.readFileSync(full, "utf8"));
+    const full = path5.join(harnessDir, entry.name);
+    checksums[entry.name] = computeFileChecksum(fs5.readFileSync(full, "utf8"));
   }
   return checksums;
 }
@@ -23128,17 +23176,17 @@ function createManifest(repoPath, adaptationSummary, stack, profile) {
   };
 }
 function resolveHarnessRoot(inputPath) {
-  let current = path4.resolve(inputPath);
-  const { root } = path4.parse(current);
+  let current = path5.resolve(inputPath);
+  const { root } = path5.parse(current);
   for (; ; ) {
-    const manifestPath = path4.join(current, DEFAULT_HAR_DIR, "manifest.json");
-    if (fs4.existsSync(manifestPath)) {
+    const manifestPath = path5.join(current, DEFAULT_HAR_DIR, "manifest.json");
+    if (fs5.existsSync(manifestPath)) {
       return current;
     }
     if (current === root) break;
-    current = path4.dirname(current);
+    current = path5.dirname(current);
   }
-  return path4.resolve(inputPath);
+  return path5.resolve(inputPath);
 }
 
 // src/harness/generator.ts
@@ -23154,46 +23202,46 @@ var CLI_PRUNE_FILES = [
 ];
 function pruneCliProfile(harnessDir) {
   for (const file of CLI_PRUNE_FILES) {
-    const filePath = path5.join(harnessDir, file);
-    if (fs5.existsSync(filePath)) {
-      fs5.unlinkSync(filePath);
+    const filePath = path6.join(harnessDir, file);
+    if (fs6.existsSync(filePath)) {
+      fs6.unlinkSync(filePath);
     }
   }
 }
 function scaffoldClaudeMd(repoPath, projectName, force) {
   const templatePath = resolveTemplateFile("CLAUDE.md.template");
   if (!templatePath) return;
-  const dest = path5.join(repoPath, "CLAUDE.md");
-  if (fs5.existsSync(dest) && !force) return;
+  const dest = path6.join(repoPath, "CLAUDE.md");
+  if (fs6.existsSync(dest) && !force) return;
   const displayName = projectName.replace(/_/g, " ");
-  const content = fs5.readFileSync(templatePath, "utf8").replace(/__PROJECT_DISPLAY_NAME__/g, displayName);
-  fs5.writeFileSync(dest, content);
+  const content = fs6.readFileSync(templatePath, "utf8").replace(/__PROJECT_DISPLAY_NAME__/g, displayName);
+  fs6.writeFileSync(dest, content);
 }
 function scaffoldHarnessBoilerplate(repoPath, options = {}) {
-  const harnessDir = path5.join(repoPath, DEFAULT_HAR_DIR);
-  const projectName = path5.basename(repoPath).toLowerCase().replace(/[^a-z0-9]/g, "_");
+  const harnessDir = path6.join(repoPath, DEFAULT_HAR_DIR);
+  const projectName = path6.basename(repoPath).toLowerCase().replace(/[^a-z0-9]/g, "_");
   const profile = options.profile ?? "default";
-  const boilerplateDir = path5.join(resolveTemplatesDir(), PROFILE_DIRS[profile]);
-  if (fs5.existsSync(harnessDir) && !options.force) {
+  const boilerplateDir = path6.join(resolveTemplatesDir(), PROFILE_DIRS[profile]);
+  if (fs6.existsSync(harnessDir) && !options.force) {
     throw new Error(
       '.har/ already exists. Use --force to overwrite or run "har env maintain" to update in place.'
     );
   }
-  if (!fs5.existsSync(boilerplateDir)) {
+  if (!fs6.existsSync(boilerplateDir)) {
     throw new Error(`Boilerplate template not found at ${boilerplateDir}`);
   }
-  if (options.force && fs5.existsSync(harnessDir)) {
-    fs5.rmSync(harnessDir, { recursive: true, force: true });
+  if (options.force && fs6.existsSync(harnessDir)) {
+    fs6.rmSync(harnessDir, { recursive: true, force: true });
   }
   copyDirRecursive(boilerplateDir, harnessDir);
   if (profile === "cli") {
     pruneCliProfile(harnessDir);
   }
-  const harnessEnvPath = path5.join(harnessDir, "harness.env");
-  if (fs5.existsSync(harnessEnvPath)) {
-    let content = fs5.readFileSync(harnessEnvPath, "utf8");
+  const harnessEnvPath = path6.join(harnessDir, "harness.env");
+  if (fs6.existsSync(harnessEnvPath)) {
+    let content = fs6.readFileSync(harnessEnvPath, "utf8");
     content = content.replace(/__PROJECT_NAME__/g, projectName).replace(/template___PROJECT_NAME__/g, `template_${projectName}`);
-    fs5.writeFileSync(harnessEnvPath, content);
+    fs6.writeFileSync(harnessEnvPath, content);
   }
   const manifest = createManifest(
     repoPath,
@@ -23216,8 +23264,8 @@ function finalizeHarness(repoPath, adaptationSummary, stack) {
 }
 
 // src/llm/authoring-agent.ts
-var fs9 = __toESM(require("fs"));
-var path8 = __toESM(require("path"));
+var fs10 = __toESM(require("fs"));
+var path9 = __toESM(require("path"));
 
 // node_modules/@anthropic-ai/sdk/error.mjs
 var error_exports = {};
@@ -23616,13 +23664,13 @@ var MultipartBody = class {
 // node_modules/@anthropic-ai/sdk/_shims/node-runtime.mjs
 var import_web = require("node:stream/web");
 var fileFromPathWarned = false;
-async function fileFromPath3(path32, ...args) {
+async function fileFromPath3(path37, ...args) {
   const { fileFromPath: _fileFromPath } = await Promise.resolve().then(() => (init_fileFromPath(), fileFromPath_exports));
   if (!fileFromPathWarned) {
-    console.warn(`fileFromPath is deprecated; use fs.createReadStream(${JSON.stringify(path32)}) instead`);
+    console.warn(`fileFromPath is deprecated; use fs.createReadStream(${JSON.stringify(path37)}) instead`);
     fileFromPathWarned = true;
   }
-  return await _fileFromPath(path32, ...args);
+  return await _fileFromPath(path37, ...args);
 }
 var defaultHttpAgent = new import_agentkeepalive.default({ keepAlive: true, timeout: 5 * 60 * 1e3 });
 var defaultHttpsAgent = new import_agentkeepalive.default.HttpsAgent({ keepAlive: true, timeout: 5 * 60 * 1e3 });
@@ -24118,8 +24166,8 @@ async function defaultParseResponse(props) {
 }
 var APIPromise = class _APIPromise extends Promise {
   constructor(responsePromise, parseResponse = defaultParseResponse) {
-    super((resolve24) => {
-      resolve24(null);
+    super((resolve26) => {
+      resolve26(null);
     });
     this.responsePromise = responsePromise;
     this.parseResponse = parseResponse;
@@ -24219,29 +24267,29 @@ var APIClient = class {
   defaultIdempotencyKey() {
     return `stainless-node-retry-${uuid4()}`;
   }
-  get(path32, opts) {
-    return this.methodRequest("get", path32, opts);
+  get(path37, opts) {
+    return this.methodRequest("get", path37, opts);
   }
-  post(path32, opts) {
-    return this.methodRequest("post", path32, opts);
+  post(path37, opts) {
+    return this.methodRequest("post", path37, opts);
   }
-  patch(path32, opts) {
-    return this.methodRequest("patch", path32, opts);
+  patch(path37, opts) {
+    return this.methodRequest("patch", path37, opts);
   }
-  put(path32, opts) {
-    return this.methodRequest("put", path32, opts);
+  put(path37, opts) {
+    return this.methodRequest("put", path37, opts);
   }
-  delete(path32, opts) {
-    return this.methodRequest("delete", path32, opts);
+  delete(path37, opts) {
+    return this.methodRequest("delete", path37, opts);
   }
-  methodRequest(method, path32, opts) {
+  methodRequest(method, path37, opts) {
     return this.request(Promise.resolve(opts).then(async (opts2) => {
       const body = opts2 && isBlobLike(opts2?.body) ? new DataView(await opts2.body.arrayBuffer()) : opts2?.body instanceof DataView ? opts2.body : opts2?.body instanceof ArrayBuffer ? new DataView(opts2.body) : opts2 && ArrayBuffer.isView(opts2?.body) ? new DataView(opts2.body.buffer) : opts2?.body;
-      return { method, path: path32, ...opts2, body };
+      return { method, path: path37, ...opts2, body };
     }));
   }
-  getAPIList(path32, Page, opts) {
-    return this.requestAPIList(Page, { method: "get", path: path32, ...opts });
+  getAPIList(path37, Page, opts) {
+    return this.requestAPIList(Page, { method: "get", path: path37, ...opts });
   }
   calculateContentLength(body) {
     if (typeof body === "string") {
@@ -24259,10 +24307,10 @@ var APIClient = class {
     return null;
   }
   buildRequest(options) {
-    const { method, path: path32, query, headers = {} } = options;
+    const { method, path: path37, query, headers = {} } = options;
     const body = ArrayBuffer.isView(options.body) || options.__binaryRequest && typeof options.body === "string" ? options.body : isMultipartBody(options.body) ? options.body.body : options.body ? JSON.stringify(options.body, null, 2) : null;
     const contentLength = this.calculateContentLength(body);
-    const url = this.buildURL(path32, query);
+    const url = this.buildURL(path37, query);
     if ("timeout" in options)
       validatePositiveInteger("timeout", options.timeout);
     const timeout = options.timeout ?? this.timeout;
@@ -24371,8 +24419,8 @@ var APIClient = class {
     const request = this.makeRequest(options, null);
     return new PagePromise(this, request, Page);
   }
-  buildURL(path32, query) {
-    const url = isAbsoluteURL(path32) ? new URL(path32) : new URL(this.baseURL + (this.baseURL.endsWith("/") && path32.startsWith("/") ? path32.slice(1) : path32));
+  buildURL(path37, query) {
+    const url = isAbsoluteURL(path37) ? new URL(path37) : new URL(this.baseURL + (this.baseURL.endsWith("/") && path37.startsWith("/") ? path37.slice(1) : path37));
     const defaultQuery = this.defaultQuery();
     if (!isEmptyObj(defaultQuery)) {
       query = { ...defaultQuery, ...query };
@@ -24657,7 +24705,7 @@ var startsWithSchemeRegexp = new RegExp("^(?:[a-z]+:)?//", "i");
 var isAbsoluteURL = (url) => {
   return startsWithSchemeRegexp.test(url);
 };
-var sleep = (ms) => new Promise((resolve24) => setTimeout(resolve24, ms));
+var sleep = (ms) => new Promise((resolve26) => setTimeout(resolve26, ms));
 var validatePositiveInteger = (name, n2) => {
   if (typeof n2 !== "number" || !Number.isInteger(n2)) {
     throw new AnthropicError(`${name} must be an integer`);
@@ -25148,12 +25196,12 @@ var PromptCachingBetaMessageStream = class _PromptCachingBetaMessageStream {
       }
       return this._emit("error", new AnthropicError(String(error3)));
     });
-    __classPrivateFieldSet7(this, _PromptCachingBetaMessageStream_connectedPromise, new Promise((resolve24, reject) => {
-      __classPrivateFieldSet7(this, _PromptCachingBetaMessageStream_resolveConnectedPromise, resolve24, "f");
+    __classPrivateFieldSet7(this, _PromptCachingBetaMessageStream_connectedPromise, new Promise((resolve26, reject) => {
+      __classPrivateFieldSet7(this, _PromptCachingBetaMessageStream_resolveConnectedPromise, resolve26, "f");
       __classPrivateFieldSet7(this, _PromptCachingBetaMessageStream_rejectConnectedPromise, reject, "f");
     }), "f");
-    __classPrivateFieldSet7(this, _PromptCachingBetaMessageStream_endPromise, new Promise((resolve24, reject) => {
-      __classPrivateFieldSet7(this, _PromptCachingBetaMessageStream_resolveEndPromise, resolve24, "f");
+    __classPrivateFieldSet7(this, _PromptCachingBetaMessageStream_endPromise, new Promise((resolve26, reject) => {
+      __classPrivateFieldSet7(this, _PromptCachingBetaMessageStream_resolveEndPromise, resolve26, "f");
       __classPrivateFieldSet7(this, _PromptCachingBetaMessageStream_rejectEndPromise, reject, "f");
     }), "f");
     __classPrivateFieldGet8(this, _PromptCachingBetaMessageStream_connectedPromise, "f").catch(() => {
@@ -25282,11 +25330,11 @@ var PromptCachingBetaMessageStream = class _PromptCachingBetaMessageStream {
    *   const message = await stream.emitted('message') // rejects if the stream errors
    */
   emitted(event) {
-    return new Promise((resolve24, reject) => {
+    return new Promise((resolve26, reject) => {
       __classPrivateFieldSet7(this, _PromptCachingBetaMessageStream_catchingPromiseCreated, true, "f");
       if (event !== "error")
         this.once("error", reject);
-      this.once(event, resolve24);
+      this.once(event, resolve26);
     });
   }
   async done() {
@@ -25513,7 +25561,7 @@ var PromptCachingBetaMessageStream = class _PromptCachingBetaMessageStream {
           if (done) {
             return { value: void 0, done: true };
           }
-          return new Promise((resolve24, reject) => readQueue.push({ resolve: resolve24, reject })).then((chunk2) => chunk2 ? { value: chunk2, done: false } : { value: void 0, done: true });
+          return new Promise((resolve26, reject) => readQueue.push({ resolve: resolve26, reject })).then((chunk2) => chunk2 ? { value: chunk2, done: false } : { value: void 0, done: true });
         }
         const chunk = pushQueue.shift();
         return { value: chunk, done: false };
@@ -25661,12 +25709,12 @@ var MessageStream = class _MessageStream {
       }
       return this._emit("error", new AnthropicError(String(error3)));
     });
-    __classPrivateFieldSet8(this, _MessageStream_connectedPromise, new Promise((resolve24, reject) => {
-      __classPrivateFieldSet8(this, _MessageStream_resolveConnectedPromise, resolve24, "f");
+    __classPrivateFieldSet8(this, _MessageStream_connectedPromise, new Promise((resolve26, reject) => {
+      __classPrivateFieldSet8(this, _MessageStream_resolveConnectedPromise, resolve26, "f");
       __classPrivateFieldSet8(this, _MessageStream_rejectConnectedPromise, reject, "f");
     }), "f");
-    __classPrivateFieldSet8(this, _MessageStream_endPromise, new Promise((resolve24, reject) => {
-      __classPrivateFieldSet8(this, _MessageStream_resolveEndPromise, resolve24, "f");
+    __classPrivateFieldSet8(this, _MessageStream_endPromise, new Promise((resolve26, reject) => {
+      __classPrivateFieldSet8(this, _MessageStream_resolveEndPromise, resolve26, "f");
       __classPrivateFieldSet8(this, _MessageStream_rejectEndPromise, reject, "f");
     }), "f");
     __classPrivateFieldGet9(this, _MessageStream_connectedPromise, "f").catch(() => {
@@ -25795,11 +25843,11 @@ var MessageStream = class _MessageStream {
    *   const message = await stream.emitted('message') // rejects if the stream errors
    */
   emitted(event) {
-    return new Promise((resolve24, reject) => {
+    return new Promise((resolve26, reject) => {
       __classPrivateFieldSet8(this, _MessageStream_catchingPromiseCreated, true, "f");
       if (event !== "error")
         this.once("error", reject);
-      this.once(event, resolve24);
+      this.once(event, resolve26);
     });
   }
   async done() {
@@ -26026,7 +26074,7 @@ var MessageStream = class _MessageStream {
           if (done) {
             return { value: void 0, done: true };
           }
-          return new Promise((resolve24, reject) => readQueue.push({ resolve: resolve24, reject })).then((chunk2) => chunk2 ? { value: chunk2, done: false } : { value: void 0, done: true });
+          return new Promise((resolve26, reject) => readQueue.push({ resolve: resolve26, reject })).then((chunk2) => chunk2 ? { value: chunk2, done: false } : { value: void 0, done: true });
         }
         const chunk = pushQueue.shift();
         return { value: chunk, done: false };
@@ -26195,34 +26243,34 @@ var { AnthropicError: AnthropicError2, APIError: APIError2, APIConnectionError:
 var sdk_default = Anthropic;
 
 // src/llm/tools.ts
-var fs8 = __toESM(require("fs"));
-var path7 = __toESM(require("path"));
+var fs9 = __toESM(require("fs"));
+var path8 = __toESM(require("path"));
 var readline2 = __toESM(require("readline"));
 
 // src/harness/agent-md.ts
-var fs7 = __toESM(require("fs"));
-var path6 = __toESM(require("path"));
+var fs8 = __toESM(require("fs"));
+var path7 = __toESM(require("path"));
 var readline = __toESM(require("readline"));
 var AGENT_MD_PROPOSAL = "AGENT.md.proposed";
 var AGENT_MD_PROPOSAL_META = "AGENT.md.proposed.meta.json";
 function writeAgentMdProposal(repoPath, content, rationale) {
   const harnessDir = getHarnessDir(repoPath);
-  writeFileSafe(path6.join(harnessDir, AGENT_MD_PROPOSAL), content);
+  writeFileSafe(path7.join(harnessDir, AGENT_MD_PROPOSAL), content);
   writeFileSafe(
-    path6.join(harnessDir, AGENT_MD_PROPOSAL_META),
+    path7.join(harnessDir, AGENT_MD_PROPOSAL_META),
     JSON.stringify({ rationale, createdAt: (/* @__PURE__ */ new Date()).toISOString() }, null, 2) + "\n"
   );
 }
 function readAgentMdProposal(repoPath) {
   const harnessDir = getHarnessDir(repoPath);
-  const proposalPath = path6.join(harnessDir, AGENT_MD_PROPOSAL);
-  const metaPath = path6.join(harnessDir, AGENT_MD_PROPOSAL_META);
-  if (!fs7.existsSync(proposalPath)) return null;
-  const content = fs7.readFileSync(proposalPath, "utf8");
+  const proposalPath = path7.join(harnessDir, AGENT_MD_PROPOSAL);
+  const metaPath = path7.join(harnessDir, AGENT_MD_PROPOSAL_META);
+  if (!fs8.existsSync(proposalPath)) return null;
+  const content = fs8.readFileSync(proposalPath, "utf8");
   let rationale = "";
-  if (fs7.existsSync(metaPath)) {
+  if (fs8.existsSync(metaPath)) {
     try {
-      rationale = JSON.parse(fs7.readFileSync(metaPath, "utf8")).rationale ?? "";
+      rationale = JSON.parse(fs8.readFileSync(metaPath, "utf8")).rationale ?? "";
     } catch {
       rationale = "";
     }
@@ -26230,21 +26278,21 @@ function readAgentMdProposal(repoPath) {
   return {
     content,
     rationale,
-    createdAt: fs7.existsSync(metaPath) ? JSON.parse(fs7.readFileSync(metaPath, "utf8")).createdAt : (/* @__PURE__ */ new Date()).toISOString()
+    createdAt: fs8.existsSync(metaPath) ? JSON.parse(fs8.readFileSync(metaPath, "utf8")).createdAt : (/* @__PURE__ */ new Date()).toISOString()
   };
 }
 function clearAgentMdProposal(repoPath) {
   const harnessDir = getHarnessDir(repoPath);
   for (const file of [AGENT_MD_PROPOSAL, AGENT_MD_PROPOSAL_META]) {
-    const p2 = path6.join(harnessDir, file);
-    if (fs7.existsSync(p2)) fs7.unlinkSync(p2);
+    const p2 = path7.join(harnessDir, file);
+    if (fs8.existsSync(p2)) fs8.unlinkSync(p2);
   }
 }
 async function promptApplyAgentMdProposal(repoPath) {
   const proposal = readAgentMdProposal(repoPath);
   if (!proposal) return false;
-  const agentMdPath = path6.join(repoPath, "AGENT.md");
-  const exists = fs7.existsSync(agentMdPath);
+  const agentMdPath = path7.join(repoPath, "AGENT.md");
+  const exists = fs8.existsSync(agentMdPath);
   process.stderr.write("\n");
   process.stderr.write("\u2500\u2500\u2500\u2500\u2500\u2500\u2500\u2500\u2500\u2500\u2500\u2500\u2500\u2500\u2500\u2500\u2500\u2500\u2500\u2500\u2500\u2500\u2500\u2500\u2500\u2500\u2500\u2500\u2500\u2500\u2500\u2500\u2500\u2500\u2500\u2500\u2500\u2500\u2500\u2500\u2500\u2500\u2500\u2500\u2500\u2500\u2500\u2500\u2500\u2500\u2500\u2500\u2500\u2500\u2500\u2500\u2500\u2500\u2500\u2500\n");
   process.stderr.write("Proposed AGENT.md (repo root)\n");
@@ -26286,11 +26334,11 @@ async function promptApplyAgentMdProposal(repoPath) {
 }
 async function askYesNo(question) {
   const rl = readline.createInterface({ input: process.stdin, output: process.stderr });
-  return new Promise((resolve24) => {
+  return new Promise((resolve26) => {
     process.stderr.write(`${question} `);
     rl.once("line", (answer) => {
       rl.close();
-      resolve24(/^y(es)?$/i.test(answer.trim()));
+      resolve26(/^y(es)?$/i.test(answer.trim()));
     });
   });
 }
@@ -26432,13 +26480,13 @@ async function handleAuthoringToolCall(toolName, input, repoPath, harnessDir, ca
 async function executeAuthoringToolCall(toolName, input, repoPath, harnessDir, callbacks) {
   switch (toolName) {
     case "readRepoFile": {
-      const filePath = path7.join(repoPath, input.path);
+      const filePath = path8.join(repoPath, input.path);
       const content = readFile(filePath, input.maxChars ?? 8e3);
       info(`Read repo: ${input.path}`);
       return content;
     }
     case "listRepoDir": {
-      const dirPath = path7.join(repoPath, input.path ?? ".");
+      const dirPath = path8.join(repoPath, input.path ?? ".");
       const entries = listDir(dirPath, input.maxFiles ?? 60);
       info(`List repo: ${input.path} \u2192 ${entries.length} entries`);
       return entries.length > 0 ? entries.join("\n") : "(empty directory)";
@@ -26463,17 +26511,17 @@ async function executeAuthoringToolCall(toolName, input, repoPath, harnessDir, c
       const filePath = resolveSafePath(harnessDir, relPath);
       writeFileSafe(filePath, input.content);
       if (relPath.endsWith(".sh")) {
-        fs8.chmodSync(filePath, 493);
+        fs9.chmodSync(filePath, 493);
       }
       info(`Wrote harness: ${relPath}`);
       return `Written ${relPath} (${input.content.length} bytes)`;
     }
     case "editHarnessFile": {
       const filePath = resolveSafePath(harnessDir, input.path);
-      if (!fs8.existsSync(filePath)) {
+      if (!fs9.existsSync(filePath)) {
         return `Error: file not found: ${input.path}`;
       }
-      const content = fs8.readFileSync(filePath, "utf8");
+      const content = fs9.readFileSync(filePath, "utf8");
       const oldStr = input.old_string;
       const newStr = input.new_string;
       const count = content.split(oldStr).length - 1;
@@ -26490,10 +26538,10 @@ async function executeAuthoringToolCall(toolName, input, repoPath, harnessDir, c
     }
     case "deleteHarnessFile": {
       const filePath = resolveSafePath(harnessDir, input.path);
-      if (!fs8.existsSync(filePath)) {
+      if (!fs9.existsSync(filePath)) {
         return `File not found (already deleted): ${input.path}`;
       }
-      fs8.unlinkSync(filePath);
+      fs9.unlinkSync(filePath);
       info(`Deleted harness: ${input.path}`);
       return `Deleted ${input.path}`;
     }
@@ -26520,7 +26568,7 @@ async function executeAuthoringToolCall(toolName, input, repoPath, harnessDir, c
 }
 async function askUser(question, options) {
   const rl = readline2.createInterface({ input: process.stdin, output: process.stderr });
-  return new Promise((resolve24) => {
+  return new Promise((resolve26) => {
     process.stderr.write("\n");
     process.stderr.write(`\u2753 ${question}
 `);
@@ -26531,7 +26579,7 @@ async function askUser(question, options) {
     process.stderr.write("> ");
     rl.once("line", (answer) => {
       rl.close();
-      resolve24(answer.trim());
+      resolve26(answer.trim());
     });
   });
 }
@@ -26544,29 +26592,29 @@ async function authorHarness(repoPath, apiKey, options = {}) {
   const mode = options.mode ?? "init";
   const systemPromptPath = resolvePromptPath("system-authoring.md");
   const agentMdTemplatePath = resolveTemplateFile("AGENT.md.template");
-  let systemPrompt = fs9.existsSync(systemPromptPath) ? fs9.readFileSync(systemPromptPath, "utf8") : "Adapt the .har/ boilerplate to match the repository. Edit files directly. Call finishAuthoring when done.";
+  let systemPrompt = fs10.existsSync(systemPromptPath) ? fs10.readFileSync(systemPromptPath, "utf8") : "Adapt the .har/ boilerplate to match the repository. Edit files directly. Call finishAuthoring when done.";
   if (agentMdTemplatePath) {
     systemPrompt += `
 
 ## AGENT.md template (starting point for proposeAgentMd)
 
-${fs9.readFileSync(agentMdTemplatePath, "utf8")}`;
+${fs10.readFileSync(agentMdTemplatePath, "utf8")}`;
   }
   const tools = buildAuthoringTools();
   const messages = [];
   let rootListing;
   try {
-    rootListing = fs9.readdirSync(repoPath).slice(0, 50).join("\n");
+    rootListing = fs10.readdirSync(repoPath).slice(0, 50).join("\n");
   } catch {
     throw new Error(`Cannot read repo at path: ${repoPath}`);
   }
   let harnessListing;
   try {
-    harnessListing = fs9.readdirSync(harnessDir).join("\n");
+    harnessListing = fs10.readdirSync(harnessDir).join("\n");
   } catch {
     throw new Error(`Cannot read harness dir at: ${harnessDir}`);
   }
-  const existingAgentMd = fs9.existsSync(path8.join(repoPath, "AGENT.md")) ? "AGENT.md exists at repo root \u2014 read it before proposing changes via proposeAgentMd." : "No AGENT.md at repo root yet \u2014 propose one via proposeAgentMd.";
+  const existingAgentMd = fs10.existsSync(path9.join(repoPath, "AGENT.md")) ? "AGENT.md exists at repo root \u2014 read it before proposing changes via proposeAgentMd." : "No AGENT.md at repo root yet \u2014 propose one via proposeAgentMd.";
   const modeInstructions = mode === "maintain" ? `This is a MAINTENANCE run. .har/ already exists and may have been edited by humans.
 Update it to reflect current repo changes. Prefer editHarnessFile over writeHarnessFile.
 Keep README.md accurate \u2014 it is the index of the harness. ${existingAgentMd}` : `This is an INITIAL setup. A fresh boilerplate has been copied to .har/.
@@ -26646,8 +26694,8 @@ Try running with --verbose to see what the agent is doing.`
 }
 
 // src/harness/validator.ts
-var fs12 = __toESM(require("fs"));
-var path11 = __toESM(require("path"));
+var fs13 = __toESM(require("fs"));
+var path12 = __toESM(require("path"));
 
 // src/utils/shell.ts
 var import_child_process = require("child_process");
@@ -26675,7 +26723,7 @@ function runScript(scriptPath, args = [], options = {}) {
 function runScriptCapture(scriptPath, args = [], options = {}) {
   const stream = options.stream ?? false;
   const { stream: _stream, ...spawnOptions } = options;
-  return new Promise((resolve24) => {
+  return new Promise((resolve26) => {
     const proc = (0, import_child_process.spawn)("bash", [scriptPath, ...args], {
       ...spawnOptions,
       stdio: ["inherit", "pipe", "pipe"]
@@ -26690,13 +26738,13 @@ function runScriptCapture(scriptPath, args = [], options = {}) {
       stderr += d2;
       if (stream) process.stderr.write(d2);
     });
-    proc.on("close", (code) => resolve24({ stdout, stderr, code: code ?? 0 }));
+    proc.on("close", (code) => resolve26({ stdout, stderr, code: code ?? 0 }));
   });
 }
 function runShellCommand(command2, options = {}) {
   const stream = options.stream ?? false;
   const { stream: _stream, ...spawnOptions } = options;
-  return new Promise((resolve24) => {
+  return new Promise((resolve26) => {
     const proc = (0, import_child_process.spawn)("bash", ["-lc", command2], {
       ...spawnOptions,
       stdio: ["inherit", "pipe", "pipe"]
@@ -26711,22 +26759,22 @@ function runShellCommand(command2, options = {}) {
       stderr += d2;
       if (stream) process.stderr.write(d2);
     });
-    proc.on("close", (code) => resolve24({ stdout, stderr, code: code ?? 0 }));
+    proc.on("close", (code) => resolve26({ stdout, stderr, code: code ?? 0 }));
   });
 }
 
 // src/harness/stages.ts
-var fs11 = __toESM(require("fs"));
-var path10 = __toESM(require("path"));
+var fs12 = __toESM(require("fs"));
+var path11 = __toESM(require("path"));
 
 // src/harness/env.ts
-var fs10 = __toESM(require("fs"));
-var path9 = __toESM(require("path"));
+var fs11 = __toESM(require("fs"));
+var path10 = __toESM(require("path"));
 function readHarnessEnv(repoPath) {
-  const envPath = path9.join(getHarnessDir(repoPath), "harness.env");
-  if (!fs10.existsSync(envPath)) return {};
+  const envPath = path10.join(getHarnessDir(repoPath), "harness.env");
+  if (!fs11.existsSync(envPath)) return {};
   const values = {};
-  for (const line of fs10.readFileSync(envPath, "utf8").split("\n")) {
+  for (const line of fs11.readFileSync(envPath, "utf8").split("\n")) {
     const match = line.match(/^export\s+([A-Z0-9_]+)=(.*)$/);
     if (!match) continue;
     values[match[1]] = match[2].replace(/^"|"$/g, "");
@@ -26753,7 +26801,7 @@ var AGENT_REQUIRED_KINDS = /* @__PURE__ */ new Set([
   "custom"
 ]);
 function getStageRegistryPath(repoPath) {
-  return path10.join(getHarnessDir(repoPath), STAGE_REGISTRY_FILE);
+  return path11.join(getHarnessDir(repoPath), STAGE_REGISTRY_FILE);
 }
 function synthesizeStageRegistry(repoPath) {
   const harnessDir = getHarnessDir(repoPath);
@@ -26828,13 +26876,13 @@ function readAgentSlotsFromHarnessEnv(harnessEnv) {
 }
 function stageScriptExists(harnessDir, stage) {
   if (stage.script) {
-    return fs11.existsSync(path10.join(harnessDir, stage.script));
+    return fs12.existsSync(path11.join(harnessDir, stage.script));
   }
   if (stage.command) {
     const scriptName = stage.command.split(/\s+/)[0].replace(/^\.\/\.har\//, "").replace(/^\.\//, "");
-    return fs11.existsSync(path10.join(harnessDir, scriptName));
+    return fs12.existsSync(path11.join(harnessDir, scriptName));
   }
-  return fs11.existsSync(path10.join(harnessDir, "stages", `${stage.id}.sh`));
+  return fs12.existsSync(path11.join(harnessDir, "stages", `${stage.id}.sh`));
 }
 function addStageIfRunnable(stages, harnessDir, stage) {
   const parsed = HarnessStageSchema.parse(stage);
@@ -26844,10 +26892,10 @@ function addStageIfRunnable(stages, harnessDir, stage) {
 }
 function readStageRegistry(repoPath) {
   const registryPath = getStageRegistryPath(repoPath);
-  if (!fs11.existsSync(registryPath)) {
+  if (!fs12.existsSync(registryPath)) {
     return synthesizeStageRegistry(repoPath);
   }
-  const raw = JSON.parse(fs11.readFileSync(registryPath, "utf8"));
+  const raw = JSON.parse(fs12.readFileSync(registryPath, "utf8"));
   const parsed = HarnessStageRegistrySchema.safeParse(raw);
   if (!parsed.success) {
     throw new Error(`Invalid .har/${STAGE_REGISTRY_FILE}: ${parsed.error.message}`);
@@ -26860,7 +26908,7 @@ function writeStageRegistry(repoPath, registry2) {
   if (!parsed.success) {
     throw new Error(`Invalid stage registry: ${parsed.error.message}`);
   }
-  fs11.writeFileSync(registryPath, JSON.stringify(parsed.data, null, 2) + "\n");
+  fs12.writeFileSync(registryPath, JSON.stringify(parsed.data, null, 2) + "\n");
 }
 function listStages(repoPath) {
   return readStageRegistry(repoPath).stages;
@@ -26966,22 +27014,22 @@ var SHELL_SCRIPTS = [
 function validateHarness(repoPath) {
   const harnessDir = getHarnessDir(repoPath);
   const issues = [];
-  if (!fs12.existsSync(harnessDir)) {
+  if (!fs13.existsSync(harnessDir)) {
     return {
       pass: false,
       issues: [{ file: ".har", message: "Harness directory not found", severity: "error" }]
     };
   }
   for (const file of getRequiredFiles(repoPath)) {
-    const filePath = path11.join(harnessDir, file);
-    if (!fs12.existsSync(filePath)) {
+    const filePath = path12.join(harnessDir, file);
+    if (!fs13.existsSync(filePath)) {
       issues.push({ file, message: "Required file missing", severity: "error" });
     }
   }
   for (const script of SHELL_SCRIPTS) {
-    const scriptPath = path11.join(harnessDir, script);
-    if (!fs12.existsSync(scriptPath)) continue;
-    const stat = fs12.statSync(scriptPath);
+    const scriptPath = path12.join(harnessDir, script);
+    if (!fs13.existsSync(scriptPath)) continue;
+    const stat = fs13.statSync(scriptPath);
     if (!(stat.mode & 73)) {
       issues.push({ file: script, message: "Script is not executable", severity: "warning" });
     }
@@ -26996,9 +27044,9 @@ function validateHarness(repoPath) {
   }
   const manifest = readManifest(repoPath);
   const profile = manifest?.profile ?? "default";
-  const ecosystemPath = path11.join(harnessDir, "ecosystem.agent.template.cjs");
-  if (profile !== "cli" && fs12.existsSync(ecosystemPath)) {
-    const content = fs12.readFileSync(ecosystemPath, "utf8");
+  const ecosystemPath = path12.join(harnessDir, "ecosystem.agent.template.cjs");
+  if (profile !== "cli" && fs13.existsSync(ecosystemPath)) {
+    const content = fs13.readFileSync(ecosystemPath, "utf8");
     if (!content.includes("module.exports")) {
       issues.push({
         file: "ecosystem.agent.template.cjs",
@@ -27007,9 +27055,9 @@ function validateHarness(repoPath) {
       });
     }
   }
-  const harnessEnvPath = path11.join(harnessDir, "harness.env");
-  if (fs12.existsSync(harnessEnvPath)) {
-    const content = fs12.readFileSync(harnessEnvPath, "utf8");
+  const harnessEnvPath = path12.join(harnessDir, "harness.env");
+  if (fs13.existsSync(harnessEnvPath)) {
+    const content = fs13.readFileSync(harnessEnvPath, "utf8");
     if (content.includes("TODO: set migrate command")) {
       issues.push({ file: "harness.env", message: "Migrate command still has TODO", severity: "warning" });
     }
@@ -27017,17 +27065,17 @@ function validateHarness(repoPath) {
       issues.push({ file: "harness.env", message: "Seed command still has TODO", severity: "warning" });
     }
   }
-  const verifyPath = path11.join(harnessDir, "verify.sh");
-  if (fs12.existsSync(verifyPath)) {
-    const content = fs12.readFileSync(verifyPath, "utf8");
+  const verifyPath = path12.join(harnessDir, "verify.sh");
+  if (fs13.existsSync(verifyPath)) {
+    const content = fs13.readFileSync(verifyPath, "utf8");
     if (content.includes("echo 'TODO:")) {
       issues.push({ file: "verify.sh", message: "Verification steps still have TODO placeholders", severity: "warning" });
     }
   }
-  const stagesPath = path11.join(harnessDir, "stages.json");
-  if (fs12.existsSync(stagesPath)) {
+  const stagesPath = path12.join(harnessDir, "stages.json");
+  if (fs13.existsSync(stagesPath)) {
     try {
-      JSON.parse(fs12.readFileSync(stagesPath, "utf8"));
+      JSON.parse(fs13.readFileSync(stagesPath, "utf8"));
       const registry2 = readStageRegistry(repoPath);
       if (registry2.stages.length === 0) {
         issues.push({ file: "stages.json", message: "No harness stages declared", severity: "warning" });
@@ -27042,9 +27090,9 @@ function validateHarness(repoPath) {
   } else {
     issues.push({ file: "stages.json", message: "Stage registry missing", severity: "warning" });
   }
-  const readmePath = path11.join(harnessDir, "README.md");
-  if (fs12.existsSync(readmePath)) {
-    const content = fs12.readFileSync(readmePath, "utf8");
+  const readmePath = path12.join(harnessDir, "README.md");
+  if (fs13.existsSync(readmePath)) {
+    const content = fs13.readFileSync(readmePath, "utf8");
     if (!content.includes(".har")) {
       issues.push({ file: "README.md", message: "README should document .har/ paths", severity: "warning" });
     }
@@ -27058,8 +27106,8 @@ function validateHarness(repoPath) {
 async function smokeTestHarness(repoPath) {
   const harnessDir = getHarnessDir(repoPath);
   const issues = [];
-  const setupScript = path11.join(harnessDir, "setup-infra.sh");
-  if (fs12.existsSync(setupScript)) {
+  const setupScript = path12.join(harnessDir, "setup-infra.sh");
+  if (fs13.existsSync(setupScript)) {
     const result = run(`bash "${setupScript}"`, { cwd: repoPath });
     if (result.code !== 0) {
       issues.push({
@@ -27074,8 +27122,8 @@ async function smokeTestHarness(repoPath) {
 }
 
 // src/harness/drift.ts
-var fs13 = __toESM(require("fs"));
-var path12 = __toESM(require("path"));
+var fs14 = __toESM(require("fs"));
+var path13 = __toESM(require("path"));
 var PROFILE_DIRS2 = {
   default: "har-boilerplate",
   cli: "har-boilerplate-cli",
@@ -27086,37 +27134,90 @@ var CLI_EXPECTED_ABSENT = /* @__PURE__ */ new Set([
   "env.template",
   "attach.sh"
 ]);
+var APP_PORT_VARS = [
+  "HARNESS_FE_BASE_PORT",
+  "HARNESS_API_BASE_PORT",
+  "HARNESS_PORT_STEP"
+];
+var INFRA_PORT_VARS_BY_SERVICE = {
+  db: [
+    "HARNESS_DB_PORT_DEFAULT",
+    "HARNESS_DB_PORT_SCAN_START",
+    "HARNESS_DB_PORT_SCAN_END"
+  ],
+  minio: [
+    "HARNESS_MINIO_PORT_DEFAULT",
+    "HARNESS_MINIO_PORT_SCAN_START",
+    "HARNESS_MINIO_PORT_SCAN_END",
+    "HARNESS_MINIO_CONSOLE_PORT_DEFAULT",
+    "HARNESS_MINIO_CONSOLE_PORT_SCAN_START",
+    "HARNESS_MINIO_CONSOLE_PORT_SCAN_END"
+  ],
+  mailpit: [
+    "HARNESS_MAILPIT_WEB_PORT_DEFAULT",
+    "HARNESS_MAILPIT_WEB_PORT_SCAN_START",
+    "HARNESS_MAILPIT_WEB_PORT_SCAN_END",
+    "HARNESS_MAILPIT_SMTP_PORT_DEFAULT",
+    "HARNESS_MAILPIT_SMTP_PORT_SCAN_START",
+    "HARNESS_MAILPIT_SMTP_PORT_SCAN_END"
+  ],
+  "headless-browser": [
+    "HARNESS_BROWSER_PORT_DEFAULT",
+    "HARNESS_BROWSER_PORT_SCAN_START",
+    "HARNESS_BROWSER_PORT_SCAN_END"
+  ]
+};
+function missingPortDocumentationVars(profile, env3) {
+  const missing = [];
+  if (profile === "default") {
+    for (const key of APP_PORT_VARS) {
+      if (!(key in env3)) missing.push(key);
+    }
+  }
+  if (profile === "cli" && !("HARNESS_PORT_STEP" in env3)) {
+    missing.push("HARNESS_PORT_STEP");
+  }
+  const services = (env3.HARNESS_INFRA_SERVICES ?? "").trim().split(/\s+/).filter(Boolean);
+  for (const service of services) {
+    const vars = INFRA_PORT_VARS_BY_SERVICE[service];
+    if (!vars) continue;
+    for (const key of vars) {
+      if (!(key in env3)) missing.push(key);
+    }
+  }
+  return [...new Set(missing)];
+}
 function substituteProjectName(content, projectName) {
   return content.replace(/__PROJECT_NAME__/g, projectName).replace(/template___PROJECT_NAME__/g, `template_${projectName}`);
 }
 function listBoilerplateFiles(boilerplateDir) {
-  if (!fs13.existsSync(boilerplateDir)) return [];
-  return fs13.readdirSync(boilerplateDir, { withFileTypes: true }).filter((entry) => entry.isFile()).map((entry) => entry.name).sort();
+  if (!fs14.existsSync(boilerplateDir)) return [];
+  return fs14.readdirSync(boilerplateDir, { withFileTypes: true }).filter((entry) => entry.isFile()).map((entry) => entry.name).sort();
 }
 function compareHarnessToTemplate(repoPath) {
-  const resolved = path12.resolve(repoPath);
+  const resolved = path13.resolve(repoPath);
   const manifest = readManifest(resolved);
   const profile = manifest?.profile ?? "default";
   const harnessDir = getHarnessDir(resolved);
-  const projectName = path12.basename(resolved).toLowerCase().replace(/[^a-z0-9]/g, "_");
-  const boilerplateDir = path12.join(resolveTemplatesDir(), PROFILE_DIRS2[profile]);
+  const projectName = path13.basename(resolved).toLowerCase().replace(/[^a-z0-9]/g, "_");
+  const boilerplateDir = path13.join(resolveTemplatesDir(), PROFILE_DIRS2[profile]);
   const templateFiles = listBoilerplateFiles(boilerplateDir);
   const missing = [];
   const checksumMismatch = [];
   const extra = [];
   const unchanged = [];
   for (const file of templateFiles) {
-    const templatePath = path12.join(boilerplateDir, file);
-    const harnessPath = path12.join(harnessDir, file);
-    let templateContent = fs13.readFileSync(templatePath, "utf8");
+    const templatePath = path13.join(boilerplateDir, file);
+    const harnessPath = path13.join(harnessDir, file);
+    let templateContent = fs14.readFileSync(templatePath, "utf8");
     if (file === "harness.env") {
       templateContent = substituteProjectName(templateContent, projectName);
     }
-    if (!fs13.existsSync(harnessPath)) {
+    if (!fs14.existsSync(harnessPath)) {
       missing.push(file);
       continue;
     }
-    const harnessChecksum = computeFileChecksum(fs13.readFileSync(harnessPath, "utf8"));
+    const harnessChecksum = computeFileChecksum(fs14.readFileSync(harnessPath, "utf8"));
     const templateChecksum = computeFileChecksum(templateContent);
     if (harnessChecksum === templateChecksum) {
       unchanged.push(file);
@@ -27124,12 +27225,11 @@ function compareHarnessToTemplate(repoPath) {
       checksumMismatch.push(file);
     }
   }
-  if (fs13.existsSync(harnessDir)) {
-    for (const file of fs13.readdirSync(harnessDir)) {
-      const full = path12.join(harnessDir, file);
-      if (!fs13.statSync(full).isFile()) continue;
+  if (fs14.existsSync(harnessDir)) {
+    for (const file of fs14.readdirSync(harnessDir)) {
+      const full = path13.join(harnessDir, file);
+      if (!fs14.statSync(full).isFile()) continue;
       if (file === "manifest.json" || file.startsWith("ADAPT-PROMPT")) continue;
-      if (templateFiles.includes(file)) continue;
       if (profile === "cli" && CLI_EXPECTED_ABSENT.has(file)) {
         extra.push(file);
       } else if (!templateFiles.includes(file)) {
@@ -27138,6 +27238,8 @@ function compareHarnessToTemplate(repoPath) {
     }
   }
   const installed = manifest?.generatorVersion;
+  const harnessEnv = readHarnessEnv(resolved);
+  const missingPortVars = missingPortDocumentationVars(profile, harnessEnv);
   return {
     generatorVersion: {
       installed,
@@ -27147,71 +27249,355 @@ function compareHarnessToTemplate(repoPath) {
     missing,
     checksumMismatch,
     extra,
-    unchanged
+    unchanged,
+    missingPortVars
   };
 }
 
-// src/harness/stage-templates.ts
+// src/harness/maintain-bundle.ts
 var fs15 = __toESM(require("fs"));
-var path13 = __toESM(require("path"));
+var os2 = __toESM(require("os"));
+var path14 = __toESM(require("path"));
+var MAINTAIN_DIR = "maintain";
+var PROFILE_DIRS3 = {
+  default: "har-boilerplate",
+  cli: "har-boilerplate-cli",
+  ios: "har-boilerplate-ios"
+};
+function substituteProjectName2(content, projectName) {
+  return content.replace(/__PROJECT_NAME__/g, projectName).replace(/template___PROJECT_NAME__/g, `template_${projectName}`);
+}
+function projectNameFromRepo(repoPath) {
+  return path14.basename(repoPath).toLowerCase().replace(/[^a-z0-9]/g, "_");
+}
+function boilerplateDirForProfile(profile) {
+  return path14.join(resolveTemplatesDir(), PROFILE_DIRS3[profile]);
+}
+function readBundledTemplateContent(repoPath, profile, file) {
+  const templatePath = path14.join(boilerplateDirForProfile(profile), file);
+  let content = fs15.readFileSync(templatePath, "utf8");
+  if (file === "harness.env") {
+    content = substituteProjectName2(content, projectNameFromRepo(repoPath));
+  }
+  return content;
+}
+function staleFileHint(file) {
+  if (file.endsWith(".sh")) {
+    return "Legacy harness script \u2014 merge behavior into current templates, then delete.";
+  }
+  if (file.endsWith(".local") || file.includes(".env")) {
+    return "Local override \u2014 move needed values into harness.env or delete if obsolete.";
+  }
+  return "Not in the current bundled template \u2014 review, merge, or delete.";
+}
+function actionHint(file, kind2) {
+  if (kind2 === "missing") {
+    if (file === "provision-toolchain.sh") {
+      return "Add this file and ensure launch.sh calls it to provision the toolchain.";
+    }
+    return `Copy/adapt from maintain/templates/${file} into .har/${file}.`;
+  }
+  if (file === "verify.sh") {
+    return "Merge template upgrades into .har/verify.sh \u2014 do not blind-overwrite repo-specific checks.";
+  }
+  if (file === "harness.env") {
+    return "Merge template changes; keep repo-specific commands and add any missing port vars.";
+  }
+  return `Read maintain/diffs/${file}.diff and merge into .har/${file}.`;
+}
+function createUnifiedDiff(installedContent, templateContent, installedLabel, templateLabel) {
+  const tmpDir = fs15.mkdtempSync(path14.join(os2.tmpdir(), "har-maintain-diff-"));
+  try {
+    const installedPath = path14.join(tmpDir, "installed");
+    const templatePath = path14.join(tmpDir, "template");
+    fs15.writeFileSync(installedPath, installedContent);
+    fs15.writeFileSync(templatePath, templateContent);
+    const result = run(`diff -u "${installedPath}" "${templatePath}"`);
+    const body = result.stdout.trim();
+    if (!body) return "";
+    return `--- ${installedLabel}
++++ ${templateLabel}
+${body.split("\n").slice(2).join("\n")}
+`;
+  } finally {
+    fs15.rmSync(tmpDir, { recursive: true, force: true });
+  }
+}
+function buildActions(repoPath, profile, drift) {
+  const harnessDir = getHarnessDir(repoPath);
+  const actions = [];
+  for (const file of drift.missing) {
+    actions.push({
+      file,
+      kind: "missing",
+      template: `maintain/templates/${file}`,
+      hint: actionHint(file, "missing")
+    });
+  }
+  for (const file of drift.checksumMismatch) {
+    const installedPath = path14.join(harnessDir, file);
+    const installedRel = `maintain/installed/${file}`;
+    const templateRel = `maintain/templates/${file}`;
+    const diffRel = `maintain/diffs/${file}.diff`;
+    actions.push({
+      file,
+      kind: "drift",
+      template: templateRel,
+      installed: fs15.existsSync(installedPath) ? installedRel : void 0,
+      diff: diffRel,
+      hint: actionHint(file, "drift")
+    });
+  }
+  return actions.sort((a2, b2) => a2.file.localeCompare(b2.file));
+}
+function buildStale(drift) {
+  return drift.extra.map((file) => ({ file, hint: staleFileHint(file) })).sort((a2, b2) => a2.file.localeCompare(b2.file));
+}
+function buildReadme(report) {
+  const lines = [
+    "# Harness maintenance bundle",
+    "",
+    `Generated by \`har env maintain\` on ${report.generatedAt}.`,
+    `Bundled generator: ${report.generatorVersion.bundled} | Installed: ${report.generatorVersion.installed ?? "(unknown)"} | Profile: ${report.profile}`,
+    "",
+    "Reference templates and diffs live in this directory. Edit live files in `.har/` \u2014 not `maintain/templates/` directly.",
+    "",
+    "## Validation (fix before `--finalize`)",
+    ""
+  ];
+  if (report.validation.errors.length === 0 && report.validation.warnings.length === 0) {
+    lines.push("- All structural checks passed.");
+  } else {
+    for (const issue2 of report.validation.errors) {
+      lines.push(`- \u2717 **${issue2.file}**: ${issue2.message}`);
+    }
+    for (const issue2 of report.validation.warnings) {
+      lines.push(`- \u26A0 **${issue2.file}**: ${issue2.message}`);
+    }
+  }
+  lines.push("", "## Drift actions", "");
+  if (report.actions.length === 0) {
+    lines.push("No missing or drifted template files.");
+  } else {
+    lines.push("| File | Status | Reference |");
+    lines.push("|------|--------|-----------|");
+    for (const action of report.actions) {
+      const ref = action.kind === "missing" ? `templates/${action.file}` : `diffs/${action.file}.diff`;
+      lines.push(`| ${action.file} | ${action.kind} | ${ref} |`);
+    }
+  }
+  if (report.missingPortVars.length > 0) {
+    lines.push("", "## Missing port vars in harness.env", "");
+    for (const v2 of report.missingPortVars) {
+      lines.push(`- \`${v2}\` \u2014 copy from \`maintain/templates/harness.env\``);
+    }
+  }
+  lines.push("", "## Stale files (review)", "");
+  if (report.stale.length === 0) {
+    lines.push("None detected.");
+  } else {
+    for (const stale of report.stale) {
+      lines.push(`- **${stale.file}** \u2014 ${stale.hint}`);
+    }
+  }
+  lines.push(
+    "",
+    "## Next steps",
+    "",
+    "1. Resolve each drift action (merge diffs; keep repo-specific customizations).",
+    "2. Review stale files \u2014 delete or merge superseded scripts.",
+    "3. Re-run `har env maintain` until validation passes and drift is clear.",
+    '4. `har env maintain --finalize --summary "<what changed>"`',
+    ""
+  );
+  return lines.join("\n");
+}
+function writeBundleArtifacts(repoPath, profile, drift, report) {
+  const harnessDir = getHarnessDir(repoPath);
+  const bundleDir = path14.join(harnessDir, MAINTAIN_DIR);
+  if (fs15.existsSync(bundleDir)) {
+    fs15.rmSync(bundleDir, { recursive: true, force: true });
+  }
+  const dirs = [
+    bundleDir,
+    path14.join(bundleDir, "templates"),
+    path14.join(bundleDir, "installed"),
+    path14.join(bundleDir, "diffs"),
+    path14.join(bundleDir, "stale")
+  ];
+  for (const dir of dirs) {
+    fs15.mkdirSync(dir, { recursive: true });
+  }
+  const affectedFiles = [...drift.missing, ...drift.checksumMismatch];
+  for (const file of affectedFiles) {
+    const templateContent = readBundledTemplateContent(repoPath, profile, file);
+    writeFileSafe(path14.join(bundleDir, "templates", file), templateContent);
+    const harnessPath = path14.join(harnessDir, file);
+    if (fs15.existsSync(harnessPath)) {
+      const installedContent = fs15.readFileSync(harnessPath, "utf8");
+      writeFileSafe(path14.join(bundleDir, "installed", file), installedContent);
+      const diff = createUnifiedDiff(
+        installedContent,
+        templateContent,
+        `installed/${file}`,
+        `templates/${file}`
+      );
+      if (diff) {
+        writeFileSafe(path14.join(bundleDir, "diffs", `${file}.diff`), diff);
+      }
+    }
+  }
+  writeFileSafe(path14.join(bundleDir, "README.md"), buildReadme(report));
+  writeFileSafe(path14.join(bundleDir, "drift-report.json"), JSON.stringify(report, null, 2) + "\n");
+  writeFileSafe(
+    path14.join(bundleDir, "validation.json"),
+    JSON.stringify(report.validation, null, 2) + "\n"
+  );
+  if (report.stale.length > 0) {
+    const staleLines = [
+      "# Stale harness files",
+      "",
+      "These files exist in `.har/` but are not part of the current bundled template.",
+      "",
+      ...report.stale.map((s2) => `- **${s2.file}** \u2014 ${s2.hint}`),
+      ""
+    ];
+    writeFileSafe(path14.join(bundleDir, "stale", "MANIFEST.md"), staleLines.join("\n"));
+  }
+  return bundleDir;
+}
+function buildMaintainBundle(repoPath, validation2, drift) {
+  const manifest = readManifest(repoPath);
+  const profile = manifest?.profile ?? "default";
+  const errors = validation2.issues.filter((i2) => i2.severity === "error");
+  const warnings = validation2.issues.filter((i2) => i2.severity === "warning");
+  const report = {
+    generatedAt: (/* @__PURE__ */ new Date()).toISOString(),
+    generatorVersion: drift.generatorVersion,
+    profile,
+    actions: buildActions(repoPath, profile, drift),
+    stale: buildStale(drift),
+    missingPortVars: drift.missingPortVars,
+    validation: {
+      pass: validation2.pass,
+      errors,
+      warnings
+    }
+  };
+  const bundleDir = writeBundleArtifacts(repoPath, profile, drift, report);
+  return { bundleDir, report };
+}
+function removeMaintainBundle(repoPath) {
+  const bundleDir = path14.join(getHarnessDir(repoPath), MAINTAIN_DIR);
+  if (fs15.existsSync(bundleDir)) {
+    fs15.rmSync(bundleDir, { recursive: true, force: true });
+  }
+}
+function formatMaintainBundlePromptSection(report) {
+  const lines = [
+    "## Step 0 \u2014 Read the maintenance bundle",
+    "",
+    "Open `.har/maintain/README.md` and `.har/maintain/drift-report.json`.",
+    "All reference templates are under `.har/maintain/templates/`.",
+    "Do **not** read files from the globally installed har package.",
+    ""
+  ];
+  if (report.validation.errors.length > 0) {
+    lines.push("### Validation blockers (fix first)", "");
+    for (const issue2 of report.validation.errors) {
+      lines.push(`- \u2717 **${issue2.file}**: ${issue2.message}`);
+    }
+    lines.push("");
+  }
+  if (report.actions.length > 0) {
+    lines.push("### Drift actions", "", "| File | Status | Reference |", "|------|--------|-----------|");
+    for (const action of report.actions) {
+      const ref = action.kind === "missing" ? `maintain/templates/${action.file}` : `maintain/diffs/${action.file}.diff`;
+      lines.push(`| ${action.file} | ${action.kind} | ${ref} |`);
+    }
+    lines.push("");
+  }
+  if (report.stale.length > 0) {
+    lines.push("### Stale files", "");
+    for (const stale of report.stale) {
+      lines.push(`- **${stale.file}** \u2014 ${stale.hint}`);
+    }
+    lines.push("");
+  }
+  if (report.missingPortVars.length > 0) {
+    lines.push("### Missing port vars in harness.env", "");
+    for (const v2 of report.missingPortVars) {
+      lines.push(`- \`${v2}\` \u2014 see \`maintain/templates/harness.env\``);
+    }
+    lines.push("");
+  }
+  if (report.actions.length === 0 && report.stale.length === 0 && report.missingPortVars.length === 0 && report.validation.errors.length === 0) {
+    lines.push("No template drift detected. Review repo stack changes manually if needed.", "");
+  }
+  return lines.join("\n");
+}
+
+// src/harness/stage-templates.ts
+var fs17 = __toESM(require("fs"));
+var path15 = __toESM(require("path"));
 
 // src/harness/parser.ts
-var fs14 = __toESM(require("fs"));
+var fs16 = __toESM(require("fs"));
 function harnessExists(repoPath) {
-  return fs14.existsSync(`${repoPath}/.har/setup-infra.sh`);
+  return fs16.existsSync(`${repoPath}/.har/setup-infra.sh`);
 }
 
 // src/harness/stage-templates.ts
 function resolveTemplateDir(templateId) {
-  const dir = path13.join(resolveTemplatesDir(), "stage-templates", templateId);
-  if (!fs15.existsSync(dir)) {
+  const dir = path15.join(resolveTemplatesDir(), "stage-templates", templateId);
+  if (!fs17.existsSync(dir)) {
     throw new Error(`Stage template not found: ${templateId}. Run npm run build.`);
   }
   return dir;
 }
 function readTemplateManifest(templateId) {
-  const manifestPath = path13.join(resolveTemplateDir(templateId), "template.manifest.json");
-  const raw = JSON.parse(fs15.readFileSync(manifestPath, "utf8"));
+  const manifestPath = path15.join(resolveTemplateDir(templateId), "template.manifest.json");
+  const raw = JSON.parse(fs17.readFileSync(manifestPath, "utf8"));
   if (raw.id !== templateId) {
     throw new Error(`Template manifest id mismatch: expected ${templateId}, got ${raw.id}`);
   }
   return raw;
 }
 function ensureParentDir(filePath) {
-  const parent = path13.dirname(filePath);
-  if (!fs15.existsSync(parent)) {
-    fs15.mkdirSync(parent, { recursive: true });
+  const parent = path15.dirname(filePath);
+  if (!fs17.existsSync(parent)) {
+    fs17.mkdirSync(parent, { recursive: true });
   }
 }
 function copyTemplateFile(templateDir, file, repoPath, force) {
-  const srcPath = path13.join(templateDir, file.src);
-  const destPath = path13.join(repoPath, file.dest);
-  if (!fs15.existsSync(srcPath)) {
+  const srcPath = path15.join(templateDir, file.src);
+  const destPath = path15.join(repoPath, file.dest);
+  if (!fs17.existsSync(srcPath)) {
     throw new Error(`Template file missing: ${file.src}`);
   }
-  if (fs15.existsSync(destPath) && !force) {
+  if (fs17.existsSync(destPath) && !force) {
     throw new Error(
       `File already exists: ${file.dest}. Use --force to overwrite or remove it first.`
     );
   }
   ensureParentDir(destPath);
-  fs15.copyFileSync(srcPath, destPath);
+  fs17.copyFileSync(srcPath, destPath);
   if (file.executable) {
-    fs15.chmodSync(destPath, 493);
+    fs17.chmodSync(destPath, 493);
   }
   return { written: true, path: file.dest };
 }
 function mergePackageJson(repoPath, templateDir, fragmentRelPath, warnings) {
-  const packagePath = path13.join(repoPath, "package.json");
-  if (!fs15.existsSync(packagePath)) {
+  const packagePath = path15.join(repoPath, "package.json");
+  if (!fs17.existsSync(packagePath)) {
     throw new Error("No package.json in repo root. Add one before applying the Playwright template.");
   }
-  const fragmentPath = path13.join(templateDir, fragmentRelPath);
-  if (!fs15.existsSync(fragmentPath)) {
+  const fragmentPath = path15.join(templateDir, fragmentRelPath);
+  if (!fs17.existsSync(fragmentPath)) {
     throw new Error(`Package fragment missing: ${fragmentRelPath}`);
   }
-  const pkg = JSON.parse(fs15.readFileSync(packagePath, "utf8"));
-  const fragment = JSON.parse(fs15.readFileSync(fragmentPath, "utf8"));
+  const pkg = JSON.parse(fs17.readFileSync(packagePath, "utf8"));
+  const fragment = JSON.parse(fs17.readFileSync(fragmentPath, "utf8"));
   for (const section of ["scripts", "devDependencies"]) {
     const existing = pkg[section] ?? {};
     const incoming = fragment[section] ?? {};
@@ -27224,7 +27610,7 @@ function mergePackageJson(repoPath, templateDir, fragmentRelPath, warnings) {
     }
     pkg[section] = existing;
   }
-  fs15.writeFileSync(packagePath, JSON.stringify(pkg, null, 2) + "\n");
+  fs17.writeFileSync(packagePath, JSON.stringify(pkg, null, 2) + "\n");
 }
 function patchStageRegistry(repoPath, manifest, force) {
   const registry2 = readStageRegistry(repoPath);
@@ -27265,8 +27651,8 @@ function assertHarnessPresent(repoPath) {
 }
 function assertStageNotPresent(repoPath, stageId, force) {
   if (force) return;
-  const scriptPath = path13.join(repoPath, ".har", "stages", `${stageId}.sh`);
-  if (fs15.existsSync(scriptPath)) {
+  const scriptPath = path15.join(repoPath, ".har", "stages", `${stageId}.sh`);
+  if (fs17.existsSync(scriptPath)) {
     throw new Error(
       `Stage script already exists: .har/stages/${stageId}.sh. Use --force to overwrite.`
     );
@@ -27279,7 +27665,7 @@ function assertStageNotPresent(repoPath, stageId, force) {
   }
 }
 function applyStageTemplate(repoPath, templateId, options = {}) {
-  const resolved = path13.resolve(repoPath);
+  const resolved = path15.resolve(repoPath);
   const force = options.force ?? false;
   const warnings = [];
   const filesWritten = [];
@@ -27298,7 +27684,7 @@ function applyStageTemplate(repoPath, templateId, options = {}) {
       if (file.skipFlag === "skipCi" && options.skipCi) {
         continue;
       }
-      if (fs15.existsSync(path13.join(resolved, file.dest)) && !force) {
+      if (fs17.existsSync(path15.join(resolved, file.dest)) && !force) {
         warnings.push(`Skipped optional file (exists): ${file.dest}`);
         continue;
       }
@@ -27361,11 +27747,11 @@ function validateAgentId(id, repoPath) {
 // src/core/harness.ts
 function listHarnessScripts(repoPath) {
   const harnessDir = getHarnessDir(repoPath);
-  if (!fs16.existsSync(harnessDir)) return [];
-  return fs16.readdirSync(harnessDir).filter((name) => name.endsWith(".sh")).sort();
+  if (!fs18.existsSync(harnessDir)) return [];
+  return fs18.readdirSync(harnessDir).filter((name) => name.endsWith(".sh")).sort();
 }
 function describeProject(repoPath) {
-  const resolved = path14.resolve(repoPath);
+  const resolved = path16.resolve(repoPath);
   const manifest = readManifest(resolved);
   const present = harnessExists(resolved);
   return {
@@ -27385,8 +27771,8 @@ function describeProject(repoPath) {
   };
 }
 async function initHarness(options) {
-  const repoPath = path14.resolve(options.repoPath);
-  if (!fs16.existsSync(repoPath)) {
+  const repoPath = path16.resolve(options.repoPath);
+  if (!fs18.existsSync(repoPath)) {
     throw new Error(`Path not found: ${repoPath}`);
   }
   const scaffold = scaffoldHarnessBoilerplate(repoPath, {
@@ -27417,9 +27803,9 @@ async function initHarness(options) {
   };
 }
 async function maintainHarness(options) {
-  const repoPath = path14.resolve(options.repoPath);
+  const repoPath = path16.resolve(options.repoPath);
   const harnessDir = getHarnessDir(repoPath);
-  if (!fs16.existsSync(harnessDir)) {
+  if (!fs18.existsSync(harnessDir)) {
     throw new Error('No .har/ found. Run "har env init" first.');
   }
   if (options.auto) {
@@ -27430,6 +27816,7 @@ async function maintainHarness(options) {
       mode: "maintain"
     });
     finalizeHarness(repoPath, authoringResult.summary, authoringResult.stack);
+    removeMaintainBundle(repoPath);
     const validation3 = validateHarness(repoPath);
     return {
       validation: validation3,
@@ -27437,6 +27824,7 @@ async function maintainHarness(options) {
       drift: compareHarnessToTemplate(repoPath)
     };
   }
+  const drift = compareHarnessToTemplate(repoPath);
   const validation2 = validateHarness(repoPath);
   if (options.finalize) {
     if (!validation2.pass) {
@@ -27448,16 +27836,19 @@ async function maintainHarness(options) {
       options.summary ?? "Manual adaptation finalized via har env maintain --finalize",
       existing?.stack
     );
+    removeMaintainBundle(repoPath);
     return {
       validation: validation2,
       adaptationSummary: options.summary,
       drift: compareHarnessToTemplate(repoPath)
     };
   }
+  const bundle = buildMaintainBundle(repoPath, validation2, drift);
   return {
     validation: validation2,
     adaptationSummary: "Manual maintenance \u2014 use coding agent prompt in .har/ADAPT-PROMPT.md",
-    drift: compareHarnessToTemplate(repoPath)
+    drift,
+    bundle
   };
 }
 function addStageTemplate(repoPath, templateId, options = {}) {
@@ -27465,8 +27856,8 @@ function addStageTemplate(repoPath, templateId, options = {}) {
 }
 
 // src/harness/adaptation-prompt.ts
-var fs17 = __toESM(require("fs"));
-var path15 = __toESM(require("path"));
+var fs19 = __toESM(require("fs"));
+var path17 = __toESM(require("path"));
 var ADAPTATION_PROMPT_FILE = "ADAPT-PROMPT.md";
 var PROFILE_HINTS = {
   default: "Web app profile (SaaS/full-stack) \u2014 Docker Compose for shared infra (HARNESS_INFRA_SERVICES), PM2 for the primary application only, git worktree per agent slot by default. Launch provisions toolchain via harness.env (HARNESS_ECOSYSTEM, HARNESS_INSTALL_CMD) and writes paths to .env.agent.<id>. Identify the primary app agents modify; run supporting services shared.",
@@ -27478,7 +27869,7 @@ function loadTemplate(name) {
   if (!filePath) {
     throw new Error(`Adaptation prompt template not found: ${name}. Run npm run build.`);
   }
-  return fs17.readFileSync(filePath, "utf8");
+  return fs19.readFileSync(filePath, "utf8");
 }
 function applyProfilePlaceholders(content, profile) {
   return content.replace(/\{\{PROFILE\}\}/g, profile).replace(/\{\{PROFILE_HINT\}\}/g, PROFILE_HINTS[profile]);
@@ -27486,12 +27877,21 @@ function applyProfilePlaceholders(content, profile) {
 function buildInitAdaptationPrompt(_repoPath, profile) {
   return applyProfilePlaceholders(loadTemplate("adaptation-prompt-init.md"), profile);
 }
-function buildMaintainAdaptationPrompt(_repoPath) {
-  return loadTemplate("adaptation-prompt-maintain.md");
+function buildMaintainAdaptationPrompt(_repoPath, bundleReport) {
+  const template = loadTemplate("adaptation-prompt-maintain.md");
+  const section = bundleReport ? formatMaintainBundlePromptSection(bundleReport) : [
+    "## Step 0 \u2014 Read the maintenance bundle",
+    "",
+    "Open `.har/maintain/README.md` and `.har/maintain/drift-report.json`.",
+    "All reference templates are under `.har/maintain/templates/`.",
+    "Do **not** read files from the globally installed har package.",
+    ""
+  ].join("\n");
+  return template.replace("{{MAINTAIN_BUNDLE_SECTION}}", section);
 }
 function writeAdaptationPrompt(repoPath, content) {
   const harnessDir = getHarnessDir(repoPath);
-  const filePath = path15.join(harnessDir, ADAPTATION_PROMPT_FILE);
+  const filePath = path17.join(harnessDir, ADAPTATION_PROMPT_FILE);
   writeFileSafe(filePath, content);
   return filePath;
 }
@@ -27510,25 +27910,25 @@ function printAdaptationPrompt(content) {
 }
 
 // src/harness/cursor-rule.ts
-var fs18 = __toESM(require("fs"));
-var path16 = __toESM(require("path"));
+var fs20 = __toESM(require("fs"));
+var path18 = __toESM(require("path"));
 var readline3 = __toESM(require("readline"));
 var CURSOR_RULE_RELATIVE_PATH = ".cursor/rules/har-workflow.mdc";
 function getCursorRulePath(repoPath) {
-  return path16.join(repoPath, CURSOR_RULE_RELATIVE_PATH);
+  return path18.join(repoPath, CURSOR_RULE_RELATIVE_PATH);
 }
 function isCursorWorkspace(repoPath) {
-  return fs18.existsSync(path16.join(repoPath, ".cursor"));
+  return fs20.existsSync(path18.join(repoPath, ".cursor"));
 }
 function cursorRuleExists(repoPath) {
-  return fs18.existsSync(getCursorRulePath(repoPath));
+  return fs20.existsSync(getCursorRulePath(repoPath));
 }
 function scaffoldCursorRule(repoPath) {
   const templatePath = resolveTemplateFile("cursor-rule.mdc.template");
   if (!templatePath) {
     throw new Error("Cursor rule template not found (cursor-rule.mdc.template). Run npm run build.");
   }
-  const content = fs18.readFileSync(templatePath, "utf8");
+  const content = fs20.readFileSync(templatePath, "utf8");
   writeFileSafe(getCursorRulePath(repoPath), content);
 }
 async function handleCursorRule(options) {
@@ -27566,16 +27966,16 @@ async function promptScaffoldCursorRule(exists) {
 }
 async function askYesNo2(question) {
   const rl = readline3.createInterface({ input: process.stdin, output: process.stderr });
-  return new Promise((resolve24) => {
+  return new Promise((resolve26) => {
     process.stderr.write(`${question} `);
     rl.once("line", (answer) => {
       rl.close();
       const trimmed = answer.trim();
       if (trimmed === "") {
-        resolve24(true);
+        resolve26(true);
         return;
       }
-      resolve24(/^y(es)?$/i.test(trimmed));
+      resolve26(/^y(es)?$/i.test(trimmed));
     });
   });
 }
@@ -27654,17 +28054,65 @@ function buildStageResult(input) {
 }
 
 // src/core/local-executor.ts
-var fs19 = __toESM(require("fs"));
-var path17 = __toESM(require("path"));
+var fs22 = __toESM(require("fs"));
+var path20 = __toESM(require("path"));
+
+// src/core/slot-registry.ts
+var fs21 = __toESM(require("fs"));
+var path19 = __toESM(require("path"));
+function getSlotRegistryDir(repoPath) {
+  return path19.join(getHarnessDir(repoPath), "slots");
+}
+function getSlotRegistryPath(repoPath, agentId) {
+  return path19.join(getSlotRegistryDir(repoPath), `agent-${agentId}.json`);
+}
+function isSlotResumable(session) {
+  return session?.status === "failed" || session?.status === "starting";
+}
+function readSlotRegistry(repoPath, agentId) {
+  const file = getSlotRegistryPath(repoPath, agentId);
+  if (!fs21.existsSync(file)) return void 0;
+  try {
+    const raw = JSON.parse(fs21.readFileSync(file, "utf8"));
+    const result = SlotRegistryEntrySchema.safeParse(raw);
+    return result.success ? result.data : void 0;
+  } catch {
+    return void 0;
+  }
+}
+
+// src/core/local-executor.ts
 function resolveRepoPath(repoPath) {
-  return path17.resolve(repoPath);
+  return path20.resolve(repoPath);
+}
+function buildPreviewUrlsFromPorts(ports, env3) {
+  const urls = {};
+  if (ports.frontend) urls.frontend = `http://localhost:${ports.frontend}`;
+  if (ports.api) {
+    urls.api = `http://localhost:${ports.api}`;
+    if (env3.HARNESS_HEALTH_CHECK_PATH) {
+      urls.health = `http://localhost:${ports.api}${env3.HARNESS_HEALTH_CHECK_PATH}`;
+    }
+  }
+  if (ports.browser) urls.browser = `http://localhost:${ports.browser}`;
+  if (ports.mailpit) urls.mailpit = `http://localhost:${ports.mailpit}`;
+  return urls;
 }
 function computePreviewUrls(repoPath, agentId) {
-  const env3 = readHarnessEnv(repoPath);
+  const harnessRoot = resolveHarnessRoot(repoPath);
+  const session = readSlotRegistry(harnessRoot, agentId);
+  if (session?.previewUrls && Object.keys(session.previewUrls).length > 0) {
+    return session.previewUrls;
+  }
+  const env3 = readHarnessEnv(harnessRoot);
+  if (session?.ports && Object.keys(session.ports).length > 0) {
+    return buildPreviewUrlsFromPorts(session.ports, env3);
+  }
+  const step = Number(env3.HARNESS_PORT_STEP ?? 10);
   const feBase = Number(env3.HARNESS_FE_BASE_PORT ?? 3e3);
   const apiBase = Number(env3.HARNESS_API_BASE_PORT ?? 8e3);
-  const fePort = feBase + agentId * 10;
-  const apiPort = apiBase + agentId * 10;
+  const fePort = feBase + agentId * step;
+  const apiPort = apiBase + agentId * step;
   const urls = {
     frontend: `http://localhost:${fePort}`,
     api: `http://localhost:${apiPort}`
@@ -27673,10 +28121,10 @@ function computePreviewUrls(repoPath, agentId) {
     urls.health = `http://localhost:${apiPort}${env3.HARNESS_HEALTH_CHECK_PATH}`;
   }
   if (env3.HARNESS_INFRA_BROWSER === "true") {
-    urls.browser = "http://localhost:13001";
+    urls.browser = `http://localhost:${env3.HARNESS_BROWSER_PORT_DEFAULT ?? 13001}`;
   }
   if (env3.HARNESS_INFRA_MAILPIT === "true") {
-    urls.mailpit = "http://localhost:18025";
+    urls.mailpit = `http://localhost:${env3.HARNESS_MAILPIT_WEB_PORT_DEFAULT ?? 18025}`;
   }
   return urls;
 }
@@ -27687,14 +28135,14 @@ function substituteAgentId(value, agentId) {
 function resolveStageScriptPath(repoPath, stage) {
   const harnessDir = getHarnessDir(repoPath);
   if (stage.script) {
-    return path17.join(harnessDir, stage.script);
+    return path20.join(harnessDir, stage.script);
   }
   if (stage.command) {
     const scriptName = stage.command.split(/\s+/)[0].replace(/^\.\/\.har\//, "").replace(/^\.\//, "");
-    return path17.join(harnessDir, scriptName);
+    return path20.join(harnessDir, scriptName);
   }
-  const stageScript = path17.join(harnessDir, "stages", `${stage.id}.sh`);
-  if (fs19.existsSync(stageScript)) {
+  const stageScript = path20.join(harnessDir, "stages", `${stage.id}.sh`);
+  if (fs22.existsSync(stageScript)) {
     return stageScript;
   }
   throw new Error(
@@ -27709,7 +28157,7 @@ function buildExecutionPlan(repoPath, stage, options) {
     ...harnessEnv,
     ...stage.env ?? {}
   };
-  const cwd = stage.cwd ? path17.resolve(resolvedRepo, stage.cwd) : resolvedRepo;
+  const cwd = stage.cwd ? path20.resolve(resolvedRepo, stage.cwd) : resolvedRepo;
   const extraArgs = options.args ?? [];
   const launchFlagArgs = [];
   if (stage.kind === "launch" && options.launchFlags) {
@@ -27717,6 +28165,7 @@ function buildExecutionPlan(repoPath, stage, options) {
     if (options.launchFlags.claude) launchFlagArgs.push("--claude");
     if (options.launchFlags.confirmReplace) launchFlagArgs.push("--replace");
     if (options.launchFlags.force) launchFlagArgs.push("--force");
+    if (options.launchFlags.resume) launchFlagArgs.push("--resume");
   }
   if (stage.command) {
     let shellCommand = substituteAgentId(stage.command, options.agentId);
@@ -27785,19 +28234,19 @@ var LocalScriptExecutor = class {
     const repoPath = resolveRepoPath(ctx.repoPath);
     const harnessDir = getHarnessDir(repoPath);
     const artifactsDirName = getArtifactsDir(repoPath);
-    const artifactsDir = path17.join(harnessDir, artifactsDirName);
-    if (!fs19.existsSync(artifactsDir)) return [];
+    const artifactsDir = path20.join(harnessDir, artifactsDirName);
+    if (!fs22.existsSync(artifactsDir)) return [];
     const entries = [];
     const walk = (dir, prefix) => {
-      for (const entry of fs19.readdirSync(dir, { withFileTypes: true })) {
-        const full = path17.join(dir, entry.name);
-        const relative2 = path17.join(prefix, entry.name);
+      for (const entry of fs22.readdirSync(dir, { withFileTypes: true })) {
+        const full = path20.join(dir, entry.name);
+        const relative2 = path20.join(prefix, entry.name);
         if (entry.isDirectory()) {
           walk(full, relative2);
           continue;
         }
         if (filter?.stageId && !relative2.includes(filter.stageId)) continue;
-        const stat = fs19.statSync(full);
+        const stat = fs22.statSync(full);
         entries.push({
           path: full,
           relativePath: relative2,
@@ -27813,7 +28262,7 @@ var LocalScriptExecutor = class {
 var localScriptExecutor = new LocalScriptExecutor();
 
 // src/core/control-sync.ts
-var path24 = __toESM(require("path"));
+var path30 = __toESM(require("path"));
 
 // src/core/control-config.ts
 var DEFAULT_CONTROL_API_URL = "http://localhost:3847";
@@ -27825,32 +28274,32 @@ function isControlEnabled() {
 }
 
 // src/core/control-registry.ts
-var fs20 = __toESM(require("fs"));
-var os2 = __toESM(require("os"));
-var path18 = __toESM(require("path"));
+var fs23 = __toESM(require("fs"));
+var os3 = __toESM(require("os"));
+var path21 = __toESM(require("path"));
 function getRegistryPath() {
   if (process.env.HAR_CONTROL_REGISTRY_PATH) {
-    return path18.resolve(process.env.HAR_CONTROL_REGISTRY_PATH);
+    return path21.resolve(process.env.HAR_CONTROL_REGISTRY_PATH);
   }
-  return path18.join(os2.homedir(), ".har", "repos.json");
+  return path21.join(os3.homedir(), ".har", "repos.json");
 }
 function readRegistry() {
   const registryPath = getRegistryPath();
   try {
-    if (!fs20.existsSync(registryPath)) return { repos: [] };
-    return JSON.parse(fs20.readFileSync(registryPath, "utf8"));
+    if (!fs23.existsSync(registryPath)) return { repos: [] };
+    return JSON.parse(fs23.readFileSync(registryPath, "utf8"));
   } catch {
     return { repos: [] };
   }
 }
 function writeRegistry(registry2) {
   const registryPath = getRegistryPath();
-  fs20.mkdirSync(path18.dirname(registryPath), { recursive: true });
-  fs20.writeFileSync(registryPath, JSON.stringify(registry2, null, 2) + "\n");
+  fs23.mkdirSync(path21.dirname(registryPath), { recursive: true });
+  fs23.writeFileSync(registryPath, JSON.stringify(registry2, null, 2) + "\n");
 }
 function recordRepoForControlSync(repoPath) {
   if (process.env.HAR_CONTROL_DISABLED === "true") return;
-  const resolved = path18.resolve(repoPath);
+  const resolved = path21.resolve(repoPath);
   if (!readManifest(resolved)) return;
   const registry2 = readRegistry();
   if (registry2.repos.includes(resolved)) return;
@@ -27859,7 +28308,7 @@ function recordRepoForControlSync(repoPath) {
 }
 function listRegisteredRepos() {
   const registry2 = readRegistry();
-  const kept = registry2.repos.filter((repoPath) => fs20.existsSync(repoPath) && readManifest(repoPath));
+  const kept = registry2.repos.filter((repoPath) => fs23.existsSync(repoPath) && readManifest(repoPath));
   if (kept.length !== registry2.repos.length) {
     writeRegistry({ repos: kept });
   }
@@ -27867,40 +28316,17 @@ function listRegisteredRepos() {
 }
 
 // src/core/slot-status.ts
-var fs23 = __toESM(require("fs"));
-var os4 = __toESM(require("os"));
-var path21 = __toESM(require("path"));
-var import_child_process3 = require("child_process");
+var fs28 = __toESM(require("fs"));
+var os6 = __toESM(require("os"));
+var path27 = __toESM(require("path"));
+var import_child_process7 = require("child_process");
 
 // src/core/runs.ts
 var crypto2 = __toESM(require("crypto"));
 var import_child_process2 = require("child_process");
-var fs22 = __toESM(require("fs"));
-var os3 = __toESM(require("os"));
-var path20 = __toESM(require("path"));
-
-// src/core/slot-registry.ts
-var fs21 = __toESM(require("fs"));
-var path19 = __toESM(require("path"));
-function getSlotRegistryDir(repoPath) {
-  return path19.join(getHarnessDir(repoPath), "slots");
-}
-function getSlotRegistryPath(repoPath, agentId) {
-  return path19.join(getSlotRegistryDir(repoPath), `agent-${agentId}.json`);
-}
-function readSlotRegistry(repoPath, agentId) {
-  const file = getSlotRegistryPath(repoPath, agentId);
-  if (!fs21.existsSync(file)) return void 0;
-  try {
-    const raw = JSON.parse(fs21.readFileSync(file, "utf8"));
-    const result = SlotRegistryEntrySchema.safeParse(raw);
-    return result.success ? result.data : void 0;
-  } catch {
-    return void 0;
-  }
-}
-
-// src/core/runs.ts
+var fs24 = __toESM(require("fs"));
+var os4 = __toESM(require("os"));
+var path22 = __toESM(require("path"));
 var RUNS_DIR = "runs";
 function gitCommonDir(cwd) {
   try {
@@ -27909,7 +28335,7 @@ function gitCommonDir(cwd) {
       encoding: "utf8",
       stdio: ["pipe", "pipe", "ignore"]
     }).trim();
-    return out ? path20.resolve(cwd, out) : void 0;
+    return out ? path22.resolve(cwd, out) : void 0;
   } catch {
     return void 0;
   }
@@ -27931,7 +28357,7 @@ function gitPrefix(cwd) {
   }
 }
 function getRunsDir(harnessRoot) {
-  return path20.join(getHarnessDir(harnessRoot), RUNS_DIR);
+  return path22.join(getHarnessDir(harnessRoot), RUNS_DIR);
 }
 function formatLocalDate(d2) {
   const y2 = d2.getFullYear();
@@ -27951,24 +28377,24 @@ function buildRunRelativePath(stageId, agentId, startedAt, runId, runsDir) {
   const timePart = formatLocalTime(started);
   const agentPart = agentId !== void 0 ? `_agent-${agentId}` : "";
   let filename = `${timePart}_${stageId}${agentPart}.json`;
-  const fullPath = path20.join(runsDir, dateFolder, filename);
-  if (fs22.existsSync(fullPath)) {
+  const fullPath = path22.join(runsDir, dateFolder, filename);
+  if (fs24.existsSync(fullPath)) {
     filename = `${timePart}_${stageId}${agentPart}-${runId.slice(0, 8)}.json`;
   }
-  return path20.join(dateFolder, filename);
+  return path22.join(dateFolder, filename);
 }
 function resolveRunFilePath(harnessRoot, run2) {
   if (run2.relativePath) {
-    return path20.join(getRunsDir(harnessRoot), run2.relativePath);
+    return path22.join(getRunsDir(harnessRoot), run2.relativePath);
   }
-  return path20.join(getRunsDir(harnessRoot), `${run2.runId}.json`);
+  return path22.join(getRunsDir(harnessRoot), `${run2.runId}.json`);
 }
 function collectRunFiles(runsDir) {
-  if (!fs22.existsSync(runsDir)) return [];
+  if (!fs24.existsSync(runsDir)) return [];
   const files = [];
   const walk = (dir) => {
-    for (const entry of fs22.readdirSync(dir, { withFileTypes: true })) {
-      const full = path20.join(dir, entry.name);
+    for (const entry of fs24.readdirSync(dir, { withFileTypes: true })) {
+      const full = path22.join(dir, entry.name);
       if (entry.isDirectory()) {
         walk(full);
       } else if (entry.name.endsWith(".json")) {
@@ -27982,30 +28408,30 @@ function collectRunFiles(runsDir) {
 function resolveAgentWorkDir(harnessRoot, agentId) {
   if (agentId === void 0) return void 0;
   const entry = readSlotRegistry(harnessRoot, agentId);
-  if (entry?.workDir && fs22.existsSync(entry.workDir)) return entry.workDir;
+  if (entry?.workDir && fs24.existsSync(entry.workDir)) return entry.workDir;
   const env3 = readHarnessEnv(harnessRoot);
-  const projectName = env3.HARNESS_PROJECT_NAME ?? path20.basename(harnessRoot);
-  const worktreeDir = path20.join(os3.homedir(), "worktrees", `${projectName}-agent-${agentId}`);
+  const projectName = env3.HARNESS_PROJECT_NAME ?? path22.basename(harnessRoot);
+  const worktreeDir = path22.join(os4.homedir(), "worktrees", `${projectName}-agent-${agentId}`);
   const relPrefix = gitPrefix(harnessRoot);
   const sessionEnvFiles = [];
-  const worktreesRoot = path20.join(os3.homedir(), "worktrees");
-  if (fs22.existsSync(worktreesRoot)) {
+  const worktreesRoot = path22.join(os4.homedir(), "worktrees");
+  if (fs24.existsSync(worktreesRoot)) {
     const suffix = `-har-agent-${agentId}-`;
-    for (const entry2 of fs22.readdirSync(worktreesRoot, { withFileTypes: true })) {
+    for (const entry2 of fs24.readdirSync(worktreesRoot, { withFileTypes: true })) {
       if (!entry2.isDirectory() || !entry2.name.includes(suffix)) continue;
-      const sessionDir = path20.join(worktreesRoot, entry2.name);
+      const sessionDir = path22.join(worktreesRoot, entry2.name);
       if (!sameGitCheckout(harnessRoot, sessionDir)) continue;
-      sessionEnvFiles.push(path20.join(sessionDir, relPrefix, `.env.agent.${agentId}`));
+      sessionEnvFiles.push(path22.join(sessionDir, relPrefix, `.env.agent.${agentId}`));
     }
   }
   const candidates = [
-    path20.join(worktreeDir, `.env.agent.${agentId}`),
-    path20.join(harnessRoot, `.env.agent.${agentId}`),
+    path22.join(worktreeDir, `.env.agent.${agentId}`),
+    path22.join(harnessRoot, `.env.agent.${agentId}`),
     ...sessionEnvFiles.sort()
   ];
   for (const envFile of candidates) {
-    if (!fs22.existsSync(envFile)) continue;
-    const content = fs22.readFileSync(envFile, "utf8");
+    if (!fs24.existsSync(envFile)) continue;
+    const content = fs24.readFileSync(envFile, "utf8");
     const match = content.match(/^REPO_ROOT=(.+)$/m);
     if (match) return match[1].trim();
   }
@@ -28017,11 +28443,11 @@ function createRun(ctx, meta) {
   const startedAt = (/* @__PURE__ */ new Date()).toISOString();
   const runId = crypto2.randomUUID();
   const relativePath = buildRunRelativePath(meta.stageId, meta.agentId, startedAt, runId, runsDir);
-  const runFilePath = path20.join(runsDir, relativePath);
-  fs22.mkdirSync(path20.dirname(runFilePath), { recursive: true });
+  const runFilePath = path22.join(runsDir, relativePath);
+  fs24.mkdirSync(path22.dirname(runFilePath), { recursive: true });
   const run2 = RunRecordSchema.parse({
     runId,
-    repoPath: path20.resolve(ctx.repoPath),
+    repoPath: path22.resolve(ctx.repoPath),
     harnessRoot,
     stageId: meta.stageId,
     kind: meta.kind,
@@ -28032,7 +28458,7 @@ function createRun(ctx, meta) {
     relativePath,
     trigger: ctx.trigger ?? "cli"
   });
-  fs22.writeFileSync(runFilePath, JSON.stringify(run2, null, 2) + "\n");
+  fs24.writeFileSync(runFilePath, JSON.stringify(run2, null, 2) + "\n");
   return run2;
 }
 function finishRun(repoPath, runId, update) {
@@ -28051,13 +28477,13 @@ function finishRun(repoPath, runId, update) {
     finishedAt: (/* @__PURE__ */ new Date()).toISOString()
   });
   const runPath = resolveRunFilePath(harnessRoot, finished);
-  fs22.writeFileSync(runPath, JSON.stringify(finished, null, 2) + "\n");
+  fs24.writeFileSync(runPath, JSON.stringify(finished, null, 2) + "\n");
   return finished;
 }
 function findRunRecord(harnessRoot, runId) {
   const runsDir = getRunsDir(harnessRoot);
   for (const filePath of collectRunFiles(runsDir)) {
-    const parsed = RunRecordSchema.safeParse(JSON.parse(fs22.readFileSync(filePath, "utf8")));
+    const parsed = RunRecordSchema.safeParse(JSON.parse(fs24.readFileSync(filePath, "utf8")));
     if (parsed.success && parsed.data.runId === runId) {
       return parsed.data;
     }
@@ -28069,10 +28495,10 @@ function getRun(repoPath, runId) {
 }
 function listRuns(repoPath, filter = {}) {
   const runsDir = getRunsDir(resolveHarnessRoot(repoPath));
-  if (!fs22.existsSync(runsDir)) return [];
+  if (!fs24.existsSync(runsDir)) return [];
   const runs = [];
   for (const filePath of collectRunFiles(runsDir)) {
-    const parsed = RunRecordSchema.safeParse(JSON.parse(fs22.readFileSync(filePath, "utf8")));
+    const parsed = RunRecordSchema.safeParse(JSON.parse(fs24.readFileSync(filePath, "utf8")));
     if (!parsed.success) continue;
     if (filter.stageId && parsed.data.stageId !== filter.stageId) continue;
     runs.push(parsed.data);
@@ -28084,11 +28510,552 @@ function listRuns(repoPath, filter = {}) {
   return runs;
 }
 
+// src/core/slot-preflight.ts
+var path26 = __toESM(require("path"));
+
+// src/core/control-port.ts
+var import_child_process4 = require("child_process");
+var fs26 = __toESM(require("fs"));
+var path24 = __toESM(require("path"));
+
+// src/core/slot-ports.ts
+var import_child_process3 = require("child_process");
+var fs25 = __toESM(require("fs"));
+var path23 = __toESM(require("path"));
+function portStep(env3) {
+  return Number(env3.HARNESS_PORT_STEP ?? 10);
+}
+function defaultAppPort(base, agentId, step) {
+  return base + agentId * step;
+}
+function slotPortLaneEnd(defaultPort, step) {
+  return defaultPort + step - 1;
+}
+function isPortInUse(port, host = "127.0.0.1") {
+  try {
+    (0, import_child_process3.execSync)(`bash -c 'exec 3<>/dev/tcp/${host}/${port}'`, { stdio: "ignore" });
+    return true;
+  } catch {
+    return false;
+  }
+}
+function pickFreePort(start, end) {
+  for (let port = start; port <= end; port++) {
+    if (!isPortInUse(port)) return port;
+  }
+  return void 0;
+}
+function allocatePort(defaultPort, scanStart, scanEnd) {
+  if (!isPortInUse(defaultPort)) return defaultPort;
+  return pickFreePort(scanStart, scanEnd);
+}
+function allocateAppPorts(repoPath, agentId) {
+  const harnessRoot = resolveHarnessRoot(repoPath);
+  const env3 = readHarnessEnv(harnessRoot);
+  const step = portStep(env3);
+  const feDefault = defaultAppPort(Number(env3.HARNESS_FE_BASE_PORT ?? 3e3), agentId, step);
+  const apiDefault = defaultAppPort(Number(env3.HARNESS_API_BASE_PORT ?? 8e3), agentId, step);
+  const debugDefault = 9200 + agentId * step;
+  const frontend = allocatePort(feDefault, feDefault, slotPortLaneEnd(feDefault, step));
+  const api = allocatePort(apiDefault, apiDefault, slotPortLaneEnd(apiDefault, step));
+  const debug2 = allocatePort(debugDefault, debugDefault, debugDefault + step - 1);
+  if (frontend === void 0) {
+    return { error: `No free frontend port in range ${feDefault}-${slotPortLaneEnd(feDefault, step)}` };
+  }
+  if (api === void 0) {
+    return { error: `No free API port in range ${apiDefault}-${slotPortLaneEnd(apiDefault, step)}` };
+  }
+  if (debug2 === void 0) {
+    return { error: `No free debug port in range ${debugDefault}-${debugDefault + step - 1}` };
+  }
+  return {
+    frontend,
+    api,
+    debug: debug2,
+    allocated: frontend !== feDefault || api !== apiDefault || debug2 !== debugDefault
+  };
+}
+function harnessUsesPm2(repoPath) {
+  const harnessRoot = resolveHarnessRoot(repoPath);
+  return fs25.existsSync(path23.join(harnessRoot, ".har", "ecosystem.agent.template.cjs"));
+}
+
+// src/core/control-port.ts
+function parseControlHostPort(apiUrl = getControlApiUrl()) {
+  try {
+    const url = new URL(apiUrl);
+    if (url.port) return Number(url.port);
+    return url.protocol === "https:" ? 443 : 80;
+  } catch {
+    return 3847;
+  }
+}
+function portPublishedInDocker(ports, port) {
+  const re2 = new RegExp(`:${port}->|:${port}/`);
+  return re2.test(ports) || ports.includes(`0.0.0.0:${port}`);
+}
+function dockerOnPort(containers, port) {
+  return containers.find((c2) => portPublishedInDocker(c2.ports, port));
+}
+function controlContainerOnPort(containers, port) {
+  return containers.find(
+    (c2) => /control/i.test(c2.name) && portPublishedInDocker(c2.ports, port)
+  );
+}
+function listDockerContainers() {
+  try {
+    const raw = (0, import_child_process4.execSync)("docker ps --format {{.Names}}\\t{{.Ports}}", {
+      encoding: "utf8",
+      stdio: ["pipe", "pipe", "ignore"],
+      timeout: 3e3
+    });
+    return raw.split("\n").map((line) => line.trim()).filter(Boolean).map((line) => {
+      const tab = line.indexOf("	");
+      if (tab === -1) return { name: line, ports: "" };
+      return { name: line.slice(0, tab), ports: line.slice(tab + 1) };
+    });
+  } catch {
+    return [];
+  }
+}
+function formatControlPortBlocker(containerName, port, label) {
+  const suffix = label ? ` (${label})` : "";
+  return `har control up (container "${containerName}") occupies port ${port}${suffix}.`;
+}
+function formatControlDefaultPortWarning(containerName, defaultPort, allocatedPort) {
+  return `har control up holds port ${defaultPort} (container "${containerName}"). Harness will use port ${allocatedPort} instead. Run har control down to reclaim the default port.`;
+}
+function controlDefaultPortWarnings(containers, defaultFrontendPort, allocatedFrontend) {
+  if (allocatedFrontend === defaultFrontendPort) return [];
+  const control = controlContainerOnPort(containers, defaultFrontendPort);
+  if (!control) return [];
+  return [formatControlDefaultPortWarning(control.name, defaultFrontendPort, allocatedFrontend)];
+}
+function inspectControlUpReadiness(repoPath) {
+  const resolved = path24.resolve(repoPath);
+  const port = parseControlHostPort();
+  const containers = listDockerContainers();
+  const control = controlContainerOnPort(containers, port);
+  const warnings = [];
+  const controlHarnessDir = path24.join(resolved, "control", ".har");
+  const harnessSlot1Active = fs26.existsSync(controlHarnessDir) && readSlotRegistry(path24.join(resolved, "control"), 1)?.status === "active";
+  if (control) {
+    return {
+      warnings,
+      portInUse: true,
+      controlAlreadyRunning: true,
+      harnessSlot1Active
+    };
+  }
+  if (harnessSlot1Active) {
+    warnings.push(
+      `Mission Control harness slot 1 is active under control/.har (port ${port}). Stop it with: cd control && har env teardown 1 \u2014 or use har control up only when the harness is down.`
+    );
+  }
+  const portBusy = isPortInUse(port);
+  if (portBusy) {
+    const occupant = dockerOnPort(containers, port);
+    const who = occupant ? `container "${occupant.name}"` : "another process";
+    warnings.push(
+      `Port ${port} is already in use by ${who}. har control up needs this port \u2014 free it first.`
+    );
+  }
+  return {
+    warnings,
+    portInUse: portBusy,
+    controlAlreadyRunning: false,
+    harnessSlot1Active
+  };
+}
+
+// src/core/slot-launch-guard-occupied.ts
+var fs27 = __toESM(require("fs"));
+var os5 = __toESM(require("os"));
+var path25 = __toESM(require("path"));
+var import_child_process5 = require("child_process");
+function runGit(cwd, args) {
+  try {
+    return (0, import_child_process5.execSync)(`git ${args}`, {
+      cwd,
+      encoding: "utf8",
+      stdio: ["pipe", "pipe", "ignore"]
+    }).trim();
+  } catch {
+    return void 0;
+  }
+}
+function worktreeDirty(worktreePath) {
+  const porcelain = runGit(worktreePath, "status --porcelain");
+  return porcelain !== void 0 && porcelain.length > 0;
+}
+function gitCommonDir2(cwd) {
+  const out = runGit(cwd, "rev-parse --git-common-dir");
+  return out ? path25.resolve(cwd, out) : void 0;
+}
+function sameGitCheckout2(a2, b2) {
+  const left2 = gitCommonDir2(a2);
+  const right2 = gitCommonDir2(b2);
+  return left2 !== void 0 && right2 !== void 0 && left2 === right2;
+}
+function discoverWorktree(harnessRoot, agentId, projectName) {
+  const session = readSlotRegistry(harnessRoot, agentId);
+  if (session?.worktreePath && fs27.existsSync(session.worktreePath)) {
+    return session.worktreePath;
+  }
+  const legacy = path25.join(os5.homedir(), "worktrees", `${projectName}-agent-${agentId}`);
+  if (fs27.existsSync(legacy) && sameGitCheckout2(harnessRoot, legacy)) return legacy;
+  const worktreesRoot = path25.join(os5.homedir(), "worktrees");
+  if (!fs27.existsSync(worktreesRoot)) return void 0;
+  const suffix = `-har-agent-${agentId}-`;
+  const relPrefix = runGit(harnessRoot, "rev-parse --show-prefix") ?? "";
+  for (const name of fs27.readdirSync(worktreesRoot)) {
+    if (!name.includes(suffix)) continue;
+    const candidate = path25.join(worktreesRoot, name);
+    if (!sameGitCheckout2(harnessRoot, candidate)) continue;
+    if (!fs27.existsSync(path25.join(candidate, relPrefix, `.env.agent.${agentId}`))) continue;
+    return candidate;
+  }
+  return void 0;
+}
+function collectOccupiedSlot(repoPath, agentId) {
+  const harnessRoot = resolveHarnessRoot(repoPath);
+  const env3 = readHarnessEnv(harnessRoot);
+  const projectName = env3.HARNESS_PROJECT_NAME ?? path25.basename(harnessRoot);
+  const session = readSlotRegistry(harnessRoot, agentId);
+  const worktreePath = discoverWorktree(harnessRoot, agentId, projectName);
+  const workDir = session?.workDir;
+  const envInWorkDir = workDir ? fs27.existsSync(path25.join(workDir, `.env.agent.${agentId}`)) : false;
+  const envInRoot = fs27.existsSync(path25.join(harnessRoot, `.env.agent.${agentId}`));
+  const envInWorktree = worktreePath ? fs27.existsSync(path25.join(worktreePath, `.env.agent.${agentId}`)) : false;
+  const active = session !== void 0 && session.status !== "completed" || envInWorkDir || envInRoot || envInWorktree;
+  if (!active) return void 0;
+  const dirty = worktreePath ? worktreeDirty(worktreePath) : void 0;
+  return {
+    agentId,
+    active: true,
+    workDir: workDir ?? worktreePath,
+    worktreePath,
+    branch: session?.branch,
+    sessionStatus: session?.status,
+    lastError: session?.lastError,
+    sessionCreatedAt: session?.createdAt,
+    dirty,
+    harnessUsage: "none"
+  };
+}
+function formatOccupiedSlot(slot, resume) {
+  const lines = [
+    `Slot ${slot.agentId} is already in use.`,
+    slot.worktreePath ? `  Worktree: ${slot.worktreePath}` : void 0,
+    slot.branch ? `  Branch:   ${slot.branch}` : void 0,
+    slot.workDir ? `  Work dir: ${slot.workDir}` : void 0,
+    slot.sessionStatus ? `  Status:   ${slot.sessionStatus}` : void 0,
+    slot.lastError ? `  Error:    ${slot.lastError}` : void 0,
+    slot.sessionCreatedAt ? `  Since:    ${slot.sessionCreatedAt}` : void 0,
+    slot.dirty ? "  Git:      dirty (uncommitted changes \u2014 commit or use force to discard)" : "  Git:      clean",
+    ""
+  ];
+  if (resume || slot.sessionStatus === "failed" || slot.sessionStatus === "starting") {
+    lines.push(
+      "This session failed partway through launch. Resume without replacing:",
+      `  har env launch ${slot.agentId} --resume`,
+      `  har env recover ${slot.agentId}`,
+      `  ./.har/launch.sh ${slot.agentId} --resume`,
+      ""
+    );
+  }
+  lines.push(
+    "Replacing removes the worktree. The session branch is kept only if you committed.",
+    "Gitignored paths (state/, runs/, local clones) are NOT preserved.",
+    "",
+    "To replace: pass confirmReplace=true (MCP), --replace (CLI), or answer y at the prompt.",
+    "If the worktree is dirty, also pass force=true / --force after explicit user approval."
+  );
+  return lines.filter(Boolean).join("\n");
+}
+function checkLaunchGuard(repoPath, agentId, options = {}) {
+  const slot = collectOccupiedSlot(repoPath, agentId);
+  if (!slot?.active) {
+    return { allowed: true };
+  }
+  const harnessRoot = resolveHarnessRoot(repoPath);
+  const session = readSlotRegistry(harnessRoot, agentId);
+  if (options.resume) {
+    if (!isSlotResumable(session)) {
+      return {
+        allowed: false,
+        blocked: true,
+        slot,
+        reason: [
+          `Slot ${agentId} is not resumable (status=${session?.status ?? "none"}).`,
+          "Only failed or starting sessions can be resumed.",
+          "Use a normal launch with --replace to start fresh."
+        ].join("\n")
+      };
+    }
+    return { allowed: true, slot };
+  }
+  if (isSlotResumable(session) && !options.confirmReplace) {
+    return {
+      allowed: false,
+      blocked: true,
+      slot,
+      reason: formatOccupiedSlot(slot)
+    };
+  }
+  if (!options.confirmReplace) {
+    return {
+      allowed: false,
+      blocked: true,
+      slot,
+      reason: formatOccupiedSlot(slot)
+    };
+  }
+  if (slot.dirty && !options.force) {
+    return {
+      allowed: false,
+      blocked: true,
+      slot,
+      reason: [
+        formatOccupiedSlot(slot),
+        "",
+        "The occupied worktree has uncommitted changes.",
+        "Pass force=true / --force to discard them (only after explicit user approval)."
+      ].join("\n")
+    };
+  }
+  return { allowed: true, slot };
+}
+
+// src/core/slot-preflight.ts
+var import_child_process6 = require("child_process");
+function listPm2Processes() {
+  try {
+    const raw = (0, import_child_process6.execSync)("npx --yes pm2 jlist", {
+      encoding: "utf8",
+      stdio: ["pipe", "pipe", "ignore"],
+      timeout: 3e3
+    });
+    const procs = JSON.parse(raw);
+    return Array.isArray(procs) ? procs : void 0;
+  } catch {
+    return void 0;
+  }
+}
+function detectForeignPm2(projectName, agentId, procs) {
+  if (!procs) return void 0;
+  const slotPrefix = `har-${projectName}-agent-${agentId}-`;
+  const legacyPrefix = `agent-${agentId}-`;
+  const foreign = procs.filter(
+    (p2) => p2.name && (p2.name.startsWith("har-") && p2.name.includes(`-agent-${agentId}-`) && !p2.name.startsWith(slotPrefix) || p2.name.startsWith(legacyPrefix) && !p2.name.startsWith("har-"))
+  );
+  if (foreign.length === 0) return void 0;
+  return {
+    processes: foreign.map((p2) => ({
+      name: p2.name,
+      cwd: p2.pm2_env?.pm_cwd ?? p2.pm2_env?.cwd
+    }))
+  };
+}
+function infraEnabled(env3, service) {
+  return ` ${env3.HARNESS_INFRA_SERVICES ?? ""} `.includes(` ${service} `);
+}
+function checkInfraPort(env3, varName, defaultPort, scanStart, scanEnd) {
+  const current = env3[varName] ? Number(env3[varName]) : void 0;
+  if (current !== void 0 && !isPortInUse(current)) {
+    return { port: current };
+  }
+  if (current !== void 0 && isPortInUse(current)) {
+    const alt = pickFreePort(scanStart, scanEnd);
+    if (alt !== void 0) return { port: alt };
+    return { error: `No free ${varName} port in range ${scanStart}-${scanEnd}` };
+  }
+  const port = pickFreePort(defaultPort, scanEnd) ?? pickFreePort(scanStart, scanEnd);
+  if (port === void 0) {
+    return { error: `No free ${varName} port in range ${scanStart}-${scanEnd}` };
+  }
+  return { port };
+}
+function inspectSlotReadiness(repoPath, agentId, options = {}) {
+  const harnessRoot = resolveHarnessRoot(repoPath);
+  const env3 = readHarnessEnv(harnessRoot);
+  const projectName = env3.HARNESS_PROJECT_NAME ?? path26.basename(harnessRoot);
+  const usesPm2 = harnessUsesPm2(repoPath);
+  const blockers = [];
+  const remediations = [];
+  const warnings = [];
+  const ports = {};
+  const session = readSlotRegistry(harnessRoot, agentId);
+  const guard = options.occupied !== void 0 ? options.occupied.active ? options.resume && isSlotResumable(session) ? { allowed: true } : !options.confirmReplace ? {
+    allowed: false,
+    blocked: true,
+    reason: `Slot ${agentId} is already in use.`
+  } : options.occupied.dirty && !options.force ? {
+    allowed: false,
+    blocked: true,
+    reason: `Slot ${agentId} worktree has uncommitted changes.`
+  } : { allowed: true } : { allowed: true } : checkLaunchGuard(repoPath, agentId, options);
+  if (!guard.allowed) {
+    const resumable = isSlotResumable(session);
+    blockers.push({
+      code: options.occupied?.dirty ? "slot_dirty" : resumable ? "slot_resumable" : "slot_occupied",
+      message: guard.reason ?? `Slot ${agentId} is occupied.`,
+      remediation: resumable ? `Resume the partial launch: har env launch ${agentId} --resume (or har env recover ${agentId})` : guard.slot?.dirty ? "Commit changes in the worktree, or pass --force after explicit user approval." : "Pass --replace (CLI), confirmReplace=true (MCP), or answer y at the launch prompt."
+    });
+    remediations.push(
+      resumable ? `har env launch ${agentId} --resume` : guard.slot?.dirty ? "har env preflight <id> --replace --force" : "har env preflight <id> --replace"
+    );
+  }
+  const pm2Procs = usesPm2 ? options.pm2Processes !== void 0 ? options.pm2Processes : listPm2Processes() : void 0;
+  const foreign = usesPm2 ? detectForeignPm2(projectName, agentId, pm2Procs) : void 0;
+  if (foreign) {
+    const names = foreign.processes.map((p2) => p2.name).join(", ");
+    blockers.push({
+      code: "foreign_pm2",
+      message: `Foreign PM2 processes match agent ${agentId}: ${names}`,
+      remediation: "Stop the other harness session (./.har/teardown.sh in that repo) or use a different agent slot.",
+      details: { processes: foreign.processes }
+    });
+    remediations.push("Inspect with: npx pm2 jlist | grep agent-" + agentId);
+  }
+  if (usesPm2 && pm2Procs) {
+    const slotPrefix = `har-${projectName}-agent-${agentId}-`;
+    const owned = pm2Procs.filter((p2) => p2.name?.startsWith(slotPrefix));
+    if (owned.length > 0 && !session) {
+      blockers.push({
+        code: "registry_missing",
+        message: `PM2 processes exist for ${projectName} agent ${agentId} but the slot registry is missing.`,
+        remediation: "Run teardown in this harness or delete PM2 processes manually, then relaunch."
+      });
+    }
+    if (owned.length > 0 && session?.projectName && session.projectName !== projectName) {
+      blockers.push({
+        code: "project_mismatch",
+        message: `Slot registry projectName=${session.projectName} does not match harness ${projectName}.`,
+        remediation: "Teardown the stale session and relaunch with --replace."
+      });
+    }
+  }
+  let allocatedPorts = false;
+  if (usesPm2 && (options.allocatePorts ?? true)) {
+    const alloc = allocateAppPorts(repoPath, agentId);
+    if ("error" in alloc) {
+      blockers.push({
+        code: "ports_exhausted",
+        message: alloc.error,
+        remediation: "Free a port in the slot lane or stop the process/container using it."
+      });
+    } else {
+      ports.frontend = alloc.frontend;
+      ports.api = alloc.api;
+      ports.debug = alloc.debug;
+      allocatedPorts = alloc.allocated;
+      const containers = options.dockerContainers ?? listDockerContainers();
+      const feDefault = defaultAppPort(
+        Number(env3.HARNESS_FE_BASE_PORT ?? 3e3),
+        agentId,
+        portStep(env3)
+      );
+      warnings.push(...controlDefaultPortWarnings(containers, feDefault, alloc.frontend));
+      for (const [label, port] of Object.entries({ frontend: alloc.frontend, api: alloc.api })) {
+        const control = controlContainerOnPort(containers, port);
+        if (control) {
+          blockers.push({
+            code: "control_port_conflict",
+            message: formatControlPortBlocker(control.name, port, label),
+            remediation: "Run: har control down \u2014 or launch a different slot id.",
+            details: { container: control.name, port, label }
+          });
+          remediations.push("har control down");
+        } else {
+          const occupant = dockerOnPort(containers, port);
+          if (occupant && !occupant.name.startsWith(`har-${projectName}-`)) {
+            blockers.push({
+              code: "docker_port_conflict",
+              message: `Docker container "${occupant.name}" binds port ${port} (${label}).`,
+              remediation: `Stop the container: docker stop ${occupant.name}`,
+              details: { container: occupant.name, port, label }
+            });
+          }
+        }
+      }
+    }
+  }
+  if (infraEnabled(env3, "db")) {
+    const dbDefault = Number(env3.HARNESS_DB_PORT_DEFAULT ?? 15432);
+    const dbStart = Number(env3.HARNESS_DB_PORT_SCAN_START ?? dbDefault);
+    const dbEnd = Number(env3.HARNESS_DB_PORT_SCAN_END ?? dbDefault + 67);
+    const dbCheck = checkInfraPort(env3, "AGENT_DB_PORT", dbDefault, dbStart, dbEnd);
+    if (dbCheck.error) {
+      blockers.push({
+        code: "db_port_exhausted",
+        message: dbCheck.error,
+        remediation: `Free a port in ${dbStart}-${dbEnd} or stop har-*-db-1 containers from other projects.`
+      });
+    } else if (dbCheck.port !== void 0) {
+      ports.db = dbCheck.port;
+      const occupant = dockerOnPort(
+        options.dockerContainers ?? listDockerContainers(),
+        dbCheck.port
+      );
+      if (occupant && !occupant.name.startsWith(`har-${projectName}-`) && !occupant.name.includes("-db-")) {
+        blockers.push({
+          code: "db_port_conflict",
+          message: `Port ${dbCheck.port} (database) is held by "${occupant.name}".`,
+          remediation: `Stop the container or pick another slot.`,
+          details: { container: occupant.name, port: dbCheck.port }
+        });
+      }
+    }
+  }
+  const canLaunch = blockers.length === 0;
+  return {
+    canLaunch,
+    verdict: canLaunch ? "ready" : "blocked",
+    blockers,
+    remediations: [...new Set(remediations)],
+    ports: Object.keys(ports).length > 0 ? ports : void 0,
+    allocatedPorts: allocatedPorts || void 0,
+    warnings: warnings.length > 0 ? warnings : void 0
+  };
+}
+function formatPreflightReport(agentId, readiness) {
+  const lines = [];
+  if (readiness.canLaunch) {
+    lines.push(`Slot ${agentId}: ready to launch.`);
+    if (readiness.ports) {
+      const p2 = readiness.ports;
+      const parts = [
+        p2.frontend !== void 0 ? `frontend=${p2.frontend}` : void 0,
+        p2.api !== void 0 ? `api=${p2.api}` : void 0,
+        p2.debug !== void 0 ? `debug=${p2.debug}` : void 0,
+        p2.db !== void 0 ? `db=${p2.db}` : void 0
+      ].filter(Boolean);
+      if (parts.length) lines.push(`  Ports: ${parts.join(" ")}`);
+      if (readiness.allocatedPorts && !readiness.warnings?.length) {
+        lines.push("  (alternate ports selected \u2014 defaults were busy)");
+      }
+    }
+    if (readiness.warnings?.length) {
+      for (const w2 of readiness.warnings) {
+        lines.push(`  WARN: ${w2}`);
+      }
+    }
+    return lines.join("\n");
+  }
+  lines.push(`Slot ${agentId}: launch blocked.`);
+  for (const b2 of readiness.blockers) {
+    lines.push(`  [${b2.code}] ${b2.message}`);
+    if (b2.remediation) lines.push(`    \u2192 ${b2.remediation}`);
+  }
+  return lines.join("\n");
+}
+
 // src/core/slot-status.ts
 var BYPASS_WARNING_MS = 15 * 60 * 1e3;
 function readGitRemote(repoPath) {
   try {
-    const remote = (0, import_child_process3.execSync)("git remote get-url origin", {
+    const remote = (0, import_child_process7.execSync)("git remote get-url origin", {
       cwd: repoPath,
       encoding: "utf8",
       stdio: ["pipe", "pipe", "ignore"]
@@ -28098,9 +29065,9 @@ function readGitRemote(repoPath) {
     return void 0;
   }
 }
-function runGit(cwd, args) {
+function runGit2(cwd, args) {
   try {
-    return (0, import_child_process3.execSync)(`git ${args}`, {
+    return (0, import_child_process7.execSync)(`git ${args}`, {
       cwd,
       encoding: "utf8",
       stdio: ["pipe", "pipe", "ignore"]
@@ -28110,40 +29077,40 @@ function runGit(cwd, args) {
   }
 }
 function readWorktreeBranch(worktreePath) {
-  return runGit(worktreePath, "rev-parse --abbrev-ref HEAD");
+  return runGit2(worktreePath, "rev-parse --abbrev-ref HEAD");
 }
-function gitCommonDir2(cwd) {
-  const out = runGit(cwd, "rev-parse --git-common-dir");
-  return out ? path21.resolve(cwd, out) : void 0;
+function gitCommonDir3(cwd) {
+  const out = runGit2(cwd, "rev-parse --git-common-dir");
+  return out ? path27.resolve(cwd, out) : void 0;
 }
-function sameGitCheckout2(a2, b2) {
-  const left2 = gitCommonDir2(a2);
-  const right2 = gitCommonDir2(b2);
+function sameGitCheckout3(a2, b2) {
+  const left2 = gitCommonDir3(a2);
+  const right2 = gitCommonDir3(b2);
   return left2 !== void 0 && right2 !== void 0 && left2 === right2;
 }
 function gitPrefix2(cwd) {
-  const out = runGit(cwd, "rev-parse --show-prefix");
+  const out = runGit2(cwd, "rev-parse --show-prefix");
   return out ?? "";
 }
 function discoverSessionWorktreePath(harnessRoot, agentId) {
-  const worktreesRoot = path21.join(os4.homedir(), "worktrees");
-  if (!fs23.existsSync(worktreesRoot)) return void 0;
+  const worktreesRoot = path27.join(os6.homedir(), "worktrees");
+  if (!fs28.existsSync(worktreesRoot)) return void 0;
   const suffix = `-har-agent-${agentId}-`;
   const relPrefix = gitPrefix2(harnessRoot);
-  const matches = fs23.readdirSync(worktreesRoot, { withFileTypes: true }).filter((entry) => entry.isDirectory() && entry.name.includes(suffix)).map((entry) => path21.join(worktreesRoot, entry.name)).filter(
-    (candidate) => sameGitCheckout2(harnessRoot, candidate) && fs23.existsSync(path21.join(candidate, relPrefix, `.env.agent.${agentId}`))
+  const matches = fs28.readdirSync(worktreesRoot, { withFileTypes: true }).filter((entry) => entry.isDirectory() && entry.name.includes(suffix)).map((entry) => path27.join(worktreesRoot, entry.name)).filter(
+    (candidate) => sameGitCheckout3(harnessRoot, candidate) && fs28.existsSync(path27.join(candidate, relPrefix, `.env.agent.${agentId}`))
   );
   return matches.sort()[0];
 }
 function collectWorktreeDrift(harnessRoot, worktreePath, baseCommit) {
   const drift = {};
-  drift.detachedHead = runGit(worktreePath, "symbolic-ref -q HEAD") === void 0;
-  const porcelain = runGit(worktreePath, "status --porcelain");
+  drift.detachedHead = runGit2(worktreePath, "symbolic-ref -q HEAD") === void 0;
+  const porcelain = runGit2(worktreePath, "status --porcelain");
   if (porcelain !== void 0) drift.dirty = porcelain.length > 0;
   if (baseCommit) {
-    const ahead = runGit(worktreePath, `rev-list --count ${baseCommit}..HEAD`);
+    const ahead = runGit2(worktreePath, `rev-list --count ${baseCommit}..HEAD`);
     if (ahead !== void 0) drift.ahead = Number(ahead);
-    const behind = runGit(harnessRoot, `rev-list --count ${baseCommit}..HEAD`);
+    const behind = runGit2(harnessRoot, `rev-list --count ${baseCommit}..HEAD`);
     if (behind !== void 0) {
       drift.behind = Number(behind);
       drift.stale = drift.behind > 0;
@@ -28174,20 +29141,50 @@ function lastBuildPass(run2) {
   const build = data.verification?.stages?.find((s2) => s2.name === "build");
   return build?.pass;
 }
-function collectSlotStatus(harnessRoot, agentId, runs) {
+function listPm2Processes2() {
+  try {
+    const raw = (0, import_child_process7.execSync)("npx --yes pm2 jlist", {
+      encoding: "utf8",
+      stdio: ["pipe", "pipe", "ignore"],
+      timeout: 3e3
+    });
+    const procs = JSON.parse(raw);
+    return Array.isArray(procs) ? procs : void 0;
+  } catch {
+    return void 0;
+  }
+}
+function detectPm2Issue(projectName, agentId, session, procs) {
+  if (!procs) return void 0;
+  const slotPrefix = `har-${projectName}-agent-${agentId}-`;
+  const legacyPrefix = `agent-${agentId}-`;
+  const owned = procs.filter((p2) => p2.name?.startsWith(slotPrefix));
+  const foreign = procs.filter(
+    (p2) => p2.name && (p2.name.startsWith("har-") && p2.name.includes(`-agent-${agentId}-`) && !p2.name.startsWith(slotPrefix) || p2.name.startsWith(legacyPrefix) && !p2.name.startsWith("har-"))
+  );
+  if (foreign.length > 0) return "foreign_pm2";
+  if (owned.length > 0) {
+    if (!session) return "registry_missing";
+    if (session.projectName && session.projectName !== projectName) {
+      return "project_mismatch";
+    }
+  }
+  return void 0;
+}
+function collectSlotStatus(harnessRoot, agentId, runs, pm2Procs) {
   const env3 = readHarnessEnv(harnessRoot);
-  const projectName = env3.HARNESS_PROJECT_NAME ?? path21.basename(harnessRoot);
+  const projectName = env3.HARNESS_PROJECT_NAME ?? path27.basename(harnessRoot);
   const session = readSlotRegistry(harnessRoot, agentId);
-  const legacyWorktreePath = path21.join(
-    os4.homedir(),
+  const legacyWorktreePath = path27.join(
+    os6.homedir(),
     "worktrees",
     `${projectName}-agent-${agentId}`
   );
-  const worktreePath = session?.worktreePath && fs23.existsSync(session.worktreePath) ? session.worktreePath : fs23.existsSync(legacyWorktreePath) ? legacyWorktreePath : discoverSessionWorktreePath(harnessRoot, agentId);
+  const worktreePath = session?.worktreePath && fs28.existsSync(session.worktreePath) ? session.worktreePath : fs28.existsSync(legacyWorktreePath) ? legacyWorktreePath : discoverSessionWorktreePath(harnessRoot, agentId);
   const workDir = resolveAgentWorkDir(harnessRoot, agentId);
-  const envInWorkDir = workDir ? fs23.existsSync(path21.join(workDir, `.env.agent.${agentId}`)) : false;
-  const envInRoot = fs23.existsSync(path21.join(harnessRoot, `.env.agent.${agentId}`));
-  const envInWorktree = worktreePath ? fs23.existsSync(path21.join(worktreePath, `.env.agent.${agentId}`)) : false;
+  const envInWorkDir = workDir ? fs28.existsSync(path27.join(workDir, `.env.agent.${agentId}`)) : false;
+  const envInRoot = fs28.existsSync(path27.join(harnessRoot, `.env.agent.${agentId}`));
+  const envInWorktree = worktreePath ? fs28.existsSync(path27.join(worktreePath, `.env.agent.${agentId}`)) : false;
   const active = session !== void 0 && session.status !== "completed" || envInWorkDir || envInRoot || envInWorktree;
   const latest = latestRunForAgent(runs, agentId);
   const verifyRun = runs.find((r2) => r2.agentId === agentId && r2.stageId === "verify");
@@ -28200,6 +29197,12 @@ function collectSlotStatus(harnessRoot, agentId, runs) {
     }
   }
   const drift = worktreePath ? collectWorktreeDrift(harnessRoot, worktreePath, session?.baseCommit) : {};
+  const pm2Issue = detectPm2Issue(projectName, agentId, session, pm2Procs);
+  const readiness = inspectSlotReadiness(harnessRoot, agentId, {
+    allocatePorts: true,
+    occupied: { active, dirty: drift.dirty }
+  });
+  const resumeHint = session?.status === "failed" || session?.status === "starting" ? `har env launch ${agentId} --resume (alias: har env recover ${agentId})` : void 0;
   return {
     agentId,
     active,
@@ -28207,6 +29210,9 @@ function collectSlotStatus(harnessRoot, agentId, runs) {
     worktreePath,
     branch: session?.branch ?? (worktreePath ? readWorktreeBranch(worktreePath) : void 0),
     previewUrls,
+    ports: session?.ports,
+    pm2Issue,
+    readiness,
     harnessUsage: deriveHarnessUsage(latest, active),
     lastRunId: latest?.runId,
     lastRunAt: latest?.startedAt,
@@ -28220,6 +29226,7 @@ function collectSlotStatus(harnessRoot, agentId, runs) {
     purpose: session?.purpose,
     sessionStatus: session?.status,
     lastError: session?.lastError,
+    resumeHint,
     ...drift
   };
 }
@@ -28228,25 +29235,26 @@ function collectEnvironmentStatus(repoPath) {
   const runs = listRuns(harnessRoot, { limit: 200 });
   const manifest = readManifest(harnessRoot);
   const slotIds = getAgentSlotIds(harnessRoot);
+  const pm2Procs = listPm2Processes2();
   return {
-    repoPath: path21.resolve(repoPath),
+    repoPath: path27.resolve(repoPath),
     harnessRoot,
     gitRemote: readGitRemote(harnessRoot),
     profile: manifest?.profile,
-    slots: slotIds.map((id) => collectSlotStatus(harnessRoot, id, runs)),
+    slots: slotIds.map((id) => collectSlotStatus(harnessRoot, id, runs, pm2Procs)),
     generatedAt: (/* @__PURE__ */ new Date()).toISOString()
   };
 }
 
 // src/core/validations.ts
 var crypto3 = __toESM(require("crypto"));
-var fs25 = __toESM(require("fs"));
-var path23 = __toESM(require("path"));
+var fs30 = __toESM(require("fs"));
+var path29 = __toESM(require("path"));
 
 // src/core/change-batch.ts
-var fs24 = __toESM(require("fs"));
-var os5 = __toESM(require("os"));
-var path22 = __toESM(require("path"));
+var fs29 = __toESM(require("fs"));
+var os7 = __toESM(require("os"));
+var path28 = __toESM(require("path"));
 function git(checkoutDir, args, env3) {
   const result = run(`git ${args}`, { cwd: checkoutDir, env: env3 });
   if (result.code !== 0) {
@@ -28262,7 +29270,7 @@ function isCheckoutRoot(checkoutDir) {
   const toplevel = tryGit(checkoutDir, "rev-parse --show-toplevel");
   if (!toplevel) return false;
   try {
-    return fs24.realpathSync(toplevel) === fs24.realpathSync(checkoutDir);
+    return fs29.realpathSync(toplevel) === fs29.realpathSync(checkoutDir);
   } catch {
     return false;
   }
@@ -28284,7 +29292,7 @@ function isMergeOrRebaseInProgress(checkoutDir) {
   if (tryGit(checkoutDir, "rev-parse -q --verify MERGE_HEAD") !== void 0) return true;
   for (const dir of ["rebase-merge", "rebase-apply"]) {
     const gitPath = tryGit(checkoutDir, `rev-parse --git-path ${dir}`);
-    if (gitPath && fs24.existsSync(path22.resolve(checkoutDir, gitPath))) return true;
+    if (gitPath && fs29.existsSync(path28.resolve(checkoutDir, gitPath))) return true;
   }
   return false;
 }
@@ -28307,8 +29315,8 @@ function parseNameStatus(output) {
   return files;
 }
 function computeWorktreeSnapshot(checkoutDir) {
-  const tmpDir = fs24.mkdtempSync(path22.join(os5.tmpdir(), "har-idx-"));
-  const tmpIndex = path22.join(tmpDir, "index");
+  const tmpDir = fs29.mkdtempSync(path28.join(os7.tmpdir(), "har-idx-"));
+  const tmpIndex = path28.join(tmpDir, "index");
   const env3 = { GIT_INDEX_FILE: tmpIndex };
   try {
     const headTree = getHeadTree(checkoutDir);
@@ -28331,35 +29339,35 @@ function computeWorktreeSnapshot(checkoutDir) {
       changedFiles: parseNameStatus(diffOutput)
     };
   } finally {
-    fs24.rmSync(tmpDir, { recursive: true, force: true });
+    fs29.rmSync(tmpDir, { recursive: true, force: true });
   }
 }
 
 // src/core/validations.ts
 var VALIDATIONS_DIR = "validations";
 function getValidationsDir(checkoutDir) {
-  return path23.join(checkoutDir, ".har", VALIDATIONS_DIR);
+  return path29.join(checkoutDir, ".har", VALIDATIONS_DIR);
 }
 function validationPath(checkoutDir, treeHash) {
-  return path23.join(getValidationsDir(checkoutDir), `${treeHash}.json`);
+  return path29.join(getValidationsDir(checkoutDir), `${treeHash}.json`);
 }
 function writeRecord(checkoutDir, record2) {
   const dir = getValidationsDir(checkoutDir);
-  fs25.mkdirSync(dir, { recursive: true });
-  fs25.writeFileSync(
+  fs30.mkdirSync(dir, { recursive: true });
+  fs30.writeFileSync(
     validationPath(checkoutDir, record2.treeHash),
     `${JSON.stringify(record2, null, 2)}
 `
   );
 }
 function ensureValidationsIgnored(checkoutDir) {
-  const harDir = path23.join(checkoutDir, ".har");
-  if (!fs25.existsSync(harDir)) return;
-  const gitignorePath = path23.join(harDir, ".gitignore");
-  const content = fs25.existsSync(gitignorePath) ? fs25.readFileSync(gitignorePath, "utf8") : "";
+  const harDir = path29.join(checkoutDir, ".har");
+  if (!fs30.existsSync(harDir)) return;
+  const gitignorePath = path29.join(harDir, ".gitignore");
+  const content = fs30.existsSync(gitignorePath) ? fs30.readFileSync(gitignorePath, "utf8") : "";
   if (content.split("\n").some((line) => line.trim() === `${VALIDATIONS_DIR}/`)) return;
   const suffix = content.length === 0 || content.endsWith("\n") ? "" : "\n";
-  fs25.writeFileSync(gitignorePath, `${content}${suffix}${VALIDATIONS_DIR}/
+  fs30.writeFileSync(gitignorePath, `${content}${suffix}${VALIDATIONS_DIR}/
 `);
 }
 function recordValidation(input) {
@@ -28376,8 +29384,8 @@ function recordValidation(input) {
     treeHash: snapshot.treeHash,
     headSha: snapshot.headSha,
     branch: snapshot.branch,
-    workDir: path23.resolve(input.checkoutDir),
-    harnessRoot: path23.resolve(input.harnessRoot),
+    workDir: path29.resolve(input.checkoutDir),
+    harnessRoot: path29.resolve(input.harnessRoot),
     agentId: input.agentId,
     status: input.status,
     full: input.full,
@@ -28389,16 +29397,16 @@ function recordValidation(input) {
     committedAt: existing?.committedAt
   });
   writeRecord(input.checkoutDir, record2);
-  if (path23.resolve(input.harnessRoot) !== path23.resolve(input.checkoutDir)) {
+  if (path29.resolve(input.harnessRoot) !== path29.resolve(input.checkoutDir)) {
     writeRecord(input.harnessRoot, record2);
   }
   return record2;
 }
 function findValidation(checkoutDir, treeHash) {
   const file = validationPath(checkoutDir, treeHash);
-  if (!fs25.existsSync(file)) return void 0;
+  if (!fs30.existsSync(file)) return void 0;
   try {
-    return ValidationRecordSchema.parse(JSON.parse(fs25.readFileSync(file, "utf8")));
+    return ValidationRecordSchema.parse(JSON.parse(fs30.readFileSync(file, "utf8")));
   } catch {
     return void 0;
   }
@@ -28413,19 +29421,19 @@ function attachCommit(checkoutDir, treeHash, commitSha) {
     updatedAt: (/* @__PURE__ */ new Date()).toISOString()
   };
   writeRecord(checkoutDir, updated);
-  if (record2.harnessRoot && path23.resolve(record2.harnessRoot) !== path23.resolve(checkoutDir) && fs25.existsSync(path23.join(record2.harnessRoot, ".har"))) {
+  if (record2.harnessRoot && path29.resolve(record2.harnessRoot) !== path29.resolve(checkoutDir) && fs30.existsSync(path29.join(record2.harnessRoot, ".har"))) {
     writeRecord(record2.harnessRoot, updated);
   }
   return updated;
 }
 function listValidations(harnessRoot) {
   const dir = getValidationsDir(harnessRoot);
-  if (!fs25.existsSync(dir)) return [];
+  if (!fs30.existsSync(dir)) return [];
   const records = [];
-  for (const entry of fs25.readdirSync(dir)) {
+  for (const entry of fs30.readdirSync(dir)) {
     if (!entry.endsWith(".json")) continue;
     try {
-      records.push(ValidationRecordSchema.parse(JSON.parse(fs25.readFileSync(path23.join(dir, entry), "utf8"))));
+      records.push(ValidationRecordSchema.parse(JSON.parse(fs30.readFileSync(path29.join(dir, entry), "utf8"))));
     } catch {
     }
   }
@@ -28483,7 +29491,7 @@ async function waitForControlApi(apiUrl = getControlApiUrl(), timeoutMs = 6e4, i
   const deadline = Date.now() + timeoutMs;
   while (Date.now() < deadline) {
     if (await isControlApiReachable(apiUrl)) return true;
-    await new Promise((resolve24) => setTimeout(resolve24, intervalMs));
+    await new Promise((resolve26) => setTimeout(resolve26, intervalMs));
   }
   return false;
 }
@@ -28495,7 +29503,7 @@ async function syncAllKnownReposWithControl(options) {
   }
   const repoPaths = new Set(listRegisteredRepos());
   if (options?.cwd) {
-    const cwd = path24.resolve(options.cwd);
+    const cwd = path30.resolve(options.cwd);
     if (readManifest(cwd)) repoPaths.add(cwd);
   }
   try {
@@ -28503,7 +29511,7 @@ async function syncAllKnownReposWithControl(options) {
     if (listResponse.ok) {
       const repos = await listResponse.json();
       for (const repo of repos) {
-        const resolved = path24.resolve(repo.path);
+        const resolved = path30.resolve(repo.path);
         if (readManifest(resolved)) repoPaths.add(resolved);
       }
     }
@@ -28522,7 +29530,7 @@ async function syncAllKnownReposWithControl(options) {
   return { synced, failed };
 }
 async function registerRepoWithControl(options) {
-  const repoPath = path24.resolve(options.repoPath);
+  const repoPath = path30.resolve(options.repoPath);
   const apiUrl = options.apiUrl ?? getControlApiUrl();
   const manifest = readManifest(repoPath);
   const stagesRegistry = readStageRegistry(repoPath);
@@ -28535,7 +29543,7 @@ async function registerRepoWithControl(options) {
   return postJson(`${apiUrl}/api/repos`, body, options.dryRun);
 }
 async function syncRepoWithControl(options) {
-  const repoPath = path24.resolve(options.repoPath);
+  const repoPath = path30.resolve(options.repoPath);
   const apiUrl = options.apiUrl ?? getControlApiUrl();
   if (options.cloud) {
     const remote = createRemoteExecutor();
@@ -28563,7 +29571,7 @@ async function syncRepoWithControl(options) {
     const listResponse = await fetch(`${apiUrl}/api/repos`);
     if (!listResponse.ok) throw new Error("Failed to list repos from Control API");
     const repos = await listResponse.json();
-    const existing = repos.find((r2) => path24.resolve(r2.path) === repoPath);
+    const existing = repos.find((r2) => path30.resolve(r2.path) === repoPath);
     if (!existing) throw new Error(`Repo not registered: ${repoPath}`);
     await syncRepoRunsAndSlots(apiUrl, existing.id, repoPath, options.dryRun);
     return;
@@ -28619,53 +29627,19 @@ async function syncRepoWithControlAsync(repoPath) {
 }
 
 // src/core/slot-launch-guard.ts
-function formatOccupiedSlot(slot) {
-  const lines = [
-    `Slot ${slot.agentId} is already in use.`,
-    slot.worktreePath ? `  Worktree: ${slot.worktreePath}` : void 0,
-    slot.branch ? `  Branch:   ${slot.branch}` : void 0,
-    slot.workDir ? `  Work dir: ${slot.workDir}` : void 0,
-    slot.sessionStatus ? `  Status:   ${slot.sessionStatus}` : void 0,
-    slot.lastError ? `  Error:    ${slot.lastError}` : void 0,
-    slot.sessionCreatedAt ? `  Since:    ${slot.sessionCreatedAt}` : void 0,
-    slot.dirty ? "  Git:      dirty (uncommitted changes \u2014 commit or use force to discard)" : "  Git:      clean",
-    "",
-    "Replacing removes the worktree. The session branch is kept only if you committed.",
-    "Gitignored paths (state/, runs/, local clones) are NOT preserved.",
-    "",
-    "To replace: pass confirmReplace=true (MCP), --replace (CLI), or answer y at the prompt.",
-    "If the worktree is dirty, also pass force=true / --force after explicit user approval."
-  ];
-  return lines.filter(Boolean).join("\n");
-}
-function checkLaunchGuard(repoPath, agentId, options = {}) {
-  const status = collectEnvironmentStatus(repoPath);
-  const slot = status.slots.find((s2) => s2.agentId === agentId);
-  if (!slot?.active) {
-    return { allowed: true };
-  }
-  if (!options.confirmReplace) {
+function checkLaunchGuard2(repoPath, agentId, options = {}) {
+  const readiness = inspectSlotReadiness(repoPath, agentId, options);
+  if (!readiness.canLaunch) {
     return {
       allowed: false,
       blocked: true,
-      slot,
-      reason: formatOccupiedSlot(slot)
+      reason: formatPreflightReport(agentId, readiness),
+      slot: checkLaunchGuard(repoPath, agentId, options).slot,
+      readiness
     };
   }
-  if (slot.dirty && !options.force) {
-    return {
-      allowed: false,
-      blocked: true,
-      slot,
-      reason: [
-        formatOccupiedSlot(slot),
-        "",
-        "The occupied worktree has uncommitted changes.",
-        "Pass force=true / --force to discard them (only after explicit user approval)."
-      ].join("\n")
-    };
-  }
-  return { allowed: true, slot };
+  const occupied = checkLaunchGuard(repoPath, agentId, options);
+  return { allowed: true, slot: occupied.slot, readiness };
 }
 
 // src/core/run-service.ts
@@ -28751,11 +29725,26 @@ var RunService = class {
   listArtifacts(options) {
     return this.executor.listArtifacts({ repoPath: options.repoPath }, { stageId: options.stageId });
   }
-  async launchEnvironment(options) {
-    const guard = checkLaunchGuard(options.repoPath, options.agentId, {
+  async preflightEnvironment(options) {
+    const readiness = inspectSlotReadiness(options.repoPath, options.agentId, {
       confirmReplace: options.confirmReplace,
       force: options.force
     });
+    const report = formatPreflightReport(options.agentId, readiness);
+    return {
+      code: readiness.canLaunch ? 0 : 1,
+      stdout: report + "\n",
+      stderr: readiness.canLaunch ? "" : report + "\n",
+      readiness,
+      blocked: !readiness.canLaunch
+    };
+  }
+  async launchEnvironment(options) {
+    const guard = checkLaunchGuard2(options.repoPath, options.agentId, {
+      confirmReplace: options.confirmReplace,
+      force: options.force,
+      resume: options.resume
+    });
     if (!guard.allowed) {
       const slot = guard.slot;
       return {
@@ -28782,7 +29771,8 @@ var RunService = class {
         worktree: options.worktree,
         claude: options.claude,
         confirmReplace: options.confirmReplace,
-        force: options.force
+        force: options.force,
+        resume: options.resume
       },
       trigger: "cli"
     });
@@ -28953,6 +29943,7 @@ var defaultRunService = new RunService();
 var runStage = defaultRunService.runStage.bind(defaultRunService);
 var listArtifacts = defaultRunService.listArtifacts.bind(defaultRunService);
 var launchEnvironment = defaultRunService.launchEnvironment.bind(defaultRunService);
+var preflightEnvironment = defaultRunService.preflightEnvironment.bind(defaultRunService);
 var runVerification = defaultRunService.runVerification.bind(defaultRunService);
 var teardownEnvironment = defaultRunService.teardownEnvironment.bind(defaultRunService);
 var completeEnvironment = defaultRunService.completeEnvironment.bind(defaultRunService);
@@ -29044,8 +30035,30 @@ var envCommand = {
       type: "boolean",
       default: false,
       describe: "Discard uncommitted changes when replacing a dirty worktree (only after explicit approval)"
+    }).option("resume", {
+      type: "boolean",
+      default: false,
+      describe: "Resume a failed or partial launch without creating a new worktree"
     }),
     handleLaunch
+  ).command(
+    "recover <id>",
+    "Resume a failed or partial launch (alias for launch --resume)",
+    (y2) => y2.positional("id", { type: "number", describe: "Agent slot id (see .har/stages.json agentSlots)" }).option("repo", { type: "string", default: "." }),
+    handleRecover
+  ).command(
+    "preflight <id>",
+    "Check whether a slot can launch now (ports, PM2, Docker, occupied slot)",
+    (y2) => y2.positional("id", { type: "number", describe: "Agent slot id (see .har/stages.json agentSlots)" }).option("repo", { type: "string", default: "." }).option("json", { type: "boolean", default: false, describe: "Structured JSON output" }).option("replace", {
+      type: "boolean",
+      default: false,
+      describe: "Treat an occupied slot as replaceable (same as launch --replace)"
+    }).option("force", {
+      type: "boolean",
+      default: false,
+      describe: "Allow replacing a dirty worktree (only after explicit approval)"
+    }),
+    handlePreflight
   ).command(
     "verify <id>",
     "Run verification suite for an agent",
@@ -29094,12 +30107,12 @@ var envCommand = {
     ).demandCommand(1, "Use: runs list | runs get <runId>"),
     () => {
     }
-  ).demandCommand(1, "Please specify a subcommand: init, maintain, add-stage, launch, verify, complete, teardown, status, runs"),
+  ).demandCommand(1, "Please specify a subcommand: init, maintain, add-stage, launch, recover, verify, complete, teardown, status, runs"),
   handler: () => {
   }
 };
 async function handleInit(argv) {
-  const repoPath = path25.resolve(argv.repo);
+  const repoPath = path31.resolve(argv.repo);
   header("har env init");
   info(`Repository: ${repoPath}`);
   try {
@@ -29150,7 +30163,7 @@ async function handleInit(argv) {
   }
 }
 async function handleMaintain(argv) {
-  const repoPath = path25.resolve(argv.repo);
+  const repoPath = path31.resolve(argv.repo);
   header("har env maintain");
   info(`Repository: ${repoPath}`);
   try {
@@ -29172,20 +30185,36 @@ async function handleMaintain(argv) {
     info("Validating harness...");
     printValidation(result.validation);
     printDrift(result.drift);
-    if (!result.validation.pass) {
-      warn("Harness has validation errors after maintenance.");
-      process.exit(1);
+    if (result.bundle) {
+      printMaintainBundleSummary(result.bundle.report);
     }
-    if (argv.auto) {
-      await handleAgentMdProposal(repoPath, argv.yes);
-    } else if (argv.finalize) {
+    if (argv.finalize) {
+      if (!result.validation.pass) {
+        warn("Harness has validation errors \u2014 fix them before finalizing.");
+        process.exit(1);
+      }
       info("Manifest updated \u2014 generator version and file checksums recorded.");
+    } else if (argv.auto) {
+      if (!result.validation.pass) {
+        warn("Harness has validation errors after maintenance.");
+        process.exit(1);
+      }
+      await handleAgentMdProposal(repoPath, argv.yes);
     } else {
-      emitManualAdaptationPrompt(repoPath, "maintain");
+      if (!result.validation.pass) {
+        warn("Harness has validation errors \u2014 fix them before running --finalize.");
+      }
+      emitManualAdaptationPrompt(repoPath, "maintain", "default", result.bundle?.report);
       info("After your coding agent finishes adapting, record it with: har env maintain --finalize");
     }
     divider();
-    success("Harness updated!");
+    if (argv.finalize) {
+      success("Harness finalized!");
+    } else if (result.bundle) {
+      success("Maintenance bundle ready!");
+    } else {
+      success("Harness updated!");
+    }
     await handleCursorRule({
       repoPath,
       cursorRule: resolveCursorRuleFlag(argv.cursorRule, argv.noCursorRule),
@@ -29202,8 +30231,8 @@ function resolveCursorRuleFlag(cursorRule, noCursorRule) {
   if (cursorRule) return true;
   return void 0;
 }
-function emitManualAdaptationPrompt(repoPath, mode, profile = "default") {
-  const prompt = mode === "init" ? buildInitAdaptationPrompt(repoPath, profile) : buildMaintainAdaptationPrompt(repoPath);
+function emitManualAdaptationPrompt(repoPath, mode, profile = "default", bundleReport) {
+  const prompt = mode === "init" ? buildInitAdaptationPrompt(repoPath, profile) : buildMaintainAdaptationPrompt(repoPath, bundleReport);
   writeAdaptationPrompt(repoPath, prompt);
   process.stderr.write("\n");
   if (mode === "init") {
@@ -29212,14 +30241,18 @@ function emitManualAdaptationPrompt(repoPath, mode, profile = "default") {
     info("Review harness drift with your coding agent:");
   }
   info("  Paste the prompt below (also saved to .har/ADAPT-PROMPT.md)");
-  info("  TODO validation warnings are expected until adaptation is complete.");
+  if (mode === "init") {
+    info("  TODO validation warnings are expected until adaptation is complete.");
+  } else if (bundleReport) {
+    info("  Reference templates are in .har/maintain/templates/");
+  }
   printAdaptationPrompt(prompt);
 }
 async function handleAgentMdProposal(repoPath, autoYes) {
   if (autoYes) {
     const proposal = readAgentMdProposal(repoPath);
     if (proposal) {
-      writeFileSafe(path25.join(repoPath, "AGENT.md"), proposal.content);
+      writeFileSafe(path31.join(repoPath, "AGENT.md"), proposal.content);
       clearAgentMdProposal(repoPath);
       info("Applied AGENT.md proposal (--yes)");
     }
@@ -29228,7 +30261,7 @@ async function handleAgentMdProposal(repoPath, autoYes) {
   await promptApplyAgentMdProposal(repoPath);
 }
 async function handleAddStage(argv) {
-  const repoPath = path25.resolve(argv.repo);
+  const repoPath = path31.resolve(argv.repo);
   if (argv.template !== "playwright") {
     error(`Unknown stage template: ${argv.template ?? "(missing)"}. Available: playwright`);
     process.exit(1);
@@ -29256,47 +30289,67 @@ async function handleAddStage(argv) {
     process.exit(1);
   }
 }
+async function handlePreflight(argv) {
+  const repo = path31.resolve(argv.repo);
+  const agentId = validateAgentId(argv.id, repo);
+  const result = await preflightEnvironment({
+    repoPath: repo,
+    agentId,
+    confirmReplace: argv.replace,
+    force: argv.force
+  });
+  if (argv.json) {
+    const output = SlotReadinessSchema.parse(result.readiness);
+    process.stdout.write(JSON.stringify(output, null, 2) + "\n");
+    process.exit(result.code);
+    return;
+  }
+  if (result.stdout) process.stdout.write(result.stdout);
+  process.exit(result.code);
+}
 async function handleLaunch(argv) {
-  const repo = path25.resolve(argv.repo);
+  const repo = path31.resolve(argv.repo);
   const agentId = validateAgentId(argv.id, repo);
   let confirmReplace = argv.replace;
   let force = argv.force;
-  const guard = checkLaunchGuard(repo, agentId, { confirmReplace, force });
-  if (!guard.allowed && guard.blocked) {
-    if (!confirmReplace && process.stdin.isTTY && process.stdout.isTTY) {
-      warn("Occupied slot \u2014 review before replacing:");
-      console.error(guard.reason ?? "");
-      const readline4 = await import("readline");
-      const rl = readline4.createInterface({ input: process.stdin, output: process.stderr });
-      const answer = await new Promise((resolve24) => {
-        rl.question("Replace this slot? [y/N] ", resolve24);
-      });
-      rl.close();
-      if (!/^[Yy]$/.test(answer.trim())) {
-        error("Aborted \u2014 slot left unchanged.");
-        process.exit(2);
-      }
-      confirmReplace = true;
-    }
-  }
-  const guardAfterConfirm = checkLaunchGuard(repo, agentId, { confirmReplace, force });
-  if (!guardAfterConfirm.allowed && guardAfterConfirm.blocked && guardAfterConfirm.slot?.dirty) {
-    if (!force && process.stdin.isTTY && process.stdout.isTTY) {
-      warn("Worktree has uncommitted changes.");
-      const readline4 = await import("readline");
-      const rl = readline4.createInterface({ input: process.stdin, output: process.stderr });
-      const answer = await new Promise((resolve24) => {
-        rl.question("Discard uncommitted changes? [y/N] ", resolve24);
-      });
-      rl.close();
-      if (!/^[Yy]$/.test(answer.trim())) {
-        error("Aborted \u2014 uncommitted work preserved.");
+  if (!argv.resume) {
+    const guard = checkLaunchGuard2(repo, agentId, { confirmReplace, force });
+    if (!guard.allowed && guard.blocked) {
+      if (!confirmReplace && process.stdin.isTTY && process.stdout.isTTY) {
+        warn("Occupied slot \u2014 review before replacing:");
+        console.error(guard.reason ?? "");
+        const readline4 = await import("readline");
+        const rl = readline4.createInterface({ input: process.stdin, output: process.stderr });
+        const answer = await new Promise((resolve26) => {
+          rl.question("Replace this slot? [y/N] ", resolve26);
+        });
+        rl.close();
+        if (!/^[Yy]$/.test(answer.trim())) {
+          error("Aborted \u2014 slot left unchanged.");
+          process.exit(2);
+        }
+        confirmReplace = true;
+      }
+    }
+    const guardAfterConfirm = checkLaunchGuard2(repo, agentId, { confirmReplace, force });
+    if (!guardAfterConfirm.allowed && guardAfterConfirm.blocked && guardAfterConfirm.slot?.dirty) {
+      if (!force && process.stdin.isTTY && process.stdout.isTTY) {
+        warn("Worktree has uncommitted changes.");
+        const readline4 = await import("readline");
+        const rl = readline4.createInterface({ input: process.stdin, output: process.stderr });
+        const answer = await new Promise((resolve26) => {
+          rl.question("Discard uncommitted changes? [y/N] ", resolve26);
+        });
+        rl.close();
+        if (!/^[Yy]$/.test(answer.trim())) {
+          error("Aborted \u2014 uncommitted work preserved.");
+          process.exit(2);
+        }
+        force = true;
+      } else if (!force) {
+        error(guardAfterConfirm.reason ?? "Dirty worktree requires --force.");
         process.exit(2);
       }
-      force = true;
-    } else if (!force) {
-      error(guardAfterConfirm.reason ?? "Dirty worktree requires --force.");
-      process.exit(2);
     }
   }
   const result = await launchEnvironment({
@@ -29306,6 +30359,7 @@ async function handleLaunch(argv) {
     claude: argv.claude,
     confirmReplace,
     force,
+    resume: argv.resume,
     capture: false
   });
   if (result.blocked) {
@@ -29319,8 +30373,19 @@ async function handleLaunch(argv) {
   }
   process.exit(result.code);
 }
+async function handleRecover(argv) {
+  return handleLaunch({
+    id: argv.id,
+    repo: argv.repo,
+    worktree: true,
+    claude: false,
+    replace: false,
+    force: false,
+    resume: true
+  });
+}
 async function handleVerify(argv) {
-  const repo = path25.resolve(argv.repo);
+  const repo = path31.resolve(argv.repo);
   const agentId = validateAgentId(argv.id, repo);
   const result = await runVerification({
     repoPath: repo,
@@ -29332,7 +30397,7 @@ async function handleVerify(argv) {
   process.exit(result.code);
 }
 async function handleTeardown(argv) {
-  const repo = path25.resolve(argv.repo);
+  const repo = path31.resolve(argv.repo);
   const agentId = validateAgentId(argv.id, repo);
   const result = await teardownEnvironment({
     repoPath: repo,
@@ -29343,7 +30408,7 @@ async function handleTeardown(argv) {
   process.exit(result.code);
 }
 async function handleComplete(argv) {
-  const repo = path25.resolve(argv.repo);
+  const repo = path31.resolve(argv.repo);
   const agentId = validateAgentId(argv.id, repo);
   const result = await completeEnvironment({
     repoPath: repo,
@@ -29364,7 +30429,7 @@ async function handleComplete(argv) {
   process.exit(result.code);
 }
 async function handleStatus(argv) {
-  const repoPath = path25.resolve(argv.repo);
+  const repoPath = path31.resolve(argv.repo);
   if (argv.json) {
     const status = collectEnvironmentStatus(repoPath);
     const output = EnvironmentStatusSchema.parse(status);
@@ -29377,7 +30442,7 @@ async function handleStatus(argv) {
   });
 }
 async function handleRunsList(argv) {
-  const repoPath = path25.resolve(argv.repo);
+  const repoPath = path31.resolve(argv.repo);
   const runs = listRuns(repoPath, { stageId: argv.stage, limit: argv.limit });
   if (argv.json) {
     process.stdout.write(JSON.stringify({ runs }, null, 2) + "\n");
@@ -29394,7 +30459,7 @@ async function handleRunsList(argv) {
   }
 }
 async function handleRunsGet(argv) {
-  const run2 = getRun(path25.resolve(argv.repo), argv.runId);
+  const run2 = getRun(path31.resolve(argv.repo), argv.runId);
   if (!run2) {
     error(`Run not found: ${argv.runId}`);
     process.exit(1);
@@ -29429,10 +30494,26 @@ function printDrift(drift) {
   if (drift.extra.length > 0) {
     warn(`  Extra/stale files: ${drift.extra.join(", ")}`);
   }
-  if (!drift.generatorVersion.outdated && drift.checksumMismatch.length === 0 && drift.missing.length === 0 && drift.extra.length === 0) {
+  if (drift.missingPortVars.length > 0) {
+    warn(
+      `  Missing port documentation vars in harness.env: ${drift.missingPortVars.join(", ")}`
+    );
+    warn("  See maintain/templates/harness.env in the maintenance bundle.");
+  }
+  if (!drift.generatorVersion.outdated && drift.checksumMismatch.length === 0 && drift.missing.length === 0 && drift.extra.length === 0 && drift.missingPortVars.length === 0) {
     success("  Harness matches bundled templates");
   }
 }
+function printMaintainBundleSummary(report) {
+  const missing = report.actions.filter((a2) => a2.kind === "missing").length;
+  const drifted = report.actions.filter((a2) => a2.kind === "drift").length;
+  const stale = report.stale.length;
+  info(`Maintenance bundle: .har/maintain/`);
+  info(`  ${missing} missing, ${drifted} drifted, ${stale} stale`);
+  if (!report.validation.pass) {
+    warn(`  Validation: ${report.validation.errors.length} error(s) \u2014 blocks --finalize`);
+  }
+}
 function printNextSteps(auto2) {
   console.error("");
   console.error("  Read:         .har/README.md");
@@ -29451,30 +30532,11 @@ function printNextSteps(auto2) {
 }
 
 // src/cli/commands/control.ts
-var path28 = __toESM(require("path"));
+var path33 = __toESM(require("path"));
 
 // src/core/control-lifecycle.ts
-var import_child_process4 = require("child_process");
-var path27 = __toESM(require("path"));
-
-// src/core/package-version.ts
-var fs26 = __toESM(require("fs"));
-var path26 = __toESM(require("path"));
-function getHarPackageVersion() {
-  if (process.env.HAR_PACKAGE_VERSION) {
-    return process.env.HAR_PACKAGE_VERSION;
-  }
-  const candidates = [
-    path26.resolve(__dirname, "..", "package.json"),
-    path26.resolve(__dirname, "..", "..", "package.json")
-  ];
-  for (const packageJsonPath of candidates) {
-    if (!fs26.existsSync(packageJsonPath)) continue;
-    const pkg = JSON.parse(fs26.readFileSync(packageJsonPath, "utf8"));
-    return pkg.version;
-  }
-  throw new Error("Could not resolve @osfactory/har package.json for version lookup");
-}
+var import_child_process8 = require("child_process");
+var path32 = __toESM(require("path"));
 
 // src/core/control-image.ts
 var DEFAULT_CONTROL_IMAGE = "theosfactory/har-control";
@@ -29493,13 +30555,13 @@ function shouldBuildControlLocally() {
 
 // src/core/control-lifecycle.ts
 function resolveControlDir() {
-  return path27.resolve(__dirname, "..", "control");
+  return path32.resolve(__dirname, "..", "control");
 }
 function resolveControlComposeFiles(options) {
   const controlDir = resolveControlDir();
-  const files = [path27.join(controlDir, "docker-compose.yml")];
+  const files = [path32.join(controlDir, "docker-compose.yml")];
   if (options?.build ?? shouldBuildControlLocally()) {
-    files.push(path27.join(controlDir, "docker-compose.build.yml"));
+    files.push(path32.join(controlDir, "docker-compose.build.yml"));
   }
   return files;
 }
@@ -29514,7 +30576,7 @@ function runDockerCompose(args, options) {
   const controlDir = resolveControlDir();
   const composeFiles = resolveControlComposeFiles(options);
   const composeArgs = composeFiles.flatMap((file) => ["-f", file]);
-  const result = (0, import_child_process4.spawnSync)("docker", ["compose", ...composeArgs, ...args], {
+  const result = (0, import_child_process8.spawnSync)("docker", ["compose", ...composeArgs, ...args], {
     cwd: controlDir,
     stdio: "inherit",
     env: buildDockerComposeEnv()
@@ -29614,6 +30676,27 @@ var controlCommand = {
 };
 async function handleUp(argv) {
   header("har control up");
+  const readiness = inspectControlUpReadiness(process.cwd());
+  for (const message of readiness.warnings) {
+    warn(message);
+  }
+  if (readiness.controlAlreadyRunning) {
+    success(`Mission Control is already running at ${getControlApiUrl()}`);
+    if (!isControlEnabled()) return;
+    info("Syncing repositories with Mission Control...");
+    const { synced: synced2, failed: failed2, apiReady: apiReady2 } = await syncReposAfterControlStart(process.cwd());
+    if (!apiReady2) {
+      warn("Mission Control API did not become ready \u2014 run har control sync later");
+      return;
+    }
+    if (synced2 > 0) {
+      success(`Synced ${synced2} ${synced2 === 1 ? "repository" : "repositories"} with Mission Control`);
+    }
+    if (failed2 > 0) {
+      warn(`${failed2} ${failed2 === 1 ? "repository" : "repositories"} could not be synced`);
+    }
+    return;
+  }
   const { code, apiUrl, imageRef } = await startMissionControl({
     detach: argv.detach,
     build: argv.build
@@ -29647,7 +30730,7 @@ async function handleDown() {
   process.exit(code);
 }
 async function handleRegister(argv) {
-  const repoPath = path28.resolve(argv.repo);
+  const repoPath = path33.resolve(argv.repo);
   header("har control register");
   info(`Repository: ${repoPath}`);
   try {
@@ -29667,7 +30750,7 @@ async function handleRegister(argv) {
   }
 }
 async function handleSync(argv) {
-  const repoPath = path28.resolve(argv.repo);
+  const repoPath = path33.resolve(argv.repo);
   try {
     await syncRepoWithControl({
       repoPath,
@@ -29706,7 +30789,7 @@ async function handleWatch(argv) {
   };
   const tick = async () => {
     if (argv.repo) {
-      await syncOne(path28.resolve(argv.repo));
+      await syncOne(path33.resolve(argv.repo));
       return;
     }
     try {
@@ -29737,12 +30820,12 @@ async function handleLogin(argv) {
 }
 
 // src/cli/commands/hooks.ts
-var path30 = __toESM(require("path"));
+var path35 = __toESM(require("path"));
 
 // src/core/hooks.ts
-var fs27 = __toESM(require("fs"));
-var os6 = __toESM(require("os"));
-var path29 = __toESM(require("path"));
+var fs31 = __toESM(require("fs"));
+var os8 = __toESM(require("os"));
+var path34 = __toESM(require("path"));
 var MARKER_START = "# >>> har commit gate (managed by `har hooks`) >>>";
 var MARKER_END = "# <<< har commit gate <<<";
 var PRE_COMMIT_BLOCK = [
@@ -29767,7 +30850,7 @@ function resolveCheckoutRoot(cwd) {
 function resolveHooksDir(checkoutDir) {
   const hooksPath = tryGit2(checkoutDir, "rev-parse --git-path hooks");
   if (!hooksPath) throw new Error(`Not a git checkout: ${checkoutDir}`);
-  return path29.resolve(checkoutDir, hooksPath);
+  return path34.resolve(checkoutDir, hooksPath);
 }
 function getConfiguredHooksPath(checkoutDir) {
   return tryGit2(checkoutDir, "config core.hooksPath") || void 0;
@@ -29775,9 +30858,9 @@ function getConfiguredHooksPath(checkoutDir) {
 function defaultHarInvocation() {
   const entry = process.argv[1];
   if (entry && entry.endsWith(".js")) {
-    return `"${process.execPath}" "${path29.resolve(entry)}"`;
+    return `"${process.execPath}" "${path34.resolve(entry)}"`;
   }
-  if (entry) return `"${path29.resolve(entry)}"`;
+  if (entry) return `"${path34.resolve(entry)}"`;
   return "har";
 }
 function buildHookScript(harInvocation, subcommand, failOpenNotice) {
@@ -29798,40 +30881,40 @@ exit 0
 `;
 }
 function upsertMarkedBlock(filePath, block) {
-  if (!fs27.existsSync(filePath)) {
-    fs27.writeFileSync(filePath, `#!/bin/sh
+  if (!fs31.existsSync(filePath)) {
+    fs31.writeFileSync(filePath, `#!/bin/sh
 ${block}
 `, { mode: 493 });
     return "created";
   }
-  const content = fs27.readFileSync(filePath, "utf8");
+  const content = fs31.readFileSync(filePath, "utf8");
   if (content.includes(MARKER_START)) {
     const pattern = new RegExp(
       `${escapeRegExp(MARKER_START)}[\\s\\S]*?${escapeRegExp(MARKER_END)}`
     );
-    fs27.writeFileSync(filePath, content.replace(pattern, block));
-    fs27.chmodSync(filePath, 493);
+    fs31.writeFileSync(filePath, content.replace(pattern, block));
+    fs31.chmodSync(filePath, 493);
     return "updated";
   }
   const suffix = content.endsWith("\n") ? "" : "\n";
-  fs27.writeFileSync(filePath, `${content}${suffix}
+  fs31.writeFileSync(filePath, `${content}${suffix}
 ${block}
 `);
-  fs27.chmodSync(filePath, 493);
+  fs31.chmodSync(filePath, 493);
   return "appended";
 }
 function removeMarkedBlock(filePath) {
-  if (!fs27.existsSync(filePath)) return false;
-  const content = fs27.readFileSync(filePath, "utf8");
+  if (!fs31.existsSync(filePath)) return false;
+  const content = fs31.readFileSync(filePath, "utf8");
   if (!content.includes(MARKER_START)) return false;
   const pattern = new RegExp(
     `\\n?${escapeRegExp(MARKER_START)}[\\s\\S]*?${escapeRegExp(MARKER_END)}\\n?`
   );
   const stripped = content.replace(pattern, "\n");
   if (stripped.replace(/^#!\/bin\/sh\n?/, "").trim() === "") {
-    fs27.rmSync(filePath);
+    fs31.rmSync(filePath);
   } else {
-    fs27.writeFileSync(filePath, stripped);
+    fs31.writeFileSync(filePath, stripped);
   }
   return true;
 }
@@ -29853,20 +30936,20 @@ Or re-run with --force to write into that directory anyway.`
     );
   }
   const hooksDir = resolveHooksDir(checkout);
-  fs27.mkdirSync(hooksDir, { recursive: true });
+  fs31.mkdirSync(hooksDir, { recursive: true });
   const invocation = options.harInvocation ?? defaultHarInvocation();
-  fs27.writeFileSync(
-    path29.join(hooksDir, "har-pre-commit"),
+  fs31.writeFileSync(
+    path34.join(hooksDir, "har-pre-commit"),
     buildHookScript(invocation, "check", "har: binary not found; skipping commit gate (reinstall with har hooks install)"),
     { mode: 493 }
   );
-  fs27.writeFileSync(
-    path29.join(hooksDir, "har-post-commit"),
+  fs31.writeFileSync(
+    path34.join(hooksDir, "har-post-commit"),
     buildHookScript(invocation, "record-commit", "har: binary not found; skipping commit association"),
     { mode: 493 }
   );
-  const preCommit = upsertMarkedBlock(path29.join(hooksDir, "pre-commit"), PRE_COMMIT_BLOCK);
-  const postCommit = upsertMarkedBlock(path29.join(hooksDir, "post-commit"), POST_COMMIT_BLOCK);
+  const preCommit = upsertMarkedBlock(path34.join(hooksDir, "pre-commit"), PRE_COMMIT_BLOCK);
+  const postCommit = upsertMarkedBlock(path34.join(hooksDir, "post-commit"), POST_COMMIT_BLOCK);
   ensureValidationsIgnored(checkout);
   return { hooksDir, preCommit, postCommit };
 }
@@ -29875,12 +30958,12 @@ function uninstallHooks(repoPath) {
   if (!checkout) throw new Error(`Not a git repository: ${repoPath}`);
   const hooksDir = resolveHooksDir(checkout);
   let removed = false;
-  removed = removeMarkedBlock(path29.join(hooksDir, "pre-commit")) || removed;
-  removed = removeMarkedBlock(path29.join(hooksDir, "post-commit")) || removed;
+  removed = removeMarkedBlock(path34.join(hooksDir, "pre-commit")) || removed;
+  removed = removeMarkedBlock(path34.join(hooksDir, "post-commit")) || removed;
   for (const file of ["har-pre-commit", "har-post-commit"]) {
-    const full = path29.join(hooksDir, file);
-    if (fs27.existsSync(full)) {
-      fs27.rmSync(full);
+    const full = path34.join(hooksDir, file);
+    if (fs31.existsSync(full)) {
+      fs31.rmSync(full);
       removed = true;
     }
   }
@@ -29897,9 +30980,9 @@ function getCommitGateConfig(checkoutDir) {
 function isAgentWorktree(checkoutDir) {
   const branch = getCurrentBranch(checkoutDir);
   if (branch && /^har-agent-\d+$/.test(branch)) return true;
-  const worktreesRoot = path29.join(os6.homedir(), "worktrees");
-  const resolved = path29.resolve(checkoutDir);
-  return resolved.startsWith(`${worktreesRoot}${path29.sep}`) && /-agent-\d+$/.test(path29.basename(resolved));
+  const worktreesRoot = path34.join(os8.homedir(), "worktrees");
+  const resolved = path34.resolve(checkoutDir);
+  return resolved.startsWith(`${worktreesRoot}${path34.sep}`) && /-agent-\d+$/.test(path34.basename(resolved));
 }
 function resolveEffectiveMode(checkoutDir, gate) {
   if (!gate.enabled) return "off";
@@ -29912,15 +30995,15 @@ function getHooksStatus(repoPath) {
   const hooksDir = resolveHooksDir(checkout);
   const gate = getCommitGateConfig(checkout);
   const hasBlock = (name) => {
-    const file = path29.join(hooksDir, name);
-    return fs27.existsSync(file) && fs27.readFileSync(file, "utf8").includes(MARKER_START);
+    const file = path34.join(hooksDir, name);
+    return fs31.existsSync(file) && fs31.readFileSync(file, "utf8").includes(MARKER_START);
   };
   return {
     checkout,
     hooksDir,
     configuredHooksPath: getConfiguredHooksPath(checkout),
-    preCommitInstalled: hasBlock("pre-commit") && fs27.existsSync(path29.join(hooksDir, "har-pre-commit")),
-    postCommitInstalled: hasBlock("post-commit") && fs27.existsSync(path29.join(hooksDir, "har-post-commit")),
+    preCommitInstalled: hasBlock("pre-commit") && fs31.existsSync(path34.join(hooksDir, "har-pre-commit")),
+    postCommitInstalled: hasBlock("post-commit") && fs31.existsSync(path34.join(hooksDir, "har-post-commit")),
     gate,
     effectiveMode: resolveEffectiveMode(checkout, gate)
   };
@@ -29931,7 +31014,7 @@ function checkCommitGate(cwd) {
   }
   const checkout = resolveCheckoutRoot(cwd);
   if (!checkout) return { exitCode: 0, messages: [] };
-  if (!fs27.existsSync(path29.join(checkout, ".har", "stages.json"))) {
+  if (!fs31.existsSync(path34.join(checkout, ".har", "stages.json"))) {
     return { exitCode: 0, messages: [] };
   }
   const gate = getCommitGateConfig(checkout);
@@ -30007,7 +31090,7 @@ function repoOption(y2) {
 }
 function handleInstall(argv) {
   try {
-    const result = installHooks({ repoPath: path30.resolve(argv.repo), force: argv.force });
+    const result = installHooks({ repoPath: path35.resolve(argv.repo), force: argv.force });
     success(`Commit gate installed in ${result.hooksDir}`);
     info(`pre-commit: ${result.preCommit}, post-commit: ${result.postCommit}`);
     info("Commits of unverified change batches will be blocked in agent worktrees.");
@@ -30019,7 +31102,7 @@ function handleInstall(argv) {
 }
 function handleUninstall(argv) {
   try {
-    const result = uninstallHooks(path30.resolve(argv.repo));
+    const result = uninstallHooks(path35.resolve(argv.repo));
     if (result.removed) {
       success(`Commit gate removed from ${result.hooksDir}`);
     } else {
@@ -30032,7 +31115,7 @@ function handleUninstall(argv) {
 }
 function handleStatus2(argv) {
   try {
-    const status = getHooksStatus(path30.resolve(argv.repo));
+    const status = getHooksStatus(path35.resolve(argv.repo));
     if (argv.json) {
       process.stdout.write(`${JSON.stringify(status, null, 2)}
 `);
@@ -30295,10 +31378,10 @@ function assignProp(target, prop, value) {
     configurable: true
   });
 }
-function getElementAtPath(obj, path32) {
-  if (!path32)
+function getElementAtPath(obj, path37) {
+  if (!path37)
     return obj;
-  return path32.reduce((acc, key) => acc?.[key], obj);
+  return path37.reduce((acc, key) => acc?.[key], obj);
 }
 function promiseAllObject(promisesObj) {
   const keys = Object.keys(promisesObj);
@@ -30618,11 +31701,11 @@ function aborted(x2, startIndex = 0) {
   }
   return false;
 }
-function prefixIssues(path32, issues) {
+function prefixIssues(path37, issues) {
   return issues.map((iss) => {
     var _a3;
     (_a3 = iss).path ?? (_a3.path = []);
-    iss.path.unshift(path32);
+    iss.path.unshift(path37);
     return iss;
   });
 }
@@ -35945,7 +37028,7 @@ var Protocol = class {
           return;
         }
         const pollInterval = task2.pollInterval ?? this._options?.defaultTaskPollInterval ?? 1e3;
-        await new Promise((resolve24) => setTimeout(resolve24, pollInterval));
+        await new Promise((resolve26) => setTimeout(resolve26, pollInterval));
         options?.signal?.throwIfAborted();
       }
     } catch (error3) {
@@ -35962,7 +37045,7 @@ var Protocol = class {
    */
   request(request, resultSchema, options) {
     const { relatedRequestId, resumptionToken, onresumptiontoken, task, relatedTask } = options ?? {};
-    return new Promise((resolve24, reject) => {
+    return new Promise((resolve26, reject) => {
       const earlyReject = (error3) => {
         reject(error3);
       };
@@ -36040,7 +37123,7 @@ var Protocol = class {
           if (!parseResult.success) {
             reject(parseResult.error);
           } else {
-            resolve24(parseResult.data);
+            resolve26(parseResult.data);
           }
         } catch (error3) {
           reject(error3);
@@ -36301,12 +37384,12 @@ var Protocol = class {
       }
     } catch {
     }
-    return new Promise((resolve24, reject) => {
+    return new Promise((resolve26, reject) => {
       if (signal.aborted) {
         reject(new McpError(ErrorCode.InvalidRequest, "Request cancelled"));
         return;
       }
-      const timeoutId = setTimeout(resolve24, interval);
+      const timeoutId = setTimeout(resolve26, interval);
       signal.addEventListener("abort", () => {
         clearTimeout(timeoutId);
         reject(new McpError(ErrorCode.InvalidRequest, "Request cancelled"));
@@ -37096,7 +38179,7 @@ var Server = class extends Protocol {
 };
 
 // src/mcp/server.ts
-var path31 = __toESM(require("path"));
+var path36 = __toESM(require("path"));
 
 // node_modules/@modelcontextprotocol/sdk/dist/esm/server/stdio.js
 var import_node_process2 = __toESM(require("node:process"), 1);
@@ -37179,12 +38262,12 @@ var StdioServerTransport = class {
     this.onclose?.();
   }
   send(message) {
-    return new Promise((resolve24) => {
+    return new Promise((resolve26) => {
       const json = serializeMessage(message);
       if (this._stdout.write(json)) {
-        resolve24();
+        resolve26();
       } else {
-        this._stdout.once("drain", resolve24);
+        this._stdout.once("drain", resolve26);
       }
     });
   }
@@ -37266,7 +38349,8 @@ var LaunchEnvironmentInputSchema = external_exports.object({
   ),
   force: external_exports.boolean().default(false).describe(
     "Discard uncommitted changes in a dirty occupied worktree. Requires confirmReplace=true and explicit user approval \u2014 never set autonomously."
-  )
+  ),
+  resume: external_exports.boolean().default(false).describe("Resume a failed or partial launch without creating a new worktree.")
 });
 var LaunchEnvironmentOutputSchema = ShellRunOutputSchema.extend({
   previewUrls: external_exports.record(external_exports.string()).optional(),
@@ -37283,6 +38367,16 @@ var LaunchEnvironmentOutputSchema = ShellRunOutputSchema.extend({
     sessionCreatedAt: external_exports.string().optional()
   }).optional()
 });
+var PreflightEnvironmentInputSchema = external_exports.object({
+  repo: external_exports.string().default("."),
+  agentId: agentIdSchema,
+  confirmReplace: external_exports.boolean().default(false).describe("Treat an occupied slot as replaceable (same as launch confirmReplace)."),
+  force: external_exports.boolean().default(false).describe("Allow replacing a dirty worktree (requires explicit user approval).")
+});
+var PreflightEnvironmentOutputSchema = ShellRunOutputSchema.extend({
+  readiness: SlotReadinessSchema,
+  blocked: external_exports.boolean().optional()
+});
 var CompleteEnvironmentInputSchema = external_exports.object({
   repo: external_exports.string().default("."),
   agentId: agentIdSchema,
@@ -37391,6 +38485,40 @@ var HAR_MCP_TOOLS = [
         force: {
           type: "boolean",
           description: "Discard uncommitted changes when replacing a dirty worktree. Requires confirmReplace=true and explicit user approval."
+        },
+        resume: {
+          type: "boolean",
+          description: "Resume a failed or partial launch (status failed/starting) without --replace. Preserves worktree and env."
+        }
+      },
+      ["agentId"]
+    )
+  },
+  {
+    name: "har_recover_environment",
+    description: "Resume a failed or partial agent launch without replacing the worktree. Alias for har_launch_environment with resume=true.",
+    inputSchema: objectJsonSchema(
+      {
+        repo: repoJsonProperty,
+        agentId: agentIdJsonProperty
+      },
+      ["agentId"]
+    )
+  },
+  {
+    name: "har_preflight_environment",
+    description: "Readiness gate before launch: checks ports, foreign PM2, Docker conflicts, and occupied slot. Returns canLaunch with actionable blockers. Call before har_launch_environment.",
+    inputSchema: objectJsonSchema(
+      {
+        repo: repoJsonProperty,
+        agentId: agentIdJsonProperty,
+        confirmReplace: {
+          type: "boolean",
+          description: "Treat an occupied slot as replaceable (same as launch confirmReplace)."
+        },
+        force: {
+          type: "boolean",
+          description: "Allow replacing a dirty worktree (only after explicit user approval)."
         }
       },
       ["agentId"]
@@ -37543,6 +38671,26 @@ async function handleMcpToolCall(toolName, args, defaultRepo = ".") {
         claude: input.claude,
         confirmReplace: input.confirmReplace,
         force: input.force,
+        resume: input.resume,
+        capture: true
+      });
+      const parsed = LaunchEnvironmentOutputSchema.parse(result);
+      return {
+        ...jsonContent(parsed),
+        ...result.blocked ? { isError: true } : {}
+      };
+    }
+    case "har_recover_environment": {
+      const input = LaunchEnvironmentInputSchema.parse({ ...args, repo, resume: true });
+      const agentId = validateAgentId(input.agentId, repo);
+      const result = await launchEnvironment({
+        repoPath: repo,
+        agentId,
+        worktree: input.worktree,
+        claude: input.claude,
+        confirmReplace: false,
+        force: false,
+        resume: true,
         capture: true
       });
       const parsed = LaunchEnvironmentOutputSchema.parse(result);
@@ -37551,6 +38699,21 @@ async function handleMcpToolCall(toolName, args, defaultRepo = ".") {
         ...result.blocked ? { isError: true } : {}
       };
     }
+    case "har_preflight_environment": {
+      const input = PreflightEnvironmentInputSchema.parse({ ...args, repo });
+      const agentId = validateAgentId(input.agentId, repo);
+      const result = await preflightEnvironment({
+        repoPath: repo,
+        agentId,
+        confirmReplace: input.confirmReplace,
+        force: input.force
+      });
+      const parsed = PreflightEnvironmentOutputSchema.parse(result);
+      return {
+        ...jsonContent(parsed),
+        ...result.blocked ? { isError: true } : {}
+      };
+    }
     case "har_run_stage": {
       const input = RunStageInputSchema.parse({ ...args, repo });
       const agentId = input.agentId !== void 0 ? validateAgentId(input.agentId, repo) : void 0;
@@ -37648,7 +38811,7 @@ async function handleMcpToolCall(toolName, args, defaultRepo = ".") {
       const input = ControlUpInputSchema.parse({ ...args, repo });
       const result = await startControlAndSync({
         detach: input.detach,
-        cwd: path31.resolve(input.repo)
+        cwd: path36.resolve(input.repo)
       });
       if (result.code !== 0) {
         return {
@@ -37712,7 +38875,7 @@ var mcpCommand = {
 
 // src/cli/index.ts
 async function runCli() {
-  await yargs_default(hideBin(process.argv)).scriptName("har").usage("$0 <command> [options]").command(envCommand).command(controlCommand).command(hooksCommand).command(mcpCommand).demandCommand(1, "Please specify a command. Try: har env init").strict().help().version().parse();
+  await yargs_default(hideBin(process.argv)).scriptName("har").usage("$0 <command> [options]").command(envCommand).command(controlCommand).command(hooksCommand).command(mcpCommand).demandCommand(1, "Please specify a command. Try: har env init").strict().help().version(getHarPackageVersion()).parse();
 }
 
 // src/index.ts