@osfactory/har 1.2.0 → 1.4.0

package/dist/index.js

@@ -593,8 +593,8 @@ var init_parseUtil = __esm({
     init_errors();
     init_en();
     makeIssue = (params) => {
-      const { data, path: path91, errorMaps, issueData } = params;
-      const fullPath = [...path91, ...issueData.path || []];
+      const { data, path: path97, errorMaps, issueData } = params;
+      const fullPath = [...path97, ...issueData.path || []];
       const fullIssue = {
         ...issueData,
         path: fullPath
@@ -902,11 +902,11 @@ var init_types = __esm({
     init_parseUtil();
     init_util();
     ParseInputLazyPath = class {
-      constructor(parent, value, path91, key) {
+      constructor(parent, value, path97, key) {
         this._cachedPath = [];
         this.parent = parent;
         this.data = value;
-        this._path = path91;
+        this._path = path97;
         this._key = key;
       }
       get path() {
@@ -4796,7 +4796,9 @@ var init_schema = __esm({
       toolCallId: external_exports.string().optional(),
       correlationId: external_exports.string().optional(),
       workUnitId: WorkUnitIdSchema.optional(),
-      attemptId: WorkAttemptIdSchema.optional()
+      attemptId: WorkAttemptIdSchema.optional(),
+      /** One occupancy of a slot (#316) — records are scoped to it, not to slot id. */
+      occupancyKey: external_exports.string().min(1).optional()
     }).passthrough();
     AgentTrajectoryRecordSchema = AgentTrajectoryRecordV1Schema;
     USAGE_HARVEST_VERSION = 2;
@@ -4811,6 +4813,8 @@ var init_schema = __esm({
       suffix: external_exports.string().optional(),
       workUnitId: WorkUnitIdSchema.optional(),
       attemptId: WorkAttemptIdSchema.optional(),
+      /** One occupancy of a slot (#316) — usage is scoped to it, not to slot id. */
+      occupancyKey: external_exports.string().min(1).optional(),
       tokensInput: external_exports.number().nonnegative().default(0),
       tokensOutput: external_exports.number().nonnegative().default(0),
       tokensCacheRead: external_exports.number().nonnegative().default(0),
@@ -28632,6 +28636,149 @@ var init_usage_pricing = __esm({
   }
 });
 
+// packages/schemas/src/line.ts
+var LINE_CONTRACT_VERSION, LINE_BUNDLE_KIND, LINE_MANIFEST_FILES, LineIdSchema, StationIdSchema, LineSkillSchema, LineMcpSchema, LineWorkSchema, LineWaveCellSchema, LineStationSchema, LineGateStageSchema, LineGateSchema, LineExtraStageSchema, LineHandoffSchema, LineTravelerSchema, LineProgramSchema, LineManifestFileSchema, LineManifestSchema, LineLedgerEntrySchema, LineLedgerSchema;
+var init_line = __esm({
+  "packages/schemas/src/line.ts"() {
+    "use strict";
+    init_zod();
+    init_schema();
+    LINE_CONTRACT_VERSION = 1;
+    LINE_BUNDLE_KIND = "line";
+    LINE_MANIFEST_FILES = ["line.manifest.json", "template.manifest.json"];
+    LineIdSchema = external_exports.string().min(1).regex(/^[a-z0-9][a-z0-9._-]*$/, "Line id must be a lowercase slug (letters, digits, ._-)");
+    StationIdSchema = external_exports.string().min(1).regex(/^[A-Za-z0-9][A-Za-z0-9._:-]*$/, "Station id must be stable and shell-friendly");
+    LineSkillSchema = external_exports.object({
+      id: external_exports.string().min(1),
+      role: external_exports.enum(["orchestrator", "station"]).default("station"),
+      /** Install hint only — HAR never vendors third-party skill packs. */
+      install: external_exports.string().min(1).optional()
+    });
+    LineMcpSchema = external_exports.object({
+      name: external_exports.string().min(1),
+      why: external_exports.string().min(1).optional(),
+      required: external_exports.boolean().default(false)
+    });
+    LineWorkSchema = external_exports.object({
+      /** `github`, `linear`, `none`, or a free string. */
+      source: external_exports.string().min(1).default("none"),
+      ids: external_exports.array(external_exports.string().min(1)).default([]),
+      url: external_exports.string().min(1).optional(),
+      optional: external_exports.boolean().default(false)
+    });
+    LineWaveCellSchema = external_exports.object({
+      workId: external_exports.string().min(1).optional(),
+      title: external_exports.string().min(1).optional()
+    });
+    LineStationSchema = external_exports.object({
+      id: StationIdSchema,
+      title: external_exports.string().min(1),
+      description: external_exports.string().min(1).optional(),
+      work: LineWorkSchema.optional(),
+      /** Each inner array is one wave; cells inside a wave run in parallel slots. */
+      waves: external_exports.array(external_exports.array(LineWaveCellSchema)).optional(),
+      skills: external_exports.array(external_exports.string().min(1)).optional(),
+      mcp: external_exports.array(external_exports.string().min(1)).optional()
+    });
+    LineGateStageSchema = external_exports.object({
+      id: external_exports.string().min(1),
+      /** Required from this station onward — this is the ratchet tag. */
+      fromStation: StationIdSchema,
+      tier: external_exports.enum(["quick", "full"]).default("full")
+    });
+    LineGateSchema = external_exports.object({
+      /** Must be true: a factory line never drops an earlier station's stages. */
+      cumulative: external_exports.literal(true),
+      /** When set, the gate is skipped unless this env var is "1". */
+      optInEnv: external_exports.string().min(1).nullable().default(null),
+      stages: external_exports.array(LineGateStageSchema).default([])
+    });
+    LineExtraStageSchema = external_exports.object({
+      id: external_exports.string().min(1),
+      kind: HarnessStageKindSchema.default("test"),
+      tier: external_exports.enum(["quick", "full"]).default("full"),
+      description: external_exports.string().min(1).optional()
+    });
+    LineHandoffSchema = external_exports.object({
+      /** Must be false: agents hand off, they do not merge or release. */
+      autonomousShip: external_exports.literal(false),
+      waitFor: external_exports.string().min(1).optional()
+    });
+    LineTravelerSchema = external_exports.object({
+      kind: external_exports.string().min(1),
+      ref: external_exports.string().min(1).optional(),
+      note: external_exports.string().min(1).optional()
+    });
+    LineProgramSchema = external_exports.object({
+      contractVersion: external_exports.literal(LINE_CONTRACT_VERSION),
+      id: LineIdSchema,
+      title: external_exports.string().min(1),
+      description: external_exports.string().min(1).optional(),
+      skills: external_exports.array(LineSkillSchema).default([]),
+      mcp: external_exports.array(LineMcpSchema).default([]),
+      plugins: external_exports.array(external_exports.string().min(1)).default([]),
+      stations: external_exports.array(LineStationSchema).min(1),
+      gate: LineGateSchema,
+      extraStages: external_exports.array(LineExtraStageSchema).default([]),
+      handoff: LineHandoffSchema,
+      traveler: LineTravelerSchema.optional(),
+      prototypeNotes: external_exports.array(external_exports.string().min(1)).default([])
+    }).superRefine((data, ctx) => {
+      const stationIds = new Set(data.stations.map((s) => s.id));
+      if (stationIds.size !== data.stations.length) {
+        ctx.addIssue({ code: external_exports.ZodIssueCode.custom, message: "station ids must be unique" });
+      }
+      for (const stage of data.gate.stages) {
+        if (!stationIds.has(stage.fromStation)) {
+          ctx.addIssue({
+            code: external_exports.ZodIssueCode.custom,
+            message: `gate.stages[].fromStation "${stage.fromStation}" is not a station id`
+          });
+        }
+      }
+    });
+    LineManifestFileSchema = external_exports.object({
+      src: external_exports.string().min(1),
+      dest: external_exports.string().min(1),
+      executable: external_exports.boolean().optional()
+    });
+    LineManifestSchema = external_exports.object({
+      kind: external_exports.literal(LINE_BUNDLE_KIND),
+      id: LineIdSchema,
+      title: external_exports.string().min(1).optional(),
+      /** Bundle-relative path to the program JSON. */
+      program: external_exports.string().min(1).default("line.json"),
+      files: external_exports.array(LineManifestFileSchema).default([]),
+      /** Stages to REGISTER in .har/stages.json — never added to verificationStages. */
+      stages: external_exports.array(HarnessStageSchema).default([]),
+      nextSteps: external_exports.array(external_exports.string().min(1)).default([]),
+      docsPath: external_exports.string().min(1).optional()
+    }).passthrough().superRefine((data, ctx) => {
+      const raw = data;
+      if (raw.verificationStages !== void 0) {
+        ctx.addIssue({
+          code: external_exports.ZodIssueCode.custom,
+          message: "Line manifests must not declare verificationStages \u2014 line gate stages are opt-in and run via `har line gate`."
+        });
+      }
+    });
+    LineLedgerEntrySchema = external_exports.object({
+      id: LineIdSchema,
+      source: external_exports.enum(["bundled", "local", "path", "npm", "git"]),
+      spec: external_exports.string().min(1),
+      version: external_exports.string().optional(),
+      /** Stages this line registered (registered only — not on verify). */
+      stageIds: external_exports.array(external_exports.string().min(1)).default([]),
+      programPath: external_exports.string().min(1),
+      installedAt: external_exports.string()
+    });
+    LineLedgerSchema = external_exports.object({
+      version: external_exports.literal("1"),
+      lines: external_exports.array(LineLedgerEntrySchema).default([])
+    });
+  }
+});
+
 // src/harness/schema.ts
 var init_schema2 = __esm({
   "src/harness/schema.ts"() {
@@ -28640,6 +28787,7 @@ var init_schema2 = __esm({
     init_harness_env();
     init_usage_authority();
     init_usage_pricing();
+    init_line();
   }
 });
 
@@ -29043,7 +29191,7 @@ function runScriptCapture(scriptPath, args = [], options = {}) {
   const stream = options.stream ?? false;
   const echoStdout = stream && (options.streamStdout ?? true);
   const { stream: _stream, streamStdout: _streamStdout, ...spawnOptions } = options;
-  return new Promise((resolve60) => {
+  return new Promise((resolve66) => {
     const proc = (0, import_child_process.spawn)("bash", [scriptPath, ...args], {
       ...spawnOptions,
       stdio: ["inherit", "pipe", "pipe"]
@@ -29058,14 +29206,14 @@ function runScriptCapture(scriptPath, args = [], options = {}) {
       stderr += d;
       if (stream) process.stderr.write(d);
     });
-    proc.on("close", (code) => resolve60({ stdout, stderr, code: code ?? 0 }));
+    proc.on("close", (code) => resolve66({ stdout, stderr, code: code ?? 0 }));
   });
 }
 function runShellCommand(command2, options = {}) {
   const stream = options.stream ?? false;
   const echoStdout = stream && (options.streamStdout ?? true);
   const { stream: _stream, streamStdout: _streamStdout, ...spawnOptions } = options;
-  return new Promise((resolve60) => {
+  return new Promise((resolve66) => {
     const proc = (0, import_child_process.spawn)("bash", ["-lc", command2], {
       ...spawnOptions,
       stdio: ["inherit", "pipe", "pipe"]
@@ -29080,7 +29228,7 @@ function runShellCommand(command2, options = {}) {
       stderr += d;
       if (stream) process.stderr.write(d);
     });
-    proc.on("close", (code) => resolve60({ stdout, stderr, code: code ?? 0 }));
+    proc.on("close", (code) => resolve66({ stdout, stderr, code: code ?? 0 }));
   });
 }
 var import_child_process;
@@ -30071,7 +30219,7 @@ var init_slot_registry = __esm({
 
 // src/runtime/exec.ts
 function spawnResult(cmd, args, opts, shell) {
-  return new Promise((resolve60) => {
+  return new Promise((resolve66) => {
     const stream = opts.stream ?? false;
     const proc = (0, import_child_process3.spawn)(cmd, args, {
       cwd: opts.cwd,
@@ -30083,8 +30231,8 @@ function spawnResult(cmd, args, opts, shell) {
     let stderr = "";
     proc.stdout?.on("data", (c) => stdout += c.toString());
     proc.stderr?.on("data", (c) => stderr += c.toString());
-    proc.on("error", (err) => resolve60({ code: 127, stdout, stderr: stderr || String(err) }));
-    proc.on("close", (code) => resolve60({ code: code ?? 1, stdout, stderr }));
+    proc.on("error", (err) => resolve66({ code: 127, stdout, stderr: stderr || String(err) }));
+    proc.on("close", (code) => resolve66({ code: code ?? 1, stdout, stderr }));
   });
 }
 var import_child_process3, fs13, path13, realSystemOps, defaultExec, stderrLog, realSleep;
@@ -30147,7 +30295,7 @@ var init_exec = __esm({
       process.stderr.write(`==> ${message}
 `);
     };
-    realSleep = (seconds) => new Promise((resolve60) => setTimeout(resolve60, seconds * 1e3));
+    realSleep = (seconds) => new Promise((resolve66) => setTimeout(resolve66, seconds * 1e3));
   }
 });
 
@@ -32608,6 +32756,13 @@ function findValidation(checkoutDir, treeHash) {
     return void 0;
   }
 }
+function findPassingFullValidation(input) {
+  if (!isCheckoutRoot(input.checkoutDir)) return void 0;
+  const { treeHash } = computeWorktreeSnapshot(input.checkoutDir);
+  const record2 = findValidation(input.checkoutDir, treeHash) ?? (input.harnessRoot ? findValidation(input.harnessRoot, treeHash) : void 0);
+  if (record2?.status === "pass" && record2.full) return record2;
+  return void 0;
+}
 function attachCommit(checkoutDir, treeHash, commitSha) {
   const record2 = findValidation(checkoutDir, treeHash);
   if (!record2) return void 0;
@@ -34738,16 +34893,16 @@ var init_local_executor = __esm({
         const walk = (dir, prefix) => {
           for (const entry of fs35.readdirSync(dir, { withFileTypes: true })) {
             const full = path36.join(dir, entry.name);
-            const relative5 = path36.join(prefix, entry.name);
+            const relative6 = path36.join(prefix, entry.name);
             if (entry.isDirectory()) {
-              walk(full, relative5);
+              walk(full, relative6);
               continue;
             }
-            if (filter2?.stageId && !relative5.includes(filter2.stageId)) continue;
+            if (filter2?.stageId && !relative6.includes(filter2.stageId)) continue;
             const stat = fs35.statSync(full);
             entries.push({
               path: full,
-              relativePath: relative5,
+              relativePath: relative6,
               sizeBytes: stat.size,
               modifiedAt: stat.mtime.toISOString()
             });
@@ -36663,7 +36818,7 @@ async function attempt(url) {
 async function readControlJson(url) {
   const first = await attempt(url);
   if (first.read.ok || !first.retryable) return first.read;
-  await new Promise((resolve60) => setTimeout(resolve60, RETRY_DELAY_MS));
+  await new Promise((resolve66) => setTimeout(resolve66, RETRY_DELAY_MS));
   return (await attempt(url)).read;
 }
 async function readControlPages(options) {
@@ -37148,7 +37303,7 @@ async function postForResponse(url, headers, payload) {
     } catch (err) {
       lastErr = err;
       if (attempt2 < MAX_FETCH_ATTEMPTS) {
-        await new Promise((resolve60) => setTimeout(resolve60, attempt2 * 100));
+        await new Promise((resolve66) => setTimeout(resolve66, attempt2 * 100));
       }
     }
   }
@@ -37388,7 +37543,7 @@ async function waitForControlApi(apiUrl = getControlApiUrl(), timeoutMs = 6e4, i
   const deadline = Date.now() + timeoutMs;
   while (Date.now() < deadline) {
     if (await isControlApiReachable(apiUrl)) return true;
-    await new Promise((resolve60) => setTimeout(resolve60, intervalMs));
+    await new Promise((resolve66) => setTimeout(resolve66, intervalMs));
   }
   return false;
 }
@@ -39037,15 +39192,15 @@ var require_route = __commonJS({
       };
     }
     function wrapConversion(toModel, graph) {
-      const path91 = [graph[toModel].parent, toModel];
+      const path97 = [graph[toModel].parent, toModel];
       let fn = conversions[graph[toModel].parent][toModel];
       let cur = graph[toModel].parent;
       while (graph[cur].parent) {
-        path91.unshift(graph[cur].parent);
+        path97.unshift(graph[cur].parent);
         fn = link(conversions[graph[cur].parent][cur], fn);
         cur = graph[cur].parent;
       }
-      fn.conversion = path91;
+      fn.conversion = path97;
       return fn;
     }
     module2.exports = function(fromModel) {
@@ -45539,26 +45694,26 @@ var require_lib2 = __commonJS({
       return matches;
     };
     exports2.analyse = analyse;
-    var detectFile = (filepath, opts = {}) => new Promise((resolve60, reject) => {
+    var detectFile = (filepath, opts = {}) => new Promise((resolve66, reject) => {
       let fd;
-      const fs76 = (0, node_1.default)();
+      const fs79 = (0, node_1.default)();
       const handler = (err, buffer) => {
         if (fd) {
-          fs76.closeSync(fd);
+          fs79.closeSync(fd);
         }
         if (err) {
           reject(err);
         } else if (buffer) {
-          resolve60((0, exports2.detect)(buffer));
+          resolve66((0, exports2.detect)(buffer));
         } else {
           reject(new Error("No error and no buffer received"));
         }
       };
       const sampleSize = (opts === null || opts === void 0 ? void 0 : opts.sampleSize) || 0;
       if (sampleSize > 0) {
-        fd = fs76.openSync(filepath, "r");
+        fd = fs79.openSync(filepath, "r");
         let sample = Buffer.allocUnsafe(sampleSize);
-        fs76.read(fd, sample, 0, sampleSize, opts.offset, (err, bytesRead) => {
+        fs79.read(fd, sample, 0, sampleSize, opts.offset, (err, bytesRead) => {
           if (err) {
             handler(err, null);
           } else {
@@ -45570,22 +45725,22 @@ var require_lib2 = __commonJS({
         });
         return;
       }
-      fs76.readFile(filepath, handler);
+      fs79.readFile(filepath, handler);
     });
     exports2.detectFile = detectFile;
     var detectFileSync = (filepath, opts = {}) => {
-      const fs76 = (0, node_1.default)();
+      const fs79 = (0, node_1.default)();
       if (opts && opts.sampleSize) {
-        const fd = fs76.openSync(filepath, "r");
+        const fd = fs79.openSync(filepath, "r");
         let sample = Buffer.allocUnsafe(opts.sampleSize);
-        const bytesRead = fs76.readSync(fd, sample, 0, opts.sampleSize, opts.offset);
+        const bytesRead = fs79.readSync(fd, sample, 0, opts.sampleSize, opts.offset);
         if (bytesRead < opts.sampleSize) {
           sample = sample.subarray(0, bytesRead);
         }
-        fs76.closeSync(fd);
+        fs79.closeSync(fd);
         return (0, exports2.detect)(sample);
       }
-      return (0, exports2.detect)(fs76.readFileSync(filepath));
+      return (0, exports2.detect)(fs79.readFileSync(filepath));
     };
     exports2.detectFileSync = detectFileSync;
     exports2.default = {
@@ -50098,7 +50253,7 @@ var require_Observable = __commonJS({
       Observable2.prototype.forEach = function(next, promiseCtor) {
         var _this = this;
         promiseCtor = getPromiseCtor(promiseCtor);
-        return new promiseCtor(function(resolve60, reject) {
+        return new promiseCtor(function(resolve66, reject) {
           var subscriber = new Subscriber_1.SafeSubscriber({
             next: function(value) {
               try {
@@ -50109,7 +50264,7 @@ var require_Observable = __commonJS({
               }
             },
             error: reject,
-            complete: resolve60
+            complete: resolve66
           });
           _this.subscribe(subscriber);
         });
@@ -50131,14 +50286,14 @@ var require_Observable = __commonJS({
       Observable2.prototype.toPromise = function(promiseCtor) {
         var _this = this;
         promiseCtor = getPromiseCtor(promiseCtor);
-        return new promiseCtor(function(resolve60, reject) {
+        return new promiseCtor(function(resolve66, reject) {
           var value;
           _this.subscribe(function(x) {
             return value = x;
           }, function(err) {
             return reject(err);
           }, function() {
-            return resolve60(value);
+            return resolve66(value);
           });
         });
       };
@@ -52234,11 +52389,11 @@ var require_innerFrom = __commonJS({
     "use strict";
     var __awaiter = exports2 && exports2.__awaiter || function(thisArg, _arguments, P2, generator) {
       function adopt(value) {
-        return value instanceof P2 ? value : new P2(function(resolve60) {
-          resolve60(value);
+        return value instanceof P2 ? value : new P2(function(resolve66) {
+          resolve66(value);
         });
       }
-      return new (P2 || (P2 = Promise))(function(resolve60, reject) {
+      return new (P2 || (P2 = Promise))(function(resolve66, reject) {
         function fulfilled(value) {
           try {
             step(generator.next(value));
@@ -52254,7 +52409,7 @@ var require_innerFrom = __commonJS({
           }
         }
         function step(result) {
-          result.done ? resolve60(result.value) : adopt(result.value).then(fulfilled, rejected);
+          result.done ? resolve66(result.value) : adopt(result.value).then(fulfilled, rejected);
         }
         step((generator = generator.apply(thisArg, _arguments || [])).next());
       });
@@ -52336,14 +52491,14 @@ var require_innerFrom = __commonJS({
       }, i);
       function verb(n) {
         i[n] = o[n] && function(v2) {
-          return new Promise(function(resolve60, reject) {
-            v2 = o[n](v2), settle(resolve60, reject, v2.done, v2.value);
+          return new Promise(function(resolve66, reject) {
+            v2 = o[n](v2), settle(resolve66, reject, v2.done, v2.value);
           });
         };
       }
-      function settle(resolve60, reject, d, v2) {
+      function settle(resolve66, reject, d, v2) {
         Promise.resolve(v2).then(function(v3) {
-          resolve60({ value: v3, done: d });
+          resolve66({ value: v3, done: d });
         }, reject);
       }
     };
@@ -52962,7 +53117,7 @@ var require_lastValueFrom = __commonJS({
     var EmptyError_1 = require_EmptyError();
     function lastValueFrom2(source, config2) {
       var hasConfig = typeof config2 === "object";
-      return new Promise(function(resolve60, reject) {
+      return new Promise(function(resolve66, reject) {
         var _hasValue = false;
         var _value;
         source.subscribe({
@@ -52973,9 +53128,9 @@ var require_lastValueFrom = __commonJS({
           error: reject,
           complete: function() {
             if (_hasValue) {
-              resolve60(_value);
+              resolve66(_value);
             } else if (hasConfig) {
-              resolve60(config2.defaultValue);
+              resolve66(config2.defaultValue);
             } else {
               reject(new EmptyError_1.EmptyError());
             }
@@ -52997,16 +53152,16 @@ var require_firstValueFrom = __commonJS({
     var Subscriber_1 = require_Subscriber();
     function firstValueFrom(source, config2) {
       var hasConfig = typeof config2 === "object";
-      return new Promise(function(resolve60, reject) {
+      return new Promise(function(resolve66, reject) {
         var subscriber = new Subscriber_1.SafeSubscriber({
           next: function(value) {
-            resolve60(value);
+            resolve66(value);
             subscriber.unsubscribe();
           },
           error: reject,
           complete: function() {
             if (hasConfig) {
-              resolve60(config2.defaultValue);
+              resolve66(config2.defaultValue);
             } else {
               reject(new EmptyError_1.EmptyError());
             }
@@ -58798,14 +58953,14 @@ var require_run_async = __commonJS({
       return function() {
         var args = arguments;
         var originalThis = this;
-        var promise = new Promise(function(resolve60, reject) {
+        var promise = new Promise(function(resolve66, reject) {
           var resolved = false;
           const wrappedResolve = function(value) {
             if (resolved) {
               console.warn("Run-async promise already resolved.");
             }
             resolved = true;
-            resolve60(value);
+            resolve66(value);
           };
           var rejected = false;
           const wrappedReject = function(value) {
@@ -58913,32 +59068,32 @@ __export(otel_hooks_exports, {
 });
 function getOtelHooksHome() {
   if (process.env.HAR_OTEL_HOOKS_HOME) {
-    return path73.resolve(process.env.HAR_OTEL_HOOKS_HOME);
+    return path76.resolve(process.env.HAR_OTEL_HOOKS_HOME);
   }
-  return path73.join(os22.homedir(), ".har", "otel-hooks");
+  return path76.join(os22.homedir(), ".har", "otel-hooks");
 }
 function getOtelHooksConfigPath(hooksHome = getOtelHooksHome()) {
-  return path73.join(hooksHome, "otel_config.json");
+  return path76.join(hooksHome, "otel_config.json");
 }
 function getOtelHooksWrapperPath(hooksHome = getOtelHooksHome()) {
-  return path73.join(hooksHome, "run-otel-hook.sh");
+  return path76.join(hooksHome, "run-otel-hook.sh");
 }
 function getOtelHooksStateDir(hooksHome = getOtelHooksHome()) {
-  return path73.join(hooksHome, "state");
+  return path76.join(hooksHome, "state");
 }
 function localOtelHookBin(hooksHome) {
-  return path73.join(hooksHome, "node_modules", ".bin", "otel-hook");
+  return path76.join(hooksHome, "node_modules", ".bin", "otel-hook");
 }
 function installedPackageVersion(hooksHome) {
   try {
-    const pkgPath = path73.join(
+    const pkgPath = path76.join(
       hooksHome,
       "node_modules",
       "@osfactory",
       "otel-hook",
       "package.json"
     );
-    const pkg = JSON.parse(fs66.readFileSync(pkgPath, "utf8"));
+    const pkg = JSON.parse(fs68.readFileSync(pkgPath, "utf8"));
     return typeof pkg.version === "string" ? pkg.version : null;
   } catch {
     return null;
@@ -58989,15 +59144,15 @@ function buildOtelHooksConfig(options) {
   };
 }
 function writeOtelHooksConfig(config2, hooksHome = getOtelHooksHome()) {
-  fs66.mkdirSync(hooksHome, { recursive: true });
+  fs68.mkdirSync(hooksHome, { recursive: true });
   const configPath = getOtelHooksConfigPath(hooksHome);
-  fs66.writeFileSync(configPath, `${JSON.stringify(config2, null, 2)}
+  fs68.writeFileSync(configPath, `${JSON.stringify(config2, null, 2)}
 `);
   return configPath;
 }
 function writeOtelHooksWrapper(otelHookCommand, hooksHome = getOtelHooksHome()) {
-  fs66.mkdirSync(hooksHome, { recursive: true });
-  fs66.mkdirSync(getOtelHooksStateDir(hooksHome), { recursive: true });
+  fs68.mkdirSync(hooksHome, { recursive: true });
+  fs68.mkdirSync(getOtelHooksStateDir(hooksHome), { recursive: true });
   const wrapperPath = getOtelHooksWrapperPath(hooksHome);
   const configPath = getOtelHooksConfigPath(hooksHome);
   const stateDir = getOtelHooksStateDir(hooksHome);
@@ -59009,9 +59164,9 @@ exec "${otelHookCommand}" run \\
   --state-dir "${stateDir}" \\
   "$@"
 `;
-  fs66.writeFileSync(wrapperPath, script, { mode: 493 });
+  fs68.writeFileSync(wrapperPath, script, { mode: 493 });
   try {
-    fs66.chmodSync(wrapperPath, 493);
+    fs68.chmodSync(wrapperPath, 493);
   } catch {
   }
   return wrapperPath;
@@ -59024,7 +59179,7 @@ function commandExists3(command2) {
 }
 function resolveOtelHookCommand(hooksHome) {
   const local = localOtelHookBin(hooksHome);
-  if (fs66.existsSync(local)) return local;
+  if (fs68.existsSync(local)) return local;
   return null;
 }
 function resolveHooksInstaller(hooksHome) {
@@ -59039,7 +59194,7 @@ function resolveHooksInstaller(hooksHome) {
   return candidates.find((candidate) => commandExists3(candidate.command)) ?? null;
 }
 function tryInstallPackage(hooksHome) {
-  fs66.mkdirSync(hooksHome, { recursive: true });
+  fs68.mkdirSync(hooksHome, { recursive: true });
   const installer = resolveHooksInstaller(hooksHome);
   if (!installer) {
     return {
@@ -59052,7 +59207,7 @@ function tryInstallPackage(hooksHome) {
     encoding: "utf8",
     timeout: 18e4
   });
-  if (result.status === 0 && fs66.existsSync(localOtelHookBin(hooksHome))) {
+  if (result.status === 0 && fs68.existsSync(localOtelHookBin(hooksHome))) {
     return { ok: true, detail: described };
   }
   return {
@@ -59078,14 +59233,14 @@ function uninstallLegacyPythonHooks(hooksHome) {
 }
 function removeLegacyPythonArtifacts(hooksHome) {
   const legacyPaths = [
-    path73.join(hooksHome, ".venv"),
-    path73.join(hooksHome, "otel_config.yaml"),
-    path73.join(hooksHome, "venv")
+    path76.join(hooksHome, ".venv"),
+    path76.join(hooksHome, "otel_config.yaml"),
+    path76.join(hooksHome, "venv")
   ];
   for (const target of legacyPaths) {
     try {
-      if (fs66.existsSync(target)) {
-        fs66.rmSync(target, { recursive: true, force: true });
+      if (fs68.existsSync(target)) {
+        fs68.rmSync(target, { recursive: true, force: true });
       }
     } catch {
     }
@@ -59126,10 +59281,10 @@ function runSetupProvider(providerId, otelHookCommand, wrapperPath) {
   };
 }
 function rewriteHookCommandsToWrapper(filePath, wrapperPath) {
-  if (!fs66.existsSync(filePath)) return false;
+  if (!fs68.existsSync(filePath)) return false;
   let raw;
   try {
-    raw = fs66.readFileSync(filePath, "utf8");
+    raw = fs68.readFileSync(filePath, "utf8");
   } catch {
     return false;
   }
@@ -59176,15 +59331,15 @@ function rewriteHookCommandsToWrapper(filePath, wrapperPath) {
     return changed;
   };
   if (!walk(parsed)) return false;
-  fs66.writeFileSync(filePath, `${JSON.stringify(parsed, null, 2)}
+  fs68.writeFileSync(filePath, `${JSON.stringify(parsed, null, 2)}
 `);
   return true;
 }
 function pruneLegacyCursorHookEvents(filePath, wrapperPath) {
-  if (!fs66.existsSync(filePath)) return false;
+  if (!fs68.existsSync(filePath)) return false;
   let raw;
   try {
-    raw = fs66.readFileSync(filePath, "utf8");
+    raw = fs68.readFileSync(filePath, "utf8");
   } catch {
     return false;
   }
@@ -59219,21 +59374,21 @@ function pruneLegacyCursorHookEvents(filePath, wrapperPath) {
     }
   }
   if (!changed) return false;
-  fs66.writeFileSync(filePath, `${JSON.stringify(parsed, null, 2)}
+  fs68.writeFileSync(filePath, `${JSON.stringify(parsed, null, 2)}
 `);
   return true;
 }
 function rewriteKnownHookRegistrations(wrapperPath) {
   const home = os22.homedir();
   const candidates = [
-    path73.join(home, ".cursor", "hooks.json"),
-    path73.join(home, ".claude", "settings.json"),
-    path73.join(home, ".codex", "hooks.json")
+    path76.join(home, ".cursor", "hooks.json"),
+    path76.join(home, ".claude", "settings.json"),
+    path76.join(home, ".codex", "hooks.json")
   ];
   for (const filePath of candidates) {
     try {
       rewriteHookCommandsToWrapper(filePath, wrapperPath);
-      if (filePath.endsWith(`${path73.sep}.cursor${path73.sep}hooks.json`)) {
+      if (filePath.endsWith(`${path76.sep}.cursor${path76.sep}hooks.json`)) {
         pruneLegacyCursorHookEvents(filePath, wrapperPath);
       }
     } catch {
@@ -59249,7 +59404,7 @@ function ensureOtelHooks(options) {
   const hooksHome = getOtelHooksHome();
   const errors = [];
   const providersSetup = [];
-  fs66.mkdirSync(hooksHome, { recursive: true });
+  fs68.mkdirSync(hooksHome, { recursive: true });
   let otelHookCommand = resolveOtelHookCommand(hooksHome);
   const needsInstall = !otelHookCommand || installedPackageVersion(hooksHome) !== pinnedVersion();
   if (needsInstall) {
@@ -59343,14 +59498,14 @@ function ensureOtelHooks(options) {
 function disableOtelHooksExport() {
   return writeOtelHooksConfig(buildOtelHooksConfig({ enabled: false }));
 }
-var import_child_process19, fs66, os22, path73, OTEL_HOOKS_PACKAGE, OTEL_HOOKS_PROVIDERS, OTEL_HOOKS_AGENTS, LEGACY_CURSOR_ONLY_HOOK_EVENTS;
+var import_child_process19, fs68, os22, path76, OTEL_HOOKS_PACKAGE, OTEL_HOOKS_PROVIDERS, OTEL_HOOKS_AGENTS, LEGACY_CURSOR_ONLY_HOOK_EVENTS;
 var init_otel_hooks = __esm({
   "src/core/otel-hooks.ts"() {
     "use strict";
     import_child_process19 = require("child_process");
-    fs66 = __toESM(require("fs"));
+    fs68 = __toESM(require("fs"));
     os22 = __toESM(require("os"));
-    path73 = __toESM(require("path"));
+    path76 = __toESM(require("path"));
     init_control_config();
     init_telemetry_config();
     OTEL_HOOKS_PACKAGE = "@osfactory/otel-hook@0.2.0";
@@ -62325,7 +62480,7 @@ var require_compile = __commonJS({
       const schOrFunc = root.refs[ref];
       if (schOrFunc)
         return schOrFunc;
-      let _sch = resolve60.call(this, root, ref);
+      let _sch = resolve66.call(this, root, ref);
       if (_sch === void 0) {
         const schema = (_a2 = root.localRefs) === null || _a2 === void 0 ? void 0 : _a2[ref];
         const { schemaId } = this.opts;
@@ -62352,7 +62507,7 @@ var require_compile = __commonJS({
     function sameSchemaEnv(s1, s2) {
       return s1.schema === s2.schema && s1.root === s2.root && s1.baseId === s2.baseId;
     }
-    function resolve60(root, ref) {
+    function resolve66(root, ref) {
       let sch;
       while (typeof (sch = this.refs[ref]) == "string")
         ref = sch;
@@ -62570,8 +62725,8 @@ var require_utils2 = __commonJS({
       }
       return ind;
     }
-    function removeDotSegments(path91) {
-      let input = path91;
+    function removeDotSegments(path97) {
+      let input = path97;
       const output = [];
       let nextSlash = -1;
       let len = 0;
@@ -62823,8 +62978,8 @@ var require_schemes = __commonJS({
         wsComponent.secure = void 0;
       }
       if (wsComponent.resourceName) {
-        const [path91, query] = wsComponent.resourceName.split("?");
-        wsComponent.path = path91 && path91 !== "/" ? path91 : void 0;
+        const [path97, query] = wsComponent.resourceName.split("?");
+        wsComponent.path = path97 && path97 !== "/" ? path97 : void 0;
         wsComponent.query = query;
         wsComponent.resourceName = void 0;
       }
@@ -62983,55 +63138,55 @@ var require_fast_uri = __commonJS({
       }
       return uri;
     }
-    function resolve60(baseURI, relativeURI, options) {
+    function resolve66(baseURI, relativeURI, options) {
       const schemelessOptions = options ? Object.assign({ scheme: "null" }, options) : { scheme: "null" };
       const resolved = resolveComponent(parse4(baseURI, schemelessOptions), parse4(relativeURI, schemelessOptions), schemelessOptions, true);
       schemelessOptions.skipEscape = true;
       return serialize(resolved, schemelessOptions);
     }
-    function resolveComponent(base, relative5, options, skipNormalization) {
+    function resolveComponent(base, relative6, options, skipNormalization) {
       const target = {};
       if (!skipNormalization) {
         base = parse4(serialize(base, options), options);
-        relative5 = parse4(serialize(relative5, options), options);
+        relative6 = parse4(serialize(relative6, options), options);
       }
       options = options || {};
-      if (!options.tolerant && relative5.scheme) {
-        target.scheme = relative5.scheme;
-        target.userinfo = relative5.userinfo;
-        target.host = relative5.host;
-        target.port = relative5.port;
-        target.path = removeDotSegments(relative5.path || "");
-        target.query = relative5.query;
+      if (!options.tolerant && relative6.scheme) {
+        target.scheme = relative6.scheme;
+        target.userinfo = relative6.userinfo;
+        target.host = relative6.host;
+        target.port = relative6.port;
+        target.path = removeDotSegments(relative6.path || "");
+        target.query = relative6.query;
       } else {
-        if (relative5.userinfo !== void 0 || relative5.host !== void 0 || relative5.port !== void 0) {
-          target.userinfo = relative5.userinfo;
-          target.host = relative5.host;
-          target.port = relative5.port;
-          target.path = removeDotSegments(relative5.path || "");
-          target.query = relative5.query;
+        if (relative6.userinfo !== void 0 || relative6.host !== void 0 || relative6.port !== void 0) {
+          target.userinfo = relative6.userinfo;
+          target.host = relative6.host;
+          target.port = relative6.port;
+          target.path = removeDotSegments(relative6.path || "");
+          target.query = relative6.query;
         } else {
-          if (!relative5.path) {
+          if (!relative6.path) {
             target.path = base.path;
-            if (relative5.query !== void 0) {
-              target.query = relative5.query;
+            if (relative6.query !== void 0) {
+              target.query = relative6.query;
             } else {
               target.query = base.query;
             }
           } else {
-            if (relative5.path[0] === "/") {
-              target.path = removeDotSegments(relative5.path);
+            if (relative6.path[0] === "/") {
+              target.path = removeDotSegments(relative6.path);
             } else {
               if ((base.userinfo !== void 0 || base.host !== void 0 || base.port !== void 0) && !base.path) {
-                target.path = "/" + relative5.path;
+                target.path = "/" + relative6.path;
               } else if (!base.path) {
-                target.path = relative5.path;
+                target.path = relative6.path;
               } else {
-                target.path = base.path.slice(0, base.path.lastIndexOf("/") + 1) + relative5.path;
+                target.path = base.path.slice(0, base.path.lastIndexOf("/") + 1) + relative6.path;
               }
               target.path = removeDotSegments(target.path);
             }
-            target.query = relative5.query;
+            target.query = relative6.query;
           }
           target.userinfo = base.userinfo;
           target.host = base.host;
@@ -63039,7 +63194,7 @@ var require_fast_uri = __commonJS({
         }
         target.scheme = base.scheme;
       }
-      target.fragment = relative5.fragment;
+      target.fragment = relative6.fragment;
       return target;
     }
     function equal(uriA, uriB, options) {
@@ -63241,7 +63396,7 @@ var require_fast_uri = __commonJS({
     var fastUri = {
       SCHEMES,
       normalize: normalize3,
-      resolve: resolve60,
+      resolve: resolve66,
       resolveComponent,
       equal,
       serialize,
@@ -66217,12 +66372,12 @@ var require_dist = __commonJS({
         throw new Error(`Unknown format "${name}"`);
       return f;
     };
-    function addFormats(ajv, list, fs76, exportName) {
+    function addFormats(ajv, list, fs79, exportName) {
       var _a2;
       var _b2;
       (_a2 = (_b2 = ajv.opts.code).formats) !== null && _a2 !== void 0 ? _a2 : _b2.formats = (0, codegen_1._)`require("ajv-formats/dist/formats").${exportName}`;
       for (const f of list)
-        ajv.addFormat(f, fs76[f]);
+        ajv.addFormat(f, fs79[f]);
     }
     module2.exports = exports2 = formatsPlugin;
     Object.defineProperty(exports2, "__esModule", { value: true });
@@ -67506,11 +67661,11 @@ var parser = new YargsParser({
   resolve: import_path2.resolve,
   // TODO: figure  out a  way to combine ESM and CJS coverage, such  that
   // we can exercise all the lines below:
-  require: (path91) => {
+  require: (path97) => {
     if (typeof require !== "undefined") {
-      return require(path91);
-    } else if (path91.match(/\.json$/)) {
-      return JSON.parse((0, import_fs2.readFileSync)(path91, "utf8"));
+      return require(path97);
+    } else if (path97.match(/\.json$/)) {
+      return JSON.parse((0, import_fs2.readFileSync)(path97, "utf8"));
     } else {
       throw Error("only .json config files are supported in ESM");
     }
@@ -70036,12 +70191,12 @@ var YargsInstance = class {
   async getCompletion(args, done) {
     argsert("<array> [function]", [args, done], arguments.length);
     if (!done) {
-      return new Promise((resolve60, reject) => {
+      return new Promise((resolve66, reject) => {
         __classPrivateFieldGet(this, _YargsInstance_completion, "f").getCompletion(args, (err, completions) => {
           if (err)
             reject(err);
           else
-            resolve60(completions);
+            resolve66(completions);
         });
       });
     } else {
@@ -71291,16 +71446,16 @@ async function handleAgentSkills(options) {
 }
 async function askYesNo(question) {
   const rl = readline.createInterface({ input: process.stdin, output: process.stderr });
-  return new Promise((resolve60) => {
+  return new Promise((resolve66) => {
     process.stderr.write(`${question} `);
     rl.once("line", (answer) => {
       rl.close();
       const trimmed = answer.trim();
       if (trimmed === "") {
-        resolve60(true);
+        resolve66(true);
         return;
       }
-      resolve60(/^y(es)?$/i.test(trimmed));
+      resolve66(/^y(es)?$/i.test(trimmed));
     });
   });
 }
@@ -71380,8 +71535,8 @@ function handleRemove(argv) {
 }
 
 // src/cli/commands/env.ts
-var fs69 = __toESM(require("fs"));
-var path77 = __toESM(require("path"));
+var fs71 = __toESM(require("fs"));
+var path80 = __toESM(require("path"));
 
 // src/cli/finish-command.ts
 init_sync_context();
@@ -71391,8 +71546,8 @@ async function finishCommand(code) {
 }
 
 // src/core/harness.ts
-var fs63 = __toESM(require("fs"));
-var path69 = __toESM(require("path"));
+var fs65 = __toESM(require("fs"));
+var path72 = __toESM(require("path"));
 
 // src/harness/generator.ts
 var fs48 = __toESM(require("fs"));
@@ -72901,13 +73056,13 @@ var PromisePolyfill = class extends Promise {
   // Available starting from Node 22
   // https://developer.mozilla.org/en-US/docs/Web/JavaScript/Reference/Global_Objects/Promise/withResolvers
   static withResolver() {
-    let resolve60;
+    let resolve66;
     let reject;
     const promise = new Promise((res, rej) => {
-      resolve60 = res;
+      resolve66 = res;
       reject = rej;
     });
-    return { promise, resolve: resolve60, reject };
+    return { promise, resolve: resolve66, reject };
   }
 };
 
@@ -72941,7 +73096,7 @@ function createPrompt(view) {
       output
     });
     const screen = new ScreenManager(rl);
-    const { promise, resolve: resolve60, reject } = PromisePolyfill.withResolver();
+    const { promise, resolve: resolve66, reject } = PromisePolyfill.withResolver();
     const cancel = () => reject(new CancelPromptError());
     if (signal) {
       const abort = () => reject(new AbortPromptError({ cause: signal.reason }));
@@ -72968,7 +73123,7 @@ function createPrompt(view) {
       cycle(() => {
         try {
           const nextView = view(config2, (value) => {
-            setImmediate(() => resolve60(value));
+            setImmediate(() => resolve66(value));
           });
           if (nextView === void 0) {
             const callerFilename = callSites[1]?.getFileName();
@@ -74277,9 +74432,9 @@ var import_rxjs = __toESM(require_cjs(), 1);
 var import_run_async = __toESM(require_run_async(), 1);
 var import_mute_stream2 = __toESM(require_lib(), 1);
 var _ = {
-  set: (obj, path91 = "", value) => {
+  set: (obj, path97 = "", value) => {
     let pointer = obj;
-    path91.split(".").forEach((key, index, arr) => {
+    path97.split(".").forEach((key, index, arr) => {
       if (key === "__proto__" || key === "constructor")
         return;
       if (index === arr.length - 1) {
@@ -74290,8 +74445,8 @@ var _ = {
       pointer = pointer[key];
     });
   },
-  get: (obj, path91 = "", defaultValue) => {
-    const travel = (regexp) => String.prototype.split.call(path91, regexp).filter(Boolean).reduce(
+  get: (obj, path97 = "", defaultValue) => {
+    const travel = (regexp) => String.prototype.split.call(path97, regexp).filter(Boolean).reduce(
       // @ts-expect-error implicit any on res[key]
       (res, key) => res == null ? res : res[key],
       obj
@@ -74409,7 +74564,7 @@ var PromptsRunner = class {
       throw new Error(`Prompt for type ${question.type} not found`);
     }
     let cleanupSignal;
-    const promptFn = isPromptConstructor(prompt2) ? (q, opt) => new Promise((resolve60, reject) => {
+    const promptFn = isPromptConstructor(prompt2) ? (q, opt) => new Promise((resolve66, reject) => {
       const { signal: signal2 } = opt;
       if (signal2.aborted) {
         reject(new AbortPromptError({ cause: signal2.reason }));
@@ -74446,7 +74601,7 @@ var PromptsRunner = class {
         signal2.removeEventListener("abort", abort);
         cleanupSignal = void 0;
       };
-      activePrompt.run().then(resolve60, reject).finally(cleanup);
+      activePrompt.run().then(resolve66, reject).finally(cleanup);
     }) : prompt2;
     let cleanupModuleSignal;
     const { signal: moduleSignal } = this.opt;
@@ -75418,15 +75573,21 @@ function harnessExists(repoPath) {
   return fs53.existsSync(`${repoPath}/.har/stages.json`);
 }
 
-// src/harness/plugin-resolve.ts
+// src/harness/bundle-resolve.ts
 var import_child_process16 = require("child_process");
 var fs54 = __toESM(require("fs"));
 var os20 = __toESM(require("os"));
 var path60 = __toESM(require("path"));
 init_paths();
-var LOCAL_PLUGINS_DIR = ".har/plugins";
-function hasManifest(dir) {
-  return fs54.existsSync(path60.join(dir, "template.manifest.json"));
+function findManifestPath(dir, config2) {
+  for (const name of config2.manifestFiles) {
+    const candidate = path60.join(dir, name);
+    if (fs54.existsSync(candidate)) return candidate;
+  }
+  return null;
+}
+function hasManifest(dir, config2) {
+  return findManifestPath(dir, config2) !== null;
 }
 function readPackageVersion(dir) {
   const pkgPath = path60.join(dir, "package.json");
@@ -75438,9 +75599,9 @@ function readPackageVersion(dir) {
     return void 0;
   }
 }
-function readManifestId(dir) {
-  const manifestPath = path60.join(dir, "template.manifest.json");
-  if (!fs54.existsSync(manifestPath)) return void 0;
+function readManifestId(dir, config2) {
+  const manifestPath = findManifestPath(dir, config2);
+  if (!manifestPath) return void 0;
   try {
     const raw = JSON.parse(fs54.readFileSync(manifestPath, "utf8"));
     return typeof raw.id === "string" ? raw.id : void 0;
@@ -75459,47 +75620,48 @@ function looksLikeNpm(spec) {
   if (spec.includes("/") && !spec.startsWith("@")) return false;
   return /^(@[a-z0-9-~][a-z0-9-._~]*\/)?[a-z0-9-~][a-z0-9-._~]*(@.+)?$/i.test(spec);
 }
-function resolveBundledDir(pluginId) {
-  const dir = path60.join(resolveTemplatesDir(), "plugins", pluginId);
-  return hasManifest(dir) ? dir : null;
-}
 function expandHome(p) {
   if (p.startsWith("~/")) return path60.join(os20.homedir(), p.slice(2));
   if (p === "~") return os20.homedir();
   return p;
 }
-function isLocalPluginDir(dir, repoPath) {
-  const localRoot = path60.resolve(repoPath, LOCAL_PLUGINS_DIR);
-  return path60.dirname(dir) === localRoot;
+function makeTempDir(prefix) {
+  return fs54.mkdtempSync(path60.join(os20.tmpdir(), prefix));
+}
+function manifestNames(config2) {
+  return config2.manifestFiles.join(" or ");
+}
+function resolveTemplatesBundleDir(id, config2) {
+  const dir = path60.join(resolveTemplatesDir(), config2.templatesSubdir, id);
+  return hasManifest(dir, config2) ? dir : null;
+}
+function resolveLocalDir(id, repoPath, config2) {
+  const dir = path60.resolve(repoPath, config2.localDir, id);
+  return hasManifest(dir, config2) ? dir : null;
 }
-function resolvePathSpec(spec, repoPath) {
+function isLocalBundleDir(dir, repoPath, config2) {
+  return path60.dirname(dir) === path60.resolve(repoPath, config2.localDir);
+}
+function resolvePathSpec(spec, repoPath, config2) {
   const raw = spec.startsWith("file:") ? spec.slice("file:".length) : spec;
   const dir = path60.resolve(expandHome(raw));
   if (!fs54.existsSync(dir) || !fs54.statSync(dir).isDirectory()) {
-    throw new Error(`Plugin path not found: ${spec}`);
+    throw new Error(`${config2.label} path not found: ${spec}`);
   }
-  if (!hasManifest(dir)) {
-    throw new Error(`No template.manifest.json in ${dir}`);
+  if (!hasManifest(dir, config2)) {
+    throw new Error(`No ${manifestNames(config2)} in ${dir}`);
   }
-  const id = readManifestId(dir) ?? path60.basename(dir);
   return {
-    id,
-    kind: isLocalPluginDir(dir, repoPath) ? "local" : "path",
+    id: readManifestId(dir, config2) ?? path60.basename(dir),
+    kind: isLocalBundleDir(dir, repoPath, config2) ? "local" : "path",
     dir,
     spec,
     version: readPackageVersion(dir),
     cleanupDirs: []
   };
 }
-function resolveLocalDir(pluginId, repoPath) {
-  const dir = path60.resolve(repoPath, LOCAL_PLUGINS_DIR, pluginId);
-  return hasManifest(dir) ? dir : null;
-}
-function makeTempDir(prefix) {
-  return fs54.mkdtempSync(path60.join(os20.tmpdir(), prefix));
-}
-function resolveNpmSpec(spec) {
-  const tmp = makeTempDir("har-plugin-npm-");
+function resolveNpmSpec(spec, config2) {
+  const tmp = makeTempDir(`har-${config2.label}-npm-`);
   const cleanupDirs = [tmp];
   try {
     (0, import_child_process16.execFileSync)("npm", ["pack", spec, "--pack-destination", tmp], {
@@ -75517,20 +75679,18 @@ function resolveNpmSpec(spec) {
       encoding: "utf8",
       stdio: ["ignore", "pipe", "pipe"]
     });
-    const packageDir = path60.join(extractDir, "package");
-    let dir = packageDir;
-    if (!hasManifest(dir)) {
-      const nested = fs54.readdirSync(extractDir, { withFileTypes: true }).filter((e) => e.isDirectory()).map((e) => path60.join(extractDir, e.name)).find((d) => hasManifest(d));
+    let dir = path60.join(extractDir, "package");
+    if (!hasManifest(dir, config2)) {
+      const nested = fs54.readdirSync(extractDir, { withFileTypes: true }).filter((e) => e.isDirectory()).map((e) => path60.join(extractDir, e.name)).find((d) => hasManifest(d, config2));
       if (!nested) {
         throw new Error(
-          `npm package ${spec} has no template.manifest.json (not a HAR plugin bundle)`
+          `npm package ${spec} has no ${manifestNames(config2)} (not a HAR ${config2.label} bundle)`
         );
       }
       dir = nested;
     }
-    const id = readManifestId(dir) ?? spec.replace(/^@/, "").replace(/[/:].*/g, "");
     return {
-      id,
+      id: readManifestId(dir, config2) ?? spec.replace(/^@/, "").replace(/[/:].*/g, ""),
       kind: "npm",
       dir,
       spec,
@@ -75542,11 +75702,11 @@ function resolveNpmSpec(spec) {
       fs54.rmSync(d, { recursive: true, force: true });
     }
     const message = err instanceof Error ? err.message : String(err);
-    throw new Error(`Failed to install plugin from npm (${spec}): ${message}`);
+    throw new Error(`Failed to install ${config2.label} from npm (${spec}): ${message}`);
   }
 }
-function resolveGitSpec(spec) {
-  const tmp = makeTempDir("har-plugin-git-");
+function resolveGitSpec(spec, config2) {
+  const tmp = makeTempDir(`har-${config2.label}-git-`);
   const cleanupDirs = [tmp];
   const cloneDir = path60.join(tmp, "repo");
   try {
@@ -75566,19 +75726,20 @@ function resolveGitSpec(spec) {
       timeout: 18e4
     });
     let dir = cloneDir;
-    if (!hasManifest(dir)) {
-      const pluginsRoot = path60.join(cloneDir, "plugins");
-      if (fs54.existsSync(pluginsRoot)) {
-        const child = fs54.readdirSync(pluginsRoot, { withFileTypes: true }).filter((e) => e.isDirectory()).map((e) => path60.join(pluginsRoot, e.name)).find((d) => hasManifest(d));
+    if (!hasManifest(dir, config2)) {
+      const nestedRoot = path60.join(cloneDir, config2.gitNestedDir);
+      if (fs54.existsSync(nestedRoot)) {
+        const child = fs54.readdirSync(nestedRoot, { withFileTypes: true }).filter((e) => e.isDirectory()).map((e) => path60.join(nestedRoot, e.name)).find((d) => hasManifest(d, config2));
         if (child) dir = child;
       }
     }
-    if (!hasManifest(dir)) {
-      throw new Error(`Git repo ${spec} has no template.manifest.json (not a HAR plugin bundle)`);
+    if (!hasManifest(dir, config2)) {
+      throw new Error(
+        `Git repo ${spec} has no ${manifestNames(config2)} (not a HAR ${config2.label} bundle)`
+      );
     }
-    const id = readManifestId(dir) ?? path60.basename(url.replace(/\.git$/, ""));
     return {
-      id,
+      id: readManifestId(dir, config2) ?? path60.basename(url.replace(/\.git$/, "")),
       kind: "git",
       dir,
       spec,
@@ -75590,21 +75751,21 @@ function resolveGitSpec(spec) {
       fs54.rmSync(d, { recursive: true, force: true });
     }
     const message = err instanceof Error ? err.message : String(err);
-    throw new Error(`Failed to install plugin from git (${spec}): ${message}`);
+    throw new Error(`Failed to install ${config2.label} from git (${spec}): ${message}`);
   }
 }
-function resolvePluginSource(spec, repoPath = ".") {
+function resolveBundleSource(spec, repoPath, config2) {
   const trimmed = spec.trim();
   if (!trimmed) {
-    throw new Error("Plugin spec is empty");
+    throw new Error(`${config2.label} spec is empty`);
   }
   if (looksLikePath(trimmed)) {
-    return resolvePathSpec(trimmed, repoPath);
+    return resolvePathSpec(trimmed, repoPath, config2);
   }
   if (looksLikeGit(trimmed)) {
-    return resolveGitSpec(trimmed);
+    return resolveGitSpec(trimmed, config2);
   }
-  const bundled = resolveBundledDir(trimmed);
+  const bundled = resolveTemplatesBundleDir(trimmed, config2);
   if (bundled) {
     return {
       id: trimmed,
@@ -75615,10 +75776,10 @@ function resolvePluginSource(spec, repoPath = ".") {
       cleanupDirs: []
     };
   }
-  const local = resolveLocalDir(trimmed, repoPath);
+  const local = resolveLocalDir(trimmed, repoPath, config2);
   if (local) {
     return {
-      id: readManifestId(local) ?? trimmed,
+      id: readManifestId(local, config2) ?? trimmed,
       kind: "local",
       dir: local,
       spec: trimmed,
@@ -75626,23 +75787,54 @@ function resolvePluginSource(spec, repoPath = ".") {
       cleanupDirs: []
     };
   }
-  if (looksLikeNpm(trimmed) && (trimmed.includes("@") || trimmed.includes("/"))) {
-    return resolveNpmSpec(trimmed);
-  }
+  const hint = config2.unknownHint?.(repoPath) ?? "";
   if (looksLikeNpm(trimmed)) {
     try {
-      return resolveNpmSpec(trimmed);
+      return resolveNpmSpec(trimmed, config2);
     } catch (npmErr) {
+      if (trimmed.includes("@") || trimmed.includes("/")) throw npmErr;
       const npmMessage = npmErr instanceof Error ? npmErr.message : String(npmErr);
       throw new Error(
-        `Unknown plugin: ${trimmed}. ${knownPluginsHint(repoPath)} Or pass a path, npm package, or git URL. (${npmMessage})`
+        `Unknown ${config2.label}: ${trimmed}. ${hint} Or pass a path, npm package, or git URL. (${npmMessage})`
       );
     }
   }
   throw new Error(
-    `Unknown plugin: ${trimmed}. ${knownPluginsHint(repoPath)} Or pass a path (./plugin), npm package (@org/pkg), or git URL (github:org/repo).`
+    `Unknown ${config2.label}: ${trimmed}. ${hint} Or pass a path (./bundle), npm package (@org/pkg), or git URL (github:org/repo).`
   );
 }
+function listTemplateBundleIds(config2) {
+  const root = path60.join(resolveTemplatesDir(), config2.templatesSubdir);
+  if (!fs54.existsSync(root)) return [];
+  return fs54.readdirSync(root, { withFileTypes: true }).filter((entry) => entry.isDirectory()).map((entry) => entry.name).filter((name) => hasManifest(path60.join(root, name), config2)).sort();
+}
+function listLocalBundleIds(repoPath, config2) {
+  const root = path60.resolve(repoPath, config2.localDir);
+  if (!fs54.existsSync(root)) return [];
+  return fs54.readdirSync(root, { withFileTypes: true }).filter((entry) => entry.isDirectory()).map((entry) => entry.name).filter((name) => hasManifest(path60.join(root, name), config2)).sort();
+}
+function cleanupResolvedBundle(source) {
+  for (const dir of source.cleanupDirs) {
+    fs54.rmSync(dir, { recursive: true, force: true });
+  }
+}
+
+// src/harness/plugin-resolve.ts
+var LOCAL_PLUGINS_DIR = ".har/plugins";
+var PLUGIN_BUNDLE_CONFIG = {
+  // `line.manifest.json` is accepted here on purpose: resolving a line bundle
+  // lets `readPluginManifestFromDir` refuse it with a pointer at `har line add`
+  // instead of a bare "not a HAR plugin bundle".
+  manifestFiles: ["template.manifest.json", "line.manifest.json"],
+  templatesSubdir: "plugins",
+  localDir: LOCAL_PLUGINS_DIR,
+  gitNestedDir: "plugins",
+  label: "plugin",
+  unknownHint: (repoPath) => knownPluginsHint(repoPath)
+};
+function resolvePluginSource(spec, repoPath = ".") {
+  return resolveBundleSource(spec, repoPath, PLUGIN_BUNDLE_CONFIG);
+}
 function knownPluginsHint(repoPath) {
   const bundled = listBundledPluginIds();
   const local = listLocalPluginIds(repoPath);
@@ -75655,19 +75847,13 @@ function knownPluginsHint(repoPath) {
   return parts.join(" ");
 }
 function listLocalPluginIds(repoPath = ".") {
-  const root = path60.resolve(repoPath, LOCAL_PLUGINS_DIR);
-  if (!fs54.existsSync(root)) return [];
-  return fs54.readdirSync(root, { withFileTypes: true }).filter((entry) => entry.isDirectory()).map((entry) => entry.name).filter((name) => hasManifest(path60.join(root, name))).sort();
+  return listLocalBundleIds(repoPath, PLUGIN_BUNDLE_CONFIG);
 }
 function listBundledPluginIds() {
-  const root = path60.join(resolveTemplatesDir(), "plugins");
-  if (!fs54.existsSync(root)) return [];
-  return fs54.readdirSync(root, { withFileTypes: true }).filter((entry) => entry.isDirectory()).map((entry) => entry.name).filter((name) => hasManifest(path60.join(root, name))).sort();
+  return listTemplateBundleIds(PLUGIN_BUNDLE_CONFIG);
 }
 function cleanupResolvedPlugin(source) {
-  for (const dir of source.cleanupDirs) {
-    fs54.rmSync(dir, { recursive: true, force: true });
-  }
+  cleanupResolvedBundle(source);
 }
 
 // src/harness/plugin-prompt.ts
@@ -75774,13 +75960,17 @@ function resolveBundledPluginDir(pluginId) {
   return dir;
 }
 function readPluginManifestFromDir(pluginDir, expectedId) {
-  const manifestPath = path62.join(pluginDir, "template.manifest.json");
-  if (!fs56.existsSync(manifestPath)) {
+  const manifestPath = findManifestPath(pluginDir, PLUGIN_BUNDLE_CONFIG);
+  if (!manifestPath) {
     throw new Error(`No template.manifest.json in ${pluginDir}`);
   }
-  const parsed = PluginManifestSchema.safeParse(
-    JSON.parse(fs56.readFileSync(manifestPath, "utf8"))
-  );
+  const raw = JSON.parse(fs56.readFileSync(manifestPath, "utf8"));
+  if (raw.kind === LINE_BUNDLE_KIND || path62.basename(manifestPath) === "line.manifest.json") {
+    throw new Error(
+      `${path62.basename(manifestPath)} declares "kind": "line" \u2014 this is a factory line bundle, not a verification plugin. Install it with: har line add <spec>`
+    );
+  }
+  const parsed = PluginManifestSchema.safeParse(raw);
   if (!parsed.success) {
     throw new Error(`Invalid plugin manifest: ${parsed.error.message}`);
   }
@@ -76682,8 +76872,8 @@ init_manifest();
 init_stages();
 
 // src/harness/doctor.ts
-var fs61 = __toESM(require("fs"));
-var path67 = __toESM(require("path"));
+var fs63 = __toESM(require("fs"));
+var path70 = __toESM(require("path"));
 init_slot_registry();
 
 // src/harness/eject.ts
@@ -76787,20 +76977,408 @@ function adoptHarness(repoPath) {
 // src/harness/doctor.ts
 init_env();
 init_manifest();
+
+// src/harness/line-ledger.ts
+var fs60 = __toESM(require("fs"));
+var path66 = __toESM(require("path"));
+init_file_ops();
+init_manifest();
+init_schema2();
+function getLineLedgerPath(repoPath) {
+  return path66.join(path66.resolve(repoPath), DEFAULT_HAR_DIR, "lines.json");
+}
+function readLineLedger(repoPath) {
+  const ledgerPath = getLineLedgerPath(repoPath);
+  if (!fs60.existsSync(ledgerPath)) return null;
+  try {
+    const parsed = LineLedgerSchema.safeParse(JSON.parse(fs60.readFileSync(ledgerPath, "utf8")));
+    return parsed.success ? parsed.data : null;
+  } catch {
+    return null;
+  }
+}
+function writeLineLedger(repoPath, ledger) {
+  const ledgerPath = getLineLedgerPath(repoPath);
+  const harnessDir = path66.dirname(ledgerPath);
+  if (!fs60.existsSync(harnessDir)) {
+    fs60.mkdirSync(harnessDir, { recursive: true });
+  }
+  writeFileSafe(ledgerPath, `${JSON.stringify(ledger, null, 2)}
+`);
+}
+function upsertLineLedgerEntry(repoPath, entry) {
+  const existing = readLineLedger(repoPath) ?? { version: "1", lines: [] };
+  const lines = existing.lines.filter((l) => l.id !== entry.id);
+  lines.push(entry);
+  lines.sort((a, b2) => a.id.localeCompare(b2.id));
+  const ledger = { version: "1", lines };
+  writeLineLedger(repoPath, ledger);
+  return ledger;
+}
+
+// src/harness/lines.ts
+var fs61 = __toESM(require("fs"));
+var path68 = __toESM(require("path"));
+init_logging();
+
+// src/harness/line-prompt.ts
+var path67 = __toESM(require("path"));
+init_file_ops();
+init_manifest();
+function lineAdaptationPromptFile(lineId) {
+  return `ADAPT-PROMPT-line-${lineId}.md`;
+}
+function buildLineAdaptationPrompt(repoPath, program, result) {
+  const stations = program.stations.map((s, i) => `${i + 1}. \`${s.id}\` \u2014 ${s.title}${s.work?.ids?.length ? ` (work: ${s.work.ids.join(", ")})` : ""}`).join("\n");
+  const gateRows = program.gate.stages.map((s) => `| \`${s.id}\` | \`${s.fromStation}\` | ${s.tier} |`).join("\n");
+  const registered = result.stageIds.length > 0 ? result.stageIds.map((id) => `- \`${id}\` \u2014 registered, **not** in \`verificationStages\``).join("\n") : "- _(this line registered no extra stages)_";
+  const declaredSkills = program.skills.length > 0 ? program.skills.map((s) => `- \`${s.id}\` (${s.role})${s.install ? ` \u2014 install: \`${s.install}\`` : ""}`).join("\n") : "- _(none declared)_";
+  const declaredMcp = program.mcp.length > 0 ? program.mcp.map((m) => `- \`${m.name}\`${m.required ? " (required)" : " (optional)"}${m.why ? ` \u2014 ${m.why}` : ""}`).join("\n") : "- _(none declared)_";
+  const warnings = result.warnings.length > 0 ? result.warnings.map((w2) => `- \u26A0 ${w2}`).join("\n") : "- _(none)_";
+  const optIn = program.gate.optInEnv ? `This line's gate is opt-in: stages run only when \`${program.gate.optInEnv}=1\`.` : "This line has no opt-in env var \u2014 `har line gate` runs its stages on demand.";
+  return `# Adapt the factory line: ${result.lineId}
+
+Installed from \`${result.source}\` into \`${path67.basename(path67.resolve(repoPath))}\`.
+Program: \`${result.programPath}\`
+
+## What just happened
+
+A **factory line** was installed. A line is a *program* \u2014 an ordered set of
+stations plus a cumulative gate. It is not a verification plugin:
+
+${registered}
+
+\`verificationStages\` was **not** modified. Default \`har env verify --full\`
+takes exactly as long as it did before this install. ${optIn}
+
+## Stations
+
+${stations}
+
+## Cumulative gate (the ratchet)
+
+A gate stage tagged \`fromStation: X\` is required at X **and every later
+station**. Adding a station must never drop an earlier station's stages.
+
+| Stage | From station | Tier |
+|---|---|---|
+${gateRows || "| _(none)_ | | |"}
+
+Run it with:
+
+\`\`\`bash
+har line gate <station> --line ${result.lineId}
+\`\`\`
+
+Never with \`har env verify --full\` \u2014 that is the whole point of the split.
+
+## Declared dependencies (declarations, not installs)
+
+Skills:
+
+${declaredSkills}
+
+MCP servers:
+
+${declaredMcp}
+
+HAR does not vendor skill packs or MCP servers. Check they are present, install
+them the way your agent normally does, and skip tracker steps for any MCP marked
+optional that is missing.
+
+## Warnings from install
+
+${warnings}
+
+## Your job now
+
+1. Read \`${result.programPath}\` and make the stations describe *this* repo's
+   work \u2014 station titles, \`work.source\`/\`work.ids\`, waves.
+2. Make each registered stage script real (replace TODO blocks). They live under
+   \`.har/stages/\`.
+3. Leave \`gate.cumulative: true\` and \`handoff.autonomousShip: false\` alone \u2014
+   both are contract, not preference.
+4. Do **not** add line stages to \`verificationStages\`. If a check should gate
+   every verify, it belongs in a verification plugin instead
+   (\`har env add-plugin\`), not on this line.
+5. Verify the harness still passes as before: \`har env verify <slot> --full\`.
+`;
+}
+function writeLineAdaptationPrompt(repoPath, lineId, content) {
+  const filePath = path67.join(getHarnessDir(repoPath), lineAdaptationPromptFile(lineId));
+  writeFileSafe(filePath, content);
+  return filePath;
+}
+
+// src/harness/line-resolve.ts
+init_schema2();
+var LOCAL_LINES_DIR = ".har/lines";
+var LINE_BUNDLE_CONFIG = {
+  manifestFiles: LINE_MANIFEST_FILES,
+  templatesSubdir: "lines",
+  localDir: LOCAL_LINES_DIR,
+  gitNestedDir: "lines",
+  label: "line",
+  unknownHint: (repoPath) => knownLinesHint(repoPath)
+};
+function resolveLineSource(spec, repoPath = ".") {
+  return resolveBundleSource(spec, repoPath, LINE_BUNDLE_CONFIG);
+}
+function knownLinesHint(repoPath) {
+  const bundled = listBundledLineIds();
+  const local = listLocalLineIds(repoPath);
+  const parts = [`Bundled: ${bundled.join(", ") || "(none)"}.`];
+  if (local.length > 0) {
+    parts.push(`Local (${LOCAL_LINES_DIR}/): ${local.join(", ")}.`);
+  } else {
+    parts.push("Scaffold a project-owned one with: har line create <id>.");
+  }
+  return parts.join(" ");
+}
+function listLocalLineIds(repoPath = ".") {
+  return listLocalBundleIds(repoPath, LINE_BUNDLE_CONFIG);
+}
+function listBundledLineIds() {
+  return listTemplateBundleIds(LINE_BUNDLE_CONFIG);
+}
+function cleanupResolvedLine(source) {
+  cleanupResolvedBundle(source);
+}
+
+// src/harness/lines.ts
+init_schema2();
+init_schema2();
+init_stages();
+function lineDirRel(lineId) {
+  return `${LOCAL_LINES_DIR}/${lineId}`;
+}
+function lineProgramPathRel(lineId) {
+  return `${lineDirRel(lineId)}/line.json`;
+}
+function readLineManifestFromDir(bundleDir, expectedId) {
+  const manifestPath = findManifestPath(bundleDir, LINE_BUNDLE_CONFIG);
+  if (!manifestPath) {
+    throw new Error(`No ${LINE_MANIFEST_FILES.join(" or ")} in ${bundleDir}`);
+  }
+  const raw = JSON.parse(fs61.readFileSync(manifestPath, "utf8"));
+  if (raw.kind !== LINE_BUNDLE_KIND) {
+    throw new Error(
+      `${path68.basename(manifestPath)} is not a factory line bundle (missing "kind": "line"). Verification plugins install with: har env add-plugin <spec>`
+    );
+  }
+  const parsed = LineManifestSchema.safeParse(raw);
+  if (!parsed.success) {
+    throw new Error(`Invalid line manifest: ${parsed.error.message}`);
+  }
+  if (expectedId && parsed.data.id !== expectedId) {
+    throw new Error(`Line manifest id mismatch: expected ${expectedId}, got ${parsed.data.id}`);
+  }
+  return parsed.data;
+}
+function readLineProgramFromDir(bundleDir, manifest) {
+  const programPath = path68.join(bundleDir, manifest.program);
+  if (!fs61.existsSync(programPath)) {
+    throw new Error(`Line program missing: ${manifest.program} (referenced by line.manifest.json)`);
+  }
+  const parsed = LineProgramSchema.safeParse(JSON.parse(fs61.readFileSync(programPath, "utf8")));
+  if (!parsed.success) {
+    throw new Error(`Invalid line program (${manifest.program}): ${parsed.error.message}`);
+  }
+  if (parsed.data.id !== manifest.id) {
+    throw new Error(
+      `Line program id "${parsed.data.id}" does not match manifest id "${manifest.id}"`
+    );
+  }
+  return parsed.data;
+}
+function readInstalledLineProgram(repoPath, lineId) {
+  const programPath = path68.join(path68.resolve(repoPath), lineProgramPathRel(lineId));
+  if (!fs61.existsSync(programPath)) return null;
+  const parsed = LineProgramSchema.safeParse(JSON.parse(fs61.readFileSync(programPath, "utf8")));
+  return parsed.success ? parsed.data : null;
+}
+function ensureParentDir3(filePath) {
+  fs61.mkdirSync(path68.dirname(filePath), { recursive: true });
+}
+function copyBundleFile(bundleDir, file, repoPath, force) {
+  const srcPath = path68.join(bundleDir, file.src);
+  const destPath = path68.join(repoPath, file.dest);
+  if (!fs61.existsSync(srcPath)) {
+    throw new Error(`Line file missing: ${file.src}`);
+  }
+  if (path68.resolve(srcPath) === path68.resolve(destPath)) {
+    return file.dest;
+  }
+  if (fs61.existsSync(destPath) && !force) {
+    throw new Error(
+      `File already exists: ${file.dest}. Use --force to overwrite or remove it first.`
+    );
+  }
+  ensureParentDir3(destPath);
+  fs61.copyFileSync(srcPath, destPath);
+  if (file.executable) {
+    fs61.chmodSync(destPath, 493);
+  }
+  return file.dest;
+}
+function registerStagesOnly(repoPath, stages, force) {
+  if (stages.length === 0) return;
+  const registry2 = readStageRegistry(repoPath);
+  const before = JSON.stringify(registry2.verificationStages ?? null);
+  let nextStages = [...registry2.stages];
+  for (const stage of stages) {
+    const existing = nextStages.find((s) => s.id === stage.id);
+    if (existing && !force) {
+      throw new Error(
+        `Stage "${stage.id}" already registered in .har/stages.json. Use --force to replace.`
+      );
+    }
+    nextStages = existing ? nextStages.map((s) => s.id === stage.id ? stage : s) : [...nextStages, stage];
+  }
+  const updated = { ...registry2, stages: nextStages };
+  const after = JSON.stringify(updated.verificationStages ?? null);
+  if (before !== after) {
+    throw new Error(
+      "Refusing to write: applying a line changed verificationStages. Line gate stages are opt-in and run via `har line gate`."
+    );
+  }
+  writeStageRegistry(repoPath, updated);
+}
+function assertGateStagesResolvable(program, registeredIds, repoPath) {
+  const warnings = [];
+  const registry2 = readStageRegistry(repoPath);
+  const known = /* @__PURE__ */ new Set([...registry2.stages.map((s) => s.id), ...registeredIds]);
+  for (const stage of program.gate.stages) {
+    if (!known.has(stage.id)) {
+      warnings.push(
+        `gate stage "${stage.id}" (from ${stage.fromStation}) is not registered in .har/stages.json \u2014 install the plugin that provides it, or add it to the line bundle.`
+      );
+    }
+  }
+  return warnings;
+}
+function applyLineFromDir(repoPath, bundleDir, options, meta) {
+  const resolved = path68.resolve(repoPath);
+  const force = options.force ?? false;
+  const warnings = [];
+  const filesWritten = [];
+  if (!harnessExists(resolved)) {
+    throw new Error('No .har/ harness found. Run "har onboard" first.');
+  }
+  const manifest = readLineManifestFromDir(bundleDir);
+  const program = readLineProgramFromDir(bundleDir, manifest);
+  const stages = manifest.stages;
+  const stageIds = stages.map((s) => s.id);
+  const verificationBefore = JSON.stringify(readStageRegistry(resolved).verificationStages ?? null);
+  for (const file of manifest.files) {
+    filesWritten.push(copyBundleFile(bundleDir, file, resolved, force));
+  }
+  const programDest = path68.join(resolved, lineProgramPathRel(manifest.id));
+  const programSrc = path68.join(bundleDir, manifest.program);
+  if (path68.resolve(programSrc) !== path68.resolve(programDest)) {
+    if (fs61.existsSync(programDest) && !force) {
+      throw new Error(
+        `Line already installed: ${lineProgramPathRel(manifest.id)}. Use --force to replace.`
+      );
+    }
+    ensureParentDir3(programDest);
+    fs61.copyFileSync(programSrc, programDest);
+  }
+  filesWritten.push(lineProgramPathRel(manifest.id));
+  const manifestDest = path68.join(resolved, lineDirRel(manifest.id), "line.manifest.json");
+  const manifestSrc = findManifestPath(bundleDir, LINE_BUNDLE_CONFIG);
+  if (path68.resolve(manifestSrc) !== path68.resolve(manifestDest)) {
+    ensureParentDir3(manifestDest);
+    fs61.copyFileSync(manifestSrc, manifestDest);
+    filesWritten.push(`${lineDirRel(manifest.id)}/line.manifest.json`);
+  }
+  registerStagesOnly(resolved, stages, force);
+  const verificationAfter = JSON.stringify(readStageRegistry(resolved).verificationStages ?? null);
+  if (verificationBefore !== verificationAfter) {
+    throw new Error(
+      "Line apply changed verificationStages \u2014 this is a bug. Line gate stages must stay off `har env verify --full`."
+    );
+  }
+  warnings.push(...assertGateStagesResolvable(program, stageIds, resolved));
+  upsertLineLedgerEntry(resolved, {
+    id: manifest.id,
+    source: meta.source,
+    spec: meta.spec,
+    version: meta.version,
+    stageIds,
+    programPath: lineProgramPathRel(manifest.id),
+    installedAt: (/* @__PURE__ */ new Date()).toISOString()
+  });
+  const firstGatedStation = program.stations.find(
+    (station) => program.gate.stages.some((stage) => stage.fromStation === station.id)
+  )?.id ?? program.stations[0].id;
+  const nextSteps = manifest.nextSteps.length > 0 ? manifest.nextSteps : [
+    `har line status ${manifest.id}`,
+    `har line gate ${firstGatedStation} --line ${manifest.id}`,
+    `Adapt the program: ${lineProgramPathRel(manifest.id)}`
+  ];
+  const partial2 = {
+    lineId: manifest.id,
+    title: manifest.title ?? program.title,
+    stageIds,
+    filesWritten,
+    warnings,
+    nextSteps,
+    programPath: lineProgramPathRel(manifest.id),
+    docsPath: manifest.docsPath,
+    source: meta.source,
+    stationIds: program.stations.map((s) => s.id),
+    firstGatedStationId: firstGatedStation
+  };
+  const promptAbsPath = writeLineAdaptationPrompt(
+    resolved,
+    manifest.id,
+    buildLineAdaptationPrompt(resolved, program, { ...partial2, adaptPromptPath: "" })
+  );
+  const adaptPromptPath = path68.relative(resolved, promptAbsPath);
+  success(`Applied line: ${manifest.id}`);
+  info(`Stations: ${partial2.stationIds.join(" \u2192 ")}`);
+  info(
+    stageIds.length > 0 ? `Registered stage(s) (NOT on verify): ${stageIds.join(", ")}` : "No extra stages registered"
+  );
+  for (const file of filesWritten) {
+    info(`  + ${file}`);
+  }
+  info(`  + ${adaptPromptPath} (adaptation prompt for your coding agent)`);
+  for (const warning of warnings) {
+    warn(`  \u26A0 ${warning}`);
+  }
+  return { ...partial2, adaptPromptPath };
+}
+function applyLine(repoPath, lineSpec, options = {}) {
+  const spec = options.spec ?? lineSpec;
+  const source = resolveLineSource(spec, repoPath);
+  try {
+    return applyLineFromDir(repoPath, source.dir, options, {
+      source: source.kind,
+      spec: source.spec,
+      version: source.version
+    });
+  } finally {
+    cleanupResolvedLine(source);
+  }
+}
+
+// src/harness/doctor.ts
 init_stages();
 init_hooks2();
 
 // src/harness/migrations.ts
-var fs60 = __toESM(require("fs"));
-var path66 = __toESM(require("path"));
+var fs62 = __toESM(require("fs"));
+var path69 = __toESM(require("path"));
 init_schema2();
 init_manifest();
 init_profiles();
 init_stages();
 init_manifest();
 var MIGRATE_DIR = "migrate";
-var MIGRATE_BACKUP_DIR = path66.join(MIGRATE_DIR, "backup");
-var MIGRATE_PLAN_FILE = path66.join(MIGRATE_DIR, "plan.json");
+var MIGRATE_BACKUP_DIR = path69.join(MIGRATE_DIR, "backup");
+var MIGRATE_PLAN_FILE = path69.join(MIGRATE_DIR, "plan.json");
 var LEGACY_MACHINERY_FILES = [
   "agent-slot.sh",
   "provision-toolchain.sh",
@@ -76841,25 +77419,25 @@ function harnessEnvIsPre10(content) {
   return /^\s*(har_infra_enabled|har_pg|har_node_[a-z_]+|har_pkg_exec)\s*\(\)/m.test(content) || /^export\s+HARNESS_[A-Z0-9_]+_PORT_(DEFAULT|SCAN_START|SCAN_END)=/m.test(content);
 }
 function scriptIsVendored(harnessDir, script) {
-  const file = path66.join(harnessDir, script);
-  if (!fs60.existsSync(file)) return false;
-  const content = fs60.readFileSync(file, "utf8");
+  const file = path69.join(harnessDir, script);
+  if (!fs62.existsSync(file)) return false;
+  const content = fs62.readFileSync(file, "utf8");
   return !content.includes("exec har env") && !content.includes("runtime/har.cjs");
 }
 function isPre10Harness(repoPath) {
-  const resolved = path66.resolve(repoPath);
+  const resolved = path69.resolve(repoPath);
   const harnessDir = getHarnessDir(resolved);
-  if (!fs60.existsSync(harnessDir)) return false;
+  if (!fs62.existsSync(harnessDir)) return false;
   const manifest = readManifest(resolved);
   if (manifest?.ejected) return false;
   for (const file of LEGACY_MACHINERY_FILES) {
-    if (fs60.existsSync(path66.join(harnessDir, file))) return true;
+    if (fs62.existsSync(path69.join(harnessDir, file))) return true;
   }
   for (const script of MANAGED_SHIM_FILES) {
     if (scriptIsVendored(harnessDir, script)) return true;
   }
-  const envPath = path66.join(harnessDir, "harness.env");
-  if (fs60.existsSync(envPath) && harnessEnvIsPre10(fs60.readFileSync(envPath, "utf8"))) {
+  const envPath = path69.join(harnessDir, "harness.env");
+  if (fs62.existsSync(envPath) && harnessEnvIsPre10(fs62.readFileSync(envPath, "utf8"))) {
     return true;
   }
   return false;
@@ -76992,10 +77570,10 @@ var SCRIPT_RESIDUE_TARGET = {
   "agent-cli.sh": "review"
 };
 function backupRel(file) {
-  return path66.join(MIGRATE_BACKUP_DIR, file);
+  return path69.join(MIGRATE_BACKUP_DIR, file);
 }
 function buildPre10Plan(repoPath) {
-  const resolved = path66.resolve(repoPath);
+  const resolved = path69.resolve(repoPath);
   const harnessDir = getHarnessDir(resolved);
   const manifest = readManifest(resolved);
   const profile = manifest?.profile ?? "default";
@@ -77004,7 +77582,7 @@ function buildPre10Plan(repoPath) {
   const deleteLifecycleScripts = [];
   const residue = [];
   for (const script of MANAGED_SHIM_FILES) {
-    if (!fs60.existsSync(path66.join(harnessDir, script))) continue;
+    if (!fs62.existsSync(path69.join(harnessDir, script))) continue;
     deleteLifecycleScripts.push(script);
     if (scriptIsVendored(harnessDir, script)) {
       const target = SCRIPT_RESIDUE_TARGET[script] ?? "review";
@@ -77018,31 +77596,31 @@ function buildPre10Plan(repoPath) {
   }
   const survivingScripts = [];
   for (const dir of ["stages", "hooks"]) {
-    const full = path66.join(harnessDir, dir);
-    if (!fs60.existsSync(full)) continue;
-    for (const entry of fs60.readdirSync(full)) {
-      if (entry.endsWith(".sh") || entry.endsWith(".mjs")) survivingScripts.push(path66.join(dir, entry));
+    const full = path69.join(harnessDir, dir);
+    if (!fs62.existsSync(full)) continue;
+    for (const entry of fs62.readdirSync(full)) {
+      if (entry.endsWith(".sh") || entry.endsWith(".mjs")) survivingScripts.push(path69.join(dir, entry));
     }
   }
-  for (const entry of fs60.readdirSync(harnessDir)) {
+  for (const entry of fs62.readdirSync(harnessDir)) {
     if (!entry.endsWith(".sh")) continue;
     if (MANAGED_SHIM_FILES.includes(entry)) continue;
     if (LEGACY_MACHINERY_FILES.includes(entry)) continue;
-    if (!fs60.statSync(path66.join(harnessDir, entry)).isFile()) continue;
+    if (!fs62.statSync(path69.join(harnessDir, entry)).isFile()) continue;
     survivingScripts.push(entry);
   }
   const referencedBy = (machineryFile) => {
-    const base = path66.basename(machineryFile).replace(/[.*+?^${}()|[\]\\]/g, "\\$&");
+    const base = path69.basename(machineryFile).replace(/[.*+?^${}()|[\]\\]/g, "\\$&");
     const loadRe = new RegExp(
       `(?:\\bsource\\b|\\bbash\\b|\\bexec\\b|(?:^|[;&|(])\\s*\\.\\s)[^\\n#]*${base}`
     );
     return survivingScripts.filter(
-      (script) => fs60.readFileSync(path66.join(harnessDir, script), "utf8").split("\n").some((line) => !/^\s*#/.test(line) && loadRe.test(line))
+      (script) => fs62.readFileSync(path69.join(harnessDir, script), "utf8").split("\n").some((line) => !/^\s*#/.test(line) && loadRe.test(line))
     );
   };
   const retireDocs = [];
   for (const doc of RETIRED_DOC_FILES) {
-    if (!fs60.existsSync(path66.join(harnessDir, doc))) continue;
+    if (!fs62.existsSync(path69.join(harnessDir, doc))) continue;
     retireDocs.push(doc);
     residue.push({
       source: doc,
@@ -77055,8 +77633,8 @@ function buildPre10Plan(repoPath) {
   const editedMachinery = [];
   const retainMachinery = [];
   for (const file of LEGACY_MACHINERY_FILES) {
-    const full = path66.join(harnessDir, file);
-    if (!fs60.existsSync(full)) continue;
+    const full = path69.join(harnessDir, file);
+    if (!fs62.existsSync(full)) continue;
     const refs = referencedBy(file);
     if (refs.length > 0) {
       retainMachinery.push(file);
@@ -77070,7 +77648,7 @@ function buildPre10Plan(repoPath) {
     }
     deleteMachinery.push(file);
     const recorded = fileBaseline[file];
-    const installed = computeFileChecksum(fs60.readFileSync(full, "utf8"));
+    const installed = computeFileChecksum(fs62.readFileSync(full, "utf8"));
     if (recorded !== void 0 && installed !== recorded) {
       editedMachinery.push(file);
       residue.push({
@@ -77082,9 +77660,9 @@ function buildPre10Plan(repoPath) {
     }
   }
   let env3 = null;
-  const envPath = path66.join(harnessDir, "harness.env");
-  if (fs60.existsSync(envPath)) {
-    const content = fs60.readFileSync(envPath, "utf8");
+  const envPath = path69.join(harnessDir, "harness.env");
+  if (fs62.existsSync(envPath)) {
+    const content = fs62.readFileSync(envPath, "utf8");
     if (harnessEnvIsPre10(content) || migrateHarnessEnvContent(content).commentedKeys.length > 0) {
       env3 = migrateHarnessEnvContent(content);
       for (const fn of env3.customFunctions) {
@@ -77109,7 +77687,7 @@ function buildPre10Plan(repoPath) {
   for (const file of composed.keys()) {
     if (MANAGED_SHIM_FILES.includes(file)) continue;
     if (file === "gitignore.template") continue;
-    if (!fs60.existsSync(path66.join(harnessDir, file))) installMissing.push(file);
+    if (!fs62.existsSync(path69.join(harnessDir, file))) installMissing.push(file);
   }
   let phantomVerificationIds = [];
   try {
@@ -77140,25 +77718,25 @@ function buildPre10Plan(repoPath) {
   };
 }
 function applyPre10Plan(repoPath, plan) {
-  const resolved = path66.resolve(repoPath);
+  const resolved = path69.resolve(repoPath);
   const harnessDir = getHarnessDir(resolved);
   const effective = plan ?? buildPre10Plan(resolved);
-  const backupDir = path66.join(harnessDir, MIGRATE_BACKUP_DIR);
-  fs60.mkdirSync(backupDir, { recursive: true });
+  const backupDir = path69.join(harnessDir, MIGRATE_BACKUP_DIR);
+  fs62.mkdirSync(backupDir, { recursive: true });
   const backup = (file) => {
-    const src = path66.join(harnessDir, file);
-    if (!fs60.existsSync(src)) return;
-    const dest = path66.join(backupDir, file);
-    fs60.mkdirSync(path66.dirname(dest), { recursive: true });
-    fs60.copyFileSync(src, dest);
+    const src = path69.join(harnessDir, file);
+    if (!fs62.existsSync(src)) return;
+    const dest = path69.join(backupDir, file);
+    fs62.mkdirSync(path69.dirname(dest), { recursive: true });
+    fs62.copyFileSync(src, dest);
   };
   const written = [];
   const deleted = [];
-  const projectName = path66.basename(resolved).toLowerCase().replace(/[^a-z0-9]/g, "_");
+  const projectName = path69.basename(resolved).toLowerCase().replace(/[^a-z0-9]/g, "_");
   const composed = composeProfileTemplateMap(effective.profile);
   for (const script of effective.deleteLifecycleScripts) {
     backup(script);
-    fs60.rmSync(path66.join(harnessDir, script), { force: true });
+    fs62.rmSync(path69.join(harnessDir, script), { force: true });
     deleted.push(script);
   }
   if (stripLifecycleShimCommands(resolved)) {
@@ -77166,26 +77744,26 @@ function applyPre10Plan(repoPath, plan) {
   }
   for (const file of effective.deleteMachinery) {
     backup(file);
-    fs60.rmSync(path66.join(harnessDir, file), { force: true });
+    fs62.rmSync(path69.join(harnessDir, file), { force: true });
     deleted.push(file);
   }
   for (const doc of effective.retireDocs ?? []) {
     backup(doc);
   }
-  const libDir = path66.join(harnessDir, "lib");
-  if (fs60.existsSync(libDir) && fs60.readdirSync(libDir).length === 0) {
-    fs60.rmdirSync(libDir);
+  const libDir = path69.join(harnessDir, "lib");
+  if (fs62.existsSync(libDir) && fs62.readdirSync(libDir).length === 0) {
+    fs62.rmdirSync(libDir);
     deleted.push("lib/");
   }
   for (const file of effective.installMissing ?? []) {
     const source = composed.get(file);
     if (!source) continue;
-    const dest = path66.join(harnessDir, file);
-    if (fs60.existsSync(dest)) continue;
+    const dest = path69.join(harnessDir, file);
+    if (fs62.existsSync(dest)) continue;
     const rendered = substituteTemplateTokens(readComposedTemplateContent(source), projectName);
-    fs60.mkdirSync(path66.dirname(dest), { recursive: true });
-    fs60.writeFileSync(dest, rendered);
-    if (/\.(sh|mjs)$/.test(file)) fs60.chmodSync(dest, 493);
+    fs62.mkdirSync(path69.dirname(dest), { recursive: true });
+    fs62.writeFileSync(dest, rendered);
+    if (/\.(sh|mjs)$/.test(file)) fs62.chmodSync(dest, 493);
     written.push(file);
   }
   if (effective.phantomVerificationIds.length > 0) {
@@ -77200,7 +77778,7 @@ function applyPre10Plan(repoPath, plan) {
   }
   if (effective.env) {
     backup("harness.env");
-    fs60.writeFileSync(path66.join(harnessDir, "harness.env"), effective.env.content);
+    fs62.writeFileSync(path69.join(harnessDir, "harness.env"), effective.env.content);
     written.push("harness.env");
   }
   const manifest = readManifest(resolved);
@@ -77215,8 +77793,8 @@ function applyPre10Plan(repoPath, plan) {
       updatedAt: (/* @__PURE__ */ new Date()).toISOString()
     });
   }
-  fs60.writeFileSync(
-    path66.join(harnessDir, MIGRATE_PLAN_FILE),
+  fs62.writeFileSync(
+    path69.join(harnessDir, MIGRATE_PLAN_FILE),
     JSON.stringify({ ...effective, appliedAt: (/* @__PURE__ */ new Date()).toISOString() }, null, 2) + "\n"
   );
   return { plan: effective, backupDir, written, deleted };
@@ -77236,33 +77814,33 @@ function pendingMigrations(repoPath) {
   );
 }
 function writeMigrationPlan(repoPath, plan) {
-  const harnessDir = getHarnessDir(path66.resolve(repoPath));
-  const planPath = path66.join(harnessDir, MIGRATE_PLAN_FILE);
-  fs60.mkdirSync(path66.dirname(planPath), { recursive: true });
-  fs60.writeFileSync(planPath, JSON.stringify(plan, null, 2) + "\n");
+  const harnessDir = getHarnessDir(path69.resolve(repoPath));
+  const planPath = path69.join(harnessDir, MIGRATE_PLAN_FILE);
+  fs62.mkdirSync(path69.dirname(planPath), { recursive: true });
+  fs62.writeFileSync(planPath, JSON.stringify(plan, null, 2) + "\n");
   return planPath;
 }
 function removeMigrationArtifacts(repoPath) {
-  const harnessDir = getHarnessDir(path66.resolve(repoPath));
-  fs60.rmSync(path66.join(harnessDir, MIGRATE_DIR), { recursive: true, force: true });
-  fs60.rmSync(path66.join(harnessDir, "MIGRATE-PROMPT.md"), { force: true });
+  const harnessDir = getHarnessDir(path69.resolve(repoPath));
+  fs62.rmSync(path69.join(harnessDir, MIGRATE_DIR), { recursive: true, force: true });
+  fs62.rmSync(path69.join(harnessDir, "MIGRATE-PROMPT.md"), { force: true });
 }
 
 // src/harness/doctor.ts
 function listHarnessShellScripts(harnessDir) {
   const out = [];
   const push = (dir, prefix) => {
-    if (!fs61.existsSync(dir)) return;
-    for (const entry of fs61.readdirSync(dir).sort()) {
+    if (!fs63.existsSync(dir)) return;
+    for (const entry of fs63.readdirSync(dir).sort()) {
       if (!entry.endsWith(".sh")) continue;
-      const full = path67.join(dir, entry);
-      if (!fs61.statSync(full).isFile()) continue;
+      const full = path70.join(dir, entry);
+      if (!fs63.statSync(full).isFile()) continue;
       out.push(prefix ? `${prefix}/${entry}` : entry);
     }
   };
   push(harnessDir, "");
-  push(path67.join(harnessDir, "stages"), "stages");
-  push(path67.join(harnessDir, "hooks"), "hooks");
+  push(path70.join(harnessDir, "stages"), "stages");
+  push(path70.join(harnessDir, "hooks"), "hooks");
   return out;
 }
 var CHECK_LABELS = {
@@ -77275,14 +77853,15 @@ var CHECK_LABELS = {
   "slot-registry": "slot registry worktrees",
   hooks: "lifecycle hooks (.har/hooks)",
   "retired-machinery": "no references to retired runtime machinery",
-  "ejected-runtime": "ejected runtime (user-owned)"
+  "ejected-runtime": "ejected runtime (user-owned)",
+  "factory-lines": "factory lines stay off verify"
 };
 var PRE_1_0_FUNCTION_RE = /^\s*(har_infra_enabled|har_pg|har_node_[a-z_]+|har_pkg_exec)\s*\(\)/m;
 var LEGACY_TRIPLET_RE = /^export\s+HARNESS_[A-Z0-9_]+_PORT_(DEFAULT|SCAN_START|SCAN_END)=/m;
 function detectContract(harnessDir) {
-  const envPath = path67.join(harnessDir, "harness.env");
-  if (!fs61.existsSync(envPath)) return "none";
-  const content = fs61.readFileSync(envPath, "utf8");
+  const envPath = path70.join(harnessDir, "harness.env");
+  if (!fs63.existsSync(envPath)) return "none";
+  const content = fs63.readFileSync(envPath, "utf8");
   if (PRE_1_0_FUNCTION_RE.test(content) || LEGACY_TRIPLET_RE.test(content)) {
     return "pre-1.0";
   }
@@ -77292,18 +77871,18 @@ function resolveStageFile(harnessDir, stage) {
   if (PACKAGE_RUNTIME_KINDS.has(stage.kind) && (!stage.command && !stage.script || stagePointsAtLifecycleShim(stage))) {
     return null;
   }
-  if (stage.script) return path67.join(harnessDir, stage.script);
+  if (stage.script) return path70.join(harnessDir, stage.script);
   if (stage.command) {
     const first = stage.command.trim().split(/\s+/)[0];
     if (first.startsWith("./.har/")) {
-      return path67.join(harnessDir, first.replace(/^\.\/\.har\//, ""));
+      return path70.join(harnessDir, first.replace(/^\.\/\.har\//, ""));
     }
     if (first.startsWith(".har/")) {
-      return path67.join(harnessDir, first.replace(/^\.har\//, ""));
+      return path70.join(harnessDir, first.replace(/^\.har\//, ""));
     }
     return null;
   }
-  return path67.join(harnessDir, "stages", `${stage.id}.sh`);
+  return path70.join(harnessDir, "stages", `${stage.id}.sh`);
 }
 function checkStatus(findings, id) {
   const mine = findings.filter((f) => f.check === id);
@@ -77315,7 +77894,7 @@ function runDoctor(repoPath) {
   const harnessDir = getHarnessDir(repoPath);
   const findings = [];
   const skipped = /* @__PURE__ */ new Set();
-  if (!fs61.existsSync(harnessDir)) {
+  if (!fs63.existsSync(harnessDir)) {
     return {
       ok: false,
       contract: "none",
@@ -77362,9 +77941,9 @@ function runDoctor(repoPath) {
   }
   let registry2 = null;
   try {
-    const stagesPath = path67.join(harnessDir, "stages.json");
-    if (fs61.existsSync(stagesPath)) {
-      const raw = JSON.parse(fs61.readFileSync(stagesPath, "utf8"));
+    const stagesPath = path70.join(harnessDir, "stages.json");
+    if (fs63.existsSync(stagesPath)) {
+      const raw = JSON.parse(fs63.readFileSync(stagesPath, "utf8"));
       if (typeof raw !== "object" || raw === null || !Array.isArray(raw.stages)) {
         throw new Error("stages.json has no `stages` array \u2014 the registry is structurally invalid");
       }
@@ -77395,8 +77974,8 @@ function runDoctor(repoPath) {
     for (const stage of registry2.stages) {
       const file = resolveStageFile(harnessDir, stage);
       if (!file) continue;
-      const rel = path67.relative(harnessDir, file);
-      if (!fs61.existsSync(file)) {
+      const rel = path70.relative(harnessDir, file);
+      if (!fs63.existsSync(file)) {
         findings.push({
           check: "stage-files",
           severity: contractSeverity,
@@ -77406,7 +77985,7 @@ function runDoctor(repoPath) {
         });
         continue;
       }
-      if (rel.endsWith(".sh") && !(fs61.statSync(file).mode & 73)) {
+      if (rel.endsWith(".sh") && !(fs63.statSync(file).mode & 73)) {
         findings.push({
           check: "stage-files",
           severity: "warning",
@@ -77429,13 +78008,13 @@ function runDoctor(repoPath) {
         continue;
       }
       const file = resolveStageFile(harnessDir, stage);
-      if (file && !fs61.existsSync(file)) {
+      if (file && !fs63.existsSync(file)) {
         findings.push({
           check: "lifecycle-stages",
           severity: contractSeverity,
-          file: path67.relative(harnessDir, file),
+          file: path70.relative(harnessDir, file),
           message: `Lifecycle stage \`${stage.id}\` (${kind}) points at a missing file`,
-          remedy: `Restore .har/${path67.relative(harnessDir, file)} or fix the \`${stage.id}\` entry in stages.json`
+          remedy: `Restore .har/${path70.relative(harnessDir, file)} or fix the \`${stage.id}\` entry in stages.json`
         });
       }
     }
@@ -77480,9 +78059,9 @@ function runDoctor(repoPath) {
   if (!manifest?.ejected) {
     skipped.add("ejected-runtime");
   } else {
-    const runtimeRel = path67.join(EJECTED_RUNTIME_DIR, EJECTED_RUNTIME_BUNDLE);
-    const runtimePath = path67.join(harnessDir, runtimeRel);
-    if (!fs61.existsSync(runtimePath)) {
+    const runtimeRel = path70.join(EJECTED_RUNTIME_DIR, EJECTED_RUNTIME_BUNDLE);
+    const runtimePath = path70.join(harnessDir, runtimeRel);
+    if (!fs63.existsSync(runtimePath)) {
       findings.push({
         check: "ejected-runtime",
         severity: "error",
@@ -77495,7 +78074,7 @@ function runDoctor(repoPath) {
   for (const entry of listSlotRegistryEntries(repoPath)) {
     if (entry.status === "completed") continue;
     const dir = entry.worktreePath ?? entry.workDir;
-    if (dir && !fs61.existsSync(dir)) {
+    if (dir && !fs63.existsSync(dir)) {
       findings.push({
         check: "slot-registry",
         severity: "warning",
@@ -77505,11 +78084,11 @@ function runDoctor(repoPath) {
       });
     }
   }
-  const hooksDir = path67.join(harnessDir, "hooks");
-  if (fs61.existsSync(hooksDir)) {
-    for (const file of fs61.readdirSync(hooksDir).sort()) {
-      const full = path67.join(hooksDir, file);
-      if (!fs61.statSync(full).isFile() || !file.endsWith(".sh")) continue;
+  const hooksDir = path70.join(harnessDir, "hooks");
+  if (fs63.existsSync(hooksDir)) {
+    for (const file of fs63.readdirSync(hooksDir).sort()) {
+      const full = path70.join(hooksDir, file);
+      if (!fs63.statSync(full).isFile() || !file.endsWith(".sh")) continue;
       if (!LIFECYCLE_HOOKS.includes(file.replace(/\.sh$/, ""))) {
         findings.push({
           check: "hooks",
@@ -77520,7 +78099,7 @@ function runDoctor(repoPath) {
         });
         continue;
       }
-      if (!(fs61.statSync(full).mode & 73)) {
+      if (!(fs63.statSync(full).mode & 73)) {
         findings.push({
           check: "hooks",
           severity: "warning",
@@ -77532,15 +78111,15 @@ function runDoctor(repoPath) {
     }
   }
   for (const rel of listHarnessShellScripts(harnessDir)) {
-    const full = path67.join(harnessDir, rel);
+    const full = path70.join(harnessDir, rel);
     let content;
     try {
-      content = fs61.readFileSync(full, "utf8");
+      content = fs63.readFileSync(full, "utf8");
     } catch {
       continue;
     }
     for (const machinery of LEGACY_MACHINERY_FILES) {
-      if (fs61.existsSync(path67.join(harnessDir, machinery))) continue;
+      if (fs63.existsSync(path70.join(harnessDir, machinery))) continue;
       const base = machinery.replace(/[.*+?^${}()|[\]\\]/g, "\\$&");
       const loadRe = new RegExp(
         `(?:\\bsource\\b|\\bbash\\b|\\bexec\\b|(?:^|[;&|(])\\s*\\.\\s)[^\\n#]*${base}`
@@ -77559,6 +78138,46 @@ function runDoctor(repoPath) {
       break;
     }
   }
+  const lineLedger = readLineLedger(repoPath);
+  if (lineLedger) {
+    const verificationStages = registry2?.verificationStages ?? [];
+    const registeredIds = new Set((registry2?.stages ?? []).map((stage) => stage.id));
+    for (const line of lineLedger.lines) {
+      for (const stageId of line.stageIds) {
+        if (verificationStages.includes(stageId)) {
+          findings.push({
+            check: "factory-lines",
+            severity: "error",
+            file: "stages.json",
+            message: `line "${line.id}" stage "${stageId}" is listed in verificationStages`,
+            remedy: "Remove it from verificationStages \u2014 line gate stages run via `har line gate <station>`. If it must gate every verify, ship it as a verification plugin instead."
+          });
+        }
+      }
+      const program = readInstalledLineProgram(repoPath, line.id);
+      if (!program) {
+        findings.push({
+          check: "factory-lines",
+          severity: "warning",
+          file: line.programPath,
+          message: `line "${line.id}" is in .har/lines.json but its program is missing or invalid`,
+          remedy: `Reinstall it (\`har line add ${line.id}\`) or drop the entry from .har/lines.json`
+        });
+        continue;
+      }
+      for (const gateStage of program.gate.stages) {
+        if (!registeredIds.has(gateStage.id)) {
+          findings.push({
+            check: "factory-lines",
+            severity: "warning",
+            file: line.programPath,
+            message: `line "${line.id}" gate stage "${gateStage.id}" (from ${gateStage.fromStation}) is not registered in stages.json`,
+            remedy: "Install the plugin that provides it, add it to the line bundle, or drop the gate tag"
+          });
+        }
+      }
+    }
+  }
   const checks = Object.keys(CHECK_LABELS).map(
     (id) => skipped.has(id) ? { id, label: CHECK_LABELS[id], status: "skip" } : checkStatus(findings, id)
   );
@@ -77604,8 +78223,8 @@ function summarizeDoctorReport(report) {
 }
 
 // src/harness/migrate-prompt.ts
-var fs62 = __toESM(require("fs"));
-var path68 = __toESM(require("path"));
+var fs64 = __toESM(require("fs"));
+var path71 = __toESM(require("path"));
 init_paths();
 init_file_ops();
 init_manifest();
@@ -77719,13 +78338,13 @@ function loadTemplate2() {
   if (!filePath) {
     throw new Error("Migration prompt template not found: migration-prompt.md. Run npm run build.");
   }
-  return fs62.readFileSync(filePath, "utf8");
+  return fs64.readFileSync(filePath, "utf8");
 }
 function buildMigrationPrompt(plan, applied) {
   return loadTemplate2().replace("{{MIGRATION_SECTION}}", buildMigrationSection(plan, applied));
 }
 function writeMigrationPrompt(repoPath, content) {
-  const filePath = path68.join(getHarnessDir(repoPath), MIGRATE_PROMPT_FILE);
+  const filePath = path71.join(getHarnessDir(repoPath), MIGRATE_PROMPT_FILE);
   writeFileSafe(filePath, content);
   return filePath;
 }
@@ -77733,11 +78352,11 @@ function writeMigrationPrompt(repoPath, content) {
 // src/core/harness.ts
 function listHarnessScripts(repoPath) {
   const harnessDir = getHarnessDir(repoPath);
-  if (!fs63.existsSync(harnessDir)) return [];
-  return fs63.readdirSync(harnessDir).filter((name) => name.endsWith(".sh")).sort();
+  if (!fs65.existsSync(harnessDir)) return [];
+  return fs65.readdirSync(harnessDir).filter((name) => name.endsWith(".sh")).sort();
 }
 function describeProject(repoPath) {
-  const resolved = path69.resolve(repoPath);
+  const resolved = path72.resolve(repoPath);
   const manifest = readManifest(resolved);
   const present = harnessExists(resolved);
   return {
@@ -77757,8 +78376,8 @@ function describeProject(repoPath) {
   };
 }
 async function initHarness(options) {
-  const repoPath = path69.resolve(options.repoPath);
-  if (!fs63.existsSync(repoPath)) {
+  const repoPath = path72.resolve(options.repoPath);
+  if (!fs65.existsSync(repoPath)) {
     throw new Error(`Path not found: ${repoPath}`);
   }
   const scaffold = scaffoldHarnessBoilerplate(repoPath, {
@@ -77779,9 +78398,9 @@ async function initHarness(options) {
   };
 }
 async function maintainHarness(options) {
-  const repoPath = path69.resolve(options.repoPath);
+  const repoPath = path72.resolve(options.repoPath);
   const harnessDir = getHarnessDir(repoPath);
-  if (!fs63.existsSync(harnessDir)) {
+  if (!fs65.existsSync(harnessDir)) {
     throw new Error('No .har/ found. Run "har onboard" first.');
   }
   let migration;
@@ -77858,8 +78477,8 @@ function addPlugin(repoPath, pluginId, options = {}) {
 }
 
 // src/harness/adaptation-prompt.ts
-var fs64 = __toESM(require("fs"));
-var path70 = __toESM(require("path"));
+var fs66 = __toESM(require("fs"));
+var path73 = __toESM(require("path"));
 var readline5 = __toESM(require("readline"));
 
 // src/utils/clipboard.ts
@@ -77950,7 +78569,7 @@ function loadTemplate3(name) {
   if (!filePath) {
     throw new Error(`Adaptation prompt template not found: ${name}. Run npm run build.`);
   }
-  return fs64.readFileSync(filePath, "utf8");
+  return fs66.readFileSync(filePath, "utf8");
 }
 function applyProfilePlaceholders(content, profile) {
   return content.replace(/\{\{PROFILE\}\}/g, profile).replace(/\{\{PROFILE_HINT\}\}/g, PROFILE_HINTS[profile]);
@@ -77972,7 +78591,7 @@ function buildMaintainAdaptationPrompt(_repoPath, bundleReport) {
 }
 function writeAdaptationPrompt(repoPath, content) {
   const harnessDir = getHarnessDir(repoPath);
-  const filePath = path70.join(harnessDir, ADAPTATION_PROMPT_FILE);
+  const filePath = path73.join(harnessDir, ADAPTATION_PROMPT_FILE);
   writeFileSafe(filePath, content);
   return filePath;
 }
@@ -77991,12 +78610,12 @@ function printAdaptationPrompt(content) {
 }
 function askYesNo2(question) {
   const rl = readline5.createInterface({ input: process.stdin, output: process.stderr });
-  return new Promise((resolve60) => {
+  return new Promise((resolve66) => {
     process.stderr.write(`${question} `);
     rl.once("line", (answer) => {
       rl.close();
       const trimmed = answer.trim();
-      resolve60(trimmed === "" || /^y(es)?$/i.test(trimmed));
+      resolve66(trimmed === "" || /^y(es)?$/i.test(trimmed));
     });
   });
 }
@@ -78028,28 +78647,28 @@ async function offerAdaptationPromptClipboard(content, options = {}) {
 }
 
 // src/harness/cursor-rule.ts
-var fs65 = __toESM(require("fs"));
-var path71 = __toESM(require("path"));
+var fs67 = __toESM(require("fs"));
+var path74 = __toESM(require("path"));
 var readline6 = __toESM(require("readline"));
 init_file_ops();
 init_logging();
 init_paths();
 var CURSOR_RULE_RELATIVE_PATH = ".cursor/rules/har-workflow.mdc";
 function getCursorRulePath(repoPath) {
-  return path71.join(repoPath, CURSOR_RULE_RELATIVE_PATH);
+  return path74.join(repoPath, CURSOR_RULE_RELATIVE_PATH);
 }
 function isCursorWorkspace(repoPath) {
-  return fs65.existsSync(path71.join(repoPath, ".cursor"));
+  return fs67.existsSync(path74.join(repoPath, ".cursor"));
 }
 function cursorRuleExists(repoPath) {
-  return fs65.existsSync(getCursorRulePath(repoPath));
+  return fs67.existsSync(getCursorRulePath(repoPath));
 }
 function scaffoldCursorRule(repoPath) {
   const templatePath = resolveTemplateFile("cursor-rule.mdc.template");
   if (!templatePath) {
     throw new Error("Cursor rule template not found (cursor-rule.mdc.template). Run npm run build.");
   }
-  const content = fs65.readFileSync(templatePath, "utf8");
+  const content = fs67.readFileSync(templatePath, "utf8");
   writeFileSafe(getCursorRulePath(repoPath), content);
 }
 async function handleCursorRule(options) {
@@ -78087,16 +78706,16 @@ async function promptScaffoldCursorRule(exists) {
 }
 async function askYesNo3(question) {
   const rl = readline6.createInterface({ input: process.stdin, output: process.stderr });
-  return new Promise((resolve60) => {
+  return new Promise((resolve66) => {
     process.stderr.write(`${question} `);
     rl.once("line", (answer) => {
       rl.close();
       const trimmed = answer.trim();
       if (trimmed === "") {
-        resolve60(true);
+        resolve66(true);
         return;
       }
-      resolve60(/^y(es)?$/i.test(trimmed));
+      resolve66(/^y(es)?$/i.test(trimmed));
     });
   });
 }
@@ -78140,7 +78759,7 @@ init_control_config();
 
 // src/core/control-lifecycle.ts
 var import_child_process18 = require("child_process");
-var path72 = __toESM(require("path"));
+var path75 = __toESM(require("path"));
 
 // src/core/control-image.ts
 init_package_version();
@@ -78167,10 +78786,10 @@ var CONTROL_DATA_VOLUME = "har_control_data";
 var CONTROL_CONTAINER_PORT = 3847;
 var CONTROL_DATA_DB_URL = "file:/data/har_control.db";
 function resolveControlDir() {
-  return path72.resolve(__dirname, "..", "control");
+  return path75.resolve(__dirname, "..", "control");
 }
 function resolveControlBuildContext() {
-  return path72.resolve(resolveControlDir(), "..");
+  return path75.resolve(resolveControlDir(), "..");
 }
 function buildDockerRunArgs(options) {
   const name = options.containerName ?? CONTROL_CONTAINER_NAME;
@@ -78226,7 +78845,7 @@ async function startMissionControl(options) {
       "-t",
       imageRef,
       "-f",
-      path72.join(resolveControlDir(), "Dockerfile"),
+      path75.join(resolveControlDir(), "Dockerfile"),
       resolveControlBuildContext()
     ]);
     if (buildCode !== 0) {
@@ -78373,7 +78992,7 @@ async function ensureTelemetryInfrastructure(options) {
 // src/core/run-service.ts
 init_telemetry_config();
 init_telemetry_env();
-var path74 = __toESM(require("path"));
+var path77 = __toESM(require("path"));
 init_local_executor();
 function extractShellOutput(result) {
   const stdout = result.logs?.find((log) => log.stream === "stdout")?.content ?? result.logs?.find((log) => !log.stream)?.content ?? "";
@@ -78596,12 +79215,12 @@ Usage from Cursor / Claude / Codex (@osfactory/otel-hook) will appear under Work
           suffix: session.suffix,
           createdAt: session.createdAt
         });
-        const envFile = path74.join(session.workDir, `.env.agent.${options.agentId}`);
+        const envFile = path77.join(session.workDir, `.env.agent.${options.agentId}`);
         try {
           appendTelemetryEnvToFile(envFile, {
             sessionKey,
             agentId: options.agentId,
-            repoPath: path74.resolve(options.repoPath),
+            repoPath: path77.resolve(options.repoPath),
             workDir: session.workDir,
             branch: session.branch,
             suffix: session.suffix,
@@ -78722,9 +79341,9 @@ Usage from Cursor / Claude / Codex (@osfactory/otel-hook) will appear under Work
     return envResult;
   }
   /**
-   * Finish a session: full verification (recorded as a validation keyed by the
-   * worktree tree hash), then teardown. The session branch is kept so the user
-   * can push it and open a PR.
+   * Finish a session: reuse the last matching passing full validation (or
+   * re-run verify when asked), then teardown. The session branch is kept so
+   * the user can push it and open a PR.
    */
   async completeEnvironment(options) {
     const harnessRoot = resolveHarnessRoot(options.repoPath);
@@ -78736,9 +79355,11 @@ Usage from Cursor / Claude / Codex (@osfactory/otel-hook) will appear under Work
         stderr: `No active session for agent ${options.agentId}. Run launch first.`
       };
     }
+    const runVerify = shouldReverifyOnComplete(options);
     let verification;
     let validation2;
-    if (!options.skipVerify) {
+    let reusedValidation = false;
+    if (runVerify) {
       const verify = await this.runVerification({
         repoPath: options.repoPath,
         agentId: options.agentId,
@@ -78751,11 +79372,27 @@ Usage from Cursor / Claude / Codex (@osfactory/otel-hook) will appear under Work
       if (verify.code !== 0 || verification?.status !== "pass") {
         return {
           ...verify,
-          stderr: verify.stderr + "\nVerification failed \u2014 session NOT completed. Fix the failures and rerun, or complete with skipVerify."
+          stderr: verify.stderr + "\nVerification failed \u2014 session NOT completed. Fix the failures and rerun `complete --verify`, or use teardown to free the slot without claiming completion."
+        };
+      }
+    } else {
+      const checkoutDir = resolveValidationCheckoutDir({
+        worktreePath: session.worktreePath,
+        workDir: session.workDir,
+        harnessRoot
+      });
+      validation2 = findPassingFullValidation({ checkoutDir, harnessRoot });
+      if (!validation2) {
+        return {
+          code: 1,
+          stdout: "",
+          stderr: `No passing full validation matches the current worktree. The tree may have changed since the last \`har env verify --full\`. Re-run verification with: har env complete ${options.agentId} --verify
+Or free the slot without claiming completion: har env teardown ${options.agentId}`
         };
       }
+      reusedValidation = true;
     }
-    if (session.workUnitId && session.attemptId && !options.skipVerify && !validation2) {
+    if (session.workUnitId && session.attemptId && runVerify && !validation2) {
       return {
         code: 1,
         stdout: "",
@@ -78779,11 +79416,13 @@ Usage from Cursor / Claude / Codex (@osfactory/otel-hook) will appear under Work
       trigger: options.trigger
     });
     if (teardown.code !== 0) return { ...teardown, verification };
+    const reusedNote = reusedValidation && validation2 ? `Reused passing full validation ${validation2.validationId} for tree ${validation2.treeHash}.
+` : "";
     const branchNote = session.branch ? `Branch kept: ${session.branch} \u2014 push it with: git push -u origin ${session.branch}
 ` : "";
     return {
       ...teardown,
-      stdout: teardown.stdout + branchNote,
+      stdout: teardown.stdout + reusedNote + branchNote,
       branch: session.branch,
       workDir: session.workDir,
       worktreePath: session.worktreePath,
@@ -78822,6 +79461,10 @@ Usage from Cursor / Claude / Codex (@osfactory/otel-hook) will appear under Work
     return toEnvironmentRunResult(result);
   }
 };
+function shouldReverifyOnComplete(options) {
+  if (options.verify === true) return true;
+  return options.skipVerify === false;
+}
 var defaultRunService = new RunService();
 function createRunService(executor = localScriptExecutor) {
   return new RunService(executor);
@@ -78843,9 +79486,9 @@ init_work_units();
 init_manifest();
 
 // src/core/cleanup-service.ts
-var fs67 = __toESM(require("fs"));
+var fs69 = __toESM(require("fs"));
 var os23 = __toESM(require("os"));
-var path75 = __toESM(require("path"));
+var path78 = __toESM(require("path"));
 var import_child_process20 = require("child_process");
 init_control_sync();
 init_control_repo_path();
@@ -78854,9 +79497,9 @@ init_manifest();
 var DEFAULT_STALE_DAYS = 7;
 function getWorktreesRoot() {
   if (process.env.HAR_WORKTREES_ROOT) {
-    return path75.resolve(process.env.HAR_WORKTREES_ROOT);
+    return path78.resolve(process.env.HAR_WORKTREES_ROOT);
   }
-  return path75.join(process.env.HOME || os23.homedir(), "worktrees");
+  return path78.join(process.env.HOME || os23.homedir(), "worktrees");
 }
 function runGit3(cwd, args) {
   try {
@@ -78870,7 +79513,7 @@ function runGit3(cwd, args) {
   }
 }
 function basenameRepo(repoPath) {
-  return path75.basename(canonicalizeControlRepoPath(repoPath));
+  return path78.basename(canonicalizeControlRepoPath(repoPath));
 }
 function ageDaysFrom(iso) {
   if (!iso) return void 0;
@@ -78882,12 +79525,12 @@ function matchesKeep(candidate, keep) {
   if (!keep?.length) return false;
   for (const pin of keep) {
     if (pin.worktreePath && candidate.worktreePath) {
-      if (path75.resolve(pin.worktreePath) === path75.resolve(candidate.worktreePath)) return true;
+      if (path78.resolve(pin.worktreePath) === path78.resolve(candidate.worktreePath)) return true;
     }
     if (pin.repoPath && pin.agentId !== void 0 && candidate.agentId !== void 0) {
       const repo = canonicalizeControlRepoPath(pin.repoPath);
-      const candidateRepo = path75.resolve(candidate.repoPath);
-      if ((repo === candidateRepo || path75.resolve(pin.repoPath) === candidateRepo) && pin.agentId === candidate.agentId) {
+      const candidateRepo = path78.resolve(candidate.repoPath);
+      if ((repo === candidateRepo || path78.resolve(pin.repoPath) === candidateRepo) && pin.agentId === candidate.agentId) {
         return true;
       }
     }
@@ -78942,20 +79585,20 @@ function classifySlotCandidate(repoPath, projectName, slot, options) {
   return candidate;
 }
 function resolveRepoForWorktree(worktreePath) {
-  if (!fs67.existsSync(worktreePath)) return void 0;
+  if (!fs69.existsSync(worktreePath)) return void 0;
   const commonDir = runGit3(worktreePath, "rev-parse --git-common-dir");
   if (!commonDir) return void 0;
-  const gitRoot = path75.resolve(worktreePath, commonDir, "..");
+  const gitRoot = path78.resolve(worktreePath, commonDir, "..");
   if (!readManifest(gitRoot)) return void 0;
   return canonicalizeControlRepoPath(gitRoot);
 }
 function discoverOrphanWorktrees(knownPaths) {
   const worktreesRoot = getWorktreesRoot();
-  if (!fs67.existsSync(worktreesRoot)) return [];
+  if (!fs69.existsSync(worktreesRoot)) return [];
   const orphans = [];
-  for (const entry of fs67.readdirSync(worktreesRoot, { withFileTypes: true })) {
+  for (const entry of fs69.readdirSync(worktreesRoot, { withFileTypes: true })) {
     if (!entry.isDirectory() || !entry.name.includes("-har-agent-")) continue;
-    const worktreePath = path75.resolve(path75.join(worktreesRoot, entry.name));
+    const worktreePath = path78.resolve(path78.join(worktreesRoot, entry.name));
     if (knownPaths.has(worktreePath)) continue;
     const repoPath = resolveRepoForWorktree(worktreePath) ?? worktreesRoot;
     const porcelain = runGit3(worktreePath, "status --porcelain");
@@ -78980,14 +79623,14 @@ async function discoverCleanupCandidates(options = {}) {
   const candidates = [];
   const knownWorktreePaths = /* @__PURE__ */ new Set();
   for (const repoPath of repoPaths) {
-    if (!fs67.existsSync(repoPath) || !readManifest(repoPath)) continue;
+    if (!fs69.existsSync(repoPath) || !readManifest(repoPath)) continue;
     const harnessRoot = resolveHarnessRoot(repoPath);
     const canonicalRepo = canonicalizeControlRepoPath(harnessRoot);
     const status = collectEnvironmentStatus(harnessRoot);
     const projectName = basenameRepo(harnessRoot);
     for (const slot of status.slots) {
-      if (slot.worktreePath) knownWorktreePaths.add(path75.resolve(slot.worktreePath));
-      if (slot.workDir) knownWorktreePaths.add(path75.resolve(slot.workDir));
+      if (slot.worktreePath) knownWorktreePaths.add(path78.resolve(slot.worktreePath));
+      if (slot.workDir) knownWorktreePaths.add(path78.resolve(slot.workDir));
       const candidate = classifySlotCandidate(canonicalRepo, projectName, slot, {
         staleDays: options.staleDays,
         keep: options.keep
@@ -79047,8 +79690,8 @@ async function askYesNo4(question) {
   if (!process.stdin.isTTY || !process.stdout.isTTY) return false;
   const readline8 = await import("readline");
   const rl = readline8.createInterface({ input: process.stdin, output: process.stderr });
-  const answer = await new Promise((resolve60) => {
-    rl.question(question, resolve60);
+  const answer = await new Promise((resolve66) => {
+    rl.question(question, resolve66);
   });
   rl.close();
   return /^[Yy]$/.test(answer.trim());
@@ -79093,7 +79736,7 @@ async function executeCleanupCandidates(candidates, options = {}) {
         continue;
       }
       if (candidate.kind === "orphan_worktree" && candidate.worktreePath) {
-        if (fs67.existsSync(candidate.worktreePath)) {
+        if (fs69.existsSync(candidate.worktreePath)) {
           const repoRoot = candidate.repoPath !== getWorktreesRoot() ? candidate.repoPath : resolveRepoForWorktree(candidate.worktreePath);
           if (repoRoot) {
             try {
@@ -79104,8 +79747,8 @@ async function executeCleanupCandidates(candidates, options = {}) {
             } catch {
             }
           }
-          if (fs67.existsSync(candidate.worktreePath)) {
-            fs67.rmSync(candidate.worktreePath, { recursive: true, force: true });
+          if (fs69.existsSync(candidate.worktreePath)) {
+            fs69.rmSync(candidate.worktreePath, { recursive: true, force: true });
           }
         }
         outcomes.push({ candidate, ok: true });
@@ -79131,7 +79774,7 @@ function parseCleanupKeepPins(values) {
     }
     if (raw.startsWith("/") || raw.startsWith("~")) {
       return {
-        worktreePath: raw.startsWith("~") ? path75.join(process.env.HOME || os23.homedir(), raw.slice(2)) : path75.resolve(raw)
+        worktreePath: raw.startsWith("~") ? path78.join(process.env.HOME || os23.homedir(), raw.slice(2)) : path78.resolve(raw)
       };
     }
     return { repoPath: raw };
@@ -79145,12 +79788,12 @@ init_stages();
 init_logging();
 function askYesNo5(question) {
   const rl = readline7.createInterface({ input: process.stdin, output: process.stderr });
-  return new Promise((resolve60) => {
+  return new Promise((resolve66) => {
     process.stderr.write(`${question} `);
     rl.once("line", (answer) => {
       rl.close();
       const trimmed = answer.trim();
-      resolve60(trimmed === "" || /^y(es)?$/i.test(trimmed));
+      resolve66(trimmed === "" || /^y(es)?$/i.test(trimmed));
     });
   });
 }
@@ -79251,21 +79894,21 @@ function warnIfDockerUnavailable(status = detectDockerStatus()) {
 }
 
 // src/core/onboarding-preferences.ts
-var fs68 = __toESM(require("fs"));
+var fs70 = __toESM(require("fs"));
 var os24 = __toESM(require("os"));
-var path76 = __toESM(require("path"));
+var path79 = __toESM(require("path"));
 init_schema2();
 function getOnboardingPreferencesPath() {
   if (process.env.HAR_PREFERENCES_PATH) {
-    return path76.resolve(process.env.HAR_PREFERENCES_PATH);
+    return path79.resolve(process.env.HAR_PREFERENCES_PATH);
   }
-  return path76.join(os24.homedir(), ".har", "preferences.json");
+  return path79.join(os24.homedir(), ".har", "preferences.json");
 }
 function readOnboardingPreferences() {
   const preferencePath = getOnboardingPreferencesPath();
   try {
-    if (!fs68.existsSync(preferencePath)) return OnboardingPreferencesSchema.parse({});
-    return OnboardingPreferencesSchema.parse(JSON.parse(fs68.readFileSync(preferencePath, "utf8")));
+    if (!fs70.existsSync(preferencePath)) return OnboardingPreferencesSchema.parse({});
+    return OnboardingPreferencesSchema.parse(JSON.parse(fs70.readFileSync(preferencePath, "utf8")));
   } catch {
     return OnboardingPreferencesSchema.parse({});
   }
@@ -79290,8 +79933,8 @@ function writeOnboardingPreferences(overrides) {
   };
   const parsed = OnboardingPreferencesSchema.parse(preference);
   const preferencePath = getOnboardingPreferencesPath();
-  fs68.mkdirSync(path76.dirname(preferencePath), { recursive: true });
-  fs68.writeFileSync(preferencePath, `${JSON.stringify(parsed, null, 2)}
+  fs70.mkdirSync(path79.dirname(preferencePath), { recursive: true });
+  fs70.writeFileSync(preferencePath, `${JSON.stringify(parsed, null, 2)}
 `);
   return parsed;
 }
@@ -79311,12 +79954,12 @@ Typical agent workflow:
   har env launch <id>            # new session from the main checkout's HEAD
   # \u2026edit only under the printed work dir\u2026
   har env verify <id> --full
-  har env complete <id>          # done: verify + free the slot (branch kept for PR)
+  har env complete <id>          # done: reuse last full validation + free the slot (branch kept for PR)
 
 Slot lifecycle (do not confuse these):
   launch     start a NEW session (worktree from $REPO_ROOT HEAD)
   recover    resume a failed/partial launch (keeps the existing worktree)
-  complete   finish successfully: full verify, then teardown (frees the slot)
+  complete   finish successfully: reuse last matching full validation, then teardown (frees the slot)
   teardown   abandon / free the slot without a completion validation
 
 Occupied slots always block a new launch:
@@ -79332,7 +79975,7 @@ var HAR_ENV_EPILOG = `Environment lifecycle:
   launch <id>      fresh session worktree from the main checkout's current HEAD
   recover <id>     alias for launch --resume (failed/starting only)
   verify <id>      run checks (--full before declaring done)
-  complete <id>    full verify + teardown; keeps branch for push/PR (frees slot)
+  complete <id>    reuse last full validation + teardown; --verify to re-run; keeps branch (frees slot)
   teardown <id>    free the slot without recording a completion validation
 
 Occupied slots:
@@ -79560,11 +80203,15 @@ var envCommand = {
     handleTeardown
   ).command(
     "complete <id>",
-    "Finish a session: full verify (recorded as validation), teardown, keep the branch for a PR",
-    (y) => y.positional("id", { type: "number", describe: "Agent slot id (see .har/stages.json agentSlots)" }).option("repo", { type: "string", default: "." }).option("skip-verify", {
+    "Finish a session: reuse the last matching full validation, teardown, keep the branch for a PR",
+    (y) => y.positional("id", { type: "number", describe: "Agent slot id (see .har/stages.json agentSlots)" }).option("repo", { type: "string", default: "." }).option("verify", {
       type: "boolean",
       default: false,
-      describe: "Tear down without running verification (no validation is recorded)"
+      describe: "Re-run full verification before teardown (use when the tree may have changed since the last passing --full)"
+    }).option("skip-verify", {
+      type: "boolean",
+      hidden: true,
+      describe: "Deprecated no-op: complete already skips re-verification by default"
     }),
     handleComplete
   ).command(
@@ -79677,7 +80324,7 @@ var envCommand = {
   }
 };
 async function handleInit(argv) {
-  const repoPath = path77.resolve(argv.repo);
+  const repoPath = path80.resolve(argv.repo);
   const onboarding = resolveOnboardingOptions(argv);
   header("har env init");
   info(`Repository: ${repoPath}`);
@@ -79724,7 +80371,7 @@ async function handleInit(argv) {
   }
 }
 async function handleMaintain(argv) {
-  const repoPath = path77.resolve(argv.repo);
+  const repoPath = path80.resolve(argv.repo);
   const onboarding = resolveOnboardingOptions(argv);
   header("har env maintain");
   info(`Repository: ${repoPath}`);
@@ -79879,7 +80526,7 @@ async function applyAgentIntegrations(options) {
   }
 }
 async function handleAddPlugin(argv) {
-  const repoPath = path77.resolve(argv.repo);
+  const repoPath = path80.resolve(argv.repo);
   const available = listPluginIds();
   if (argv.list) {
     for (const id of available) {
@@ -79915,7 +80562,7 @@ async function handleAddPlugin(argv) {
     console.error(`  Docs: ${result.docsPath}`);
     console.error("");
     info(`Adaptation prompt saved to ${result.adaptPromptPath}`);
-    const promptContent = fs69.readFileSync(path77.join(repoPath, result.adaptPromptPath), "utf8");
+    const promptContent = fs71.readFileSync(path80.join(repoPath, result.adaptPromptPath), "utf8");
     await offerAdaptationPromptClipboard(promptContent, { fileLabel: result.adaptPromptPath });
   } catch (err) {
     error(err.message);
@@ -79957,7 +80604,7 @@ async function handleAddStage(argv) {
   });
 }
 async function handlePreflight(argv) {
-  const repo = path77.resolve(argv.repo);
+  const repo = path80.resolve(argv.repo);
   const agentId = validateAgentId(argv.id, repo);
   const result = await preflightEnvironment({
     repoPath: repo,
@@ -79973,7 +80620,7 @@ async function handlePreflight(argv) {
   return finishCommand(result.code);
 }
 async function handleLaunch(argv) {
-  const repo = path77.resolve(argv.repo);
+  const repo = path80.resolve(argv.repo);
   const agentId = validateAgentId(argv.id, repo);
   const result = await launchEnvironment({
     repoPath: repo,
@@ -80015,7 +80662,7 @@ async function handleWorkLink(argv) {
     error("Provide --link or both --source and --url");
     return finishCommand(1);
   }
-  const harnessRoot = resolveHarnessRoot(path77.resolve(argv.repo));
+  const harnessRoot = resolveHarnessRoot(path80.resolve(argv.repo));
   const links = argv.link ? [parseWorkLinkSpec(argv.link)] : [{ source: argv.source, url: argv.url, label: argv.label }];
   try {
     const record2 = addWorkUnitLinks(harnessRoot, argv.workId, links);
@@ -80041,7 +80688,7 @@ async function handleRecover(argv) {
   });
 }
 async function handleVerify(argv) {
-  const repo = path77.resolve(argv.repo);
+  const repo = path80.resolve(argv.repo);
   const agentId = validateAgentId(argv.id, repo);
   const result = await runVerification({
     repoPath: repo,
@@ -80070,7 +80717,7 @@ async function handleVerify(argv) {
   return finishCommand(result.code);
 }
 async function handleTeardown(argv) {
-  const repo = path77.resolve(argv.repo);
+  const repo = path80.resolve(argv.repo);
   const agentId = validateAgentId(argv.id, repo);
   const result = await teardownEnvironment({
     repoPath: repo,
@@ -80081,11 +80728,12 @@ async function handleTeardown(argv) {
   return finishCommand(result.code);
 }
 async function handleComplete(argv) {
-  const repo = path77.resolve(argv.repo);
+  const repo = path80.resolve(argv.repo);
   const agentId = validateAgentId(argv.id, repo);
   const result = await completeEnvironment({
     repoPath: repo,
     agentId,
+    verify: argv.verify,
     skipVerify: argv.skipVerify,
     capture: false
   });
@@ -80102,7 +80750,7 @@ async function handleComplete(argv) {
   return finishCommand(result.code);
 }
 async function handleSetupInfra(argv) {
-  const repo = path77.resolve(argv.repo);
+  const repo = path80.resolve(argv.repo);
   const result = await runStage({
     repoPath: repo,
     kind: "setup",
@@ -80112,7 +80760,7 @@ async function handleSetupInfra(argv) {
   return finishCommand(result.code ?? (result.status === "pass" ? 0 : 1));
 }
 async function handleAgent(argv) {
-  const repo = path77.resolve(argv.repo);
+  const repo = path80.resolve(argv.repo);
   const agentId = validateAgentId(argv.id, repo);
   const result = await runAgentOp({
     repoPath: repo,
@@ -80123,7 +80771,7 @@ async function handleAgent(argv) {
   return finishCommand(result.code);
 }
 async function handleDoctor(argv) {
-  const repoPath = path77.resolve(argv.repo);
+  const repoPath = path80.resolve(argv.repo);
   const report = runDoctor(repoPath);
   if (argv.json) {
     console.log(JSON.stringify(report, null, 2));
@@ -80147,12 +80795,12 @@ async function confirm(question) {
   if (!process.stdin.isTTY) return false;
   const readline8 = await import("readline");
   const rl = readline8.createInterface({ input: process.stdin, output: process.stderr });
-  const answer = await new Promise((resolve60) => rl.question(question, resolve60));
+  const answer = await new Promise((resolve66) => rl.question(question, resolve66));
   rl.close();
   return /^y(es)?$/i.test(answer.trim());
 }
 async function handleEject(argv) {
-  const repoPath = resolveHarnessRoot(path77.resolve(argv.repo));
+  const repoPath = resolveHarnessRoot(path80.resolve(argv.repo));
   header("har env eject");
   warn("This vendors the complete HAR runtime into .har/runtime/ \u2014 from then on");
   warn("YOU OWN that directory:");
@@ -80183,7 +80831,7 @@ async function handleEject(argv) {
   return finishCommand(0);
 }
 async function handleAdopt(argv) {
-  const repoPath = resolveHarnessRoot(path77.resolve(argv.repo));
+  const repoPath = resolveHarnessRoot(path80.resolve(argv.repo));
   try {
     const result = adoptHarness(repoPath);
     success("Returned to the packaged runtime \u2014 .har/runtime/ removed, eject flag cleared.");
@@ -80198,7 +80846,7 @@ async function handleAdopt(argv) {
   return finishCommand(0);
 }
 async function handleStatus(argv) {
-  const repoPath = path77.resolve(argv.repo);
+  const repoPath = path80.resolve(argv.repo);
   const result = await getEnvironmentStatus({
     repoPath,
     capture: false
@@ -80211,7 +80859,7 @@ async function handleStatus(argv) {
   if (result.stdout) process.stdout.write(result.stdout);
 }
 async function handleLogs(argv) {
-  const repo = path77.resolve(argv.repo);
+  const repo = path80.resolve(argv.repo);
   const agentId = validateAgentId(argv.id, repo);
   const result = await getEnvironmentLogs({
     repoPath: repo,
@@ -80223,7 +80871,7 @@ async function handleLogs(argv) {
   return finishCommand(result.code);
 }
 async function handleRunStage(argv) {
-  const repo = path77.resolve(argv.repo);
+  const repo = path80.resolve(argv.repo);
   const agentId = validateAgentId(argv.id, repo);
   if (!argv.stage) {
     error("Missing stage id. Usage: har env run-stage <id> <stage> [args..]");
@@ -80249,7 +80897,7 @@ async function handleRunStage(argv) {
 }
 async function handleArtifacts(argv) {
   const artifacts = listArtifacts({
-    repoPath: path77.resolve(argv.repo),
+    repoPath: path80.resolve(argv.repo),
     stageId: argv.stage
   });
   if (argv.json) {
@@ -80268,7 +80916,7 @@ async function handleArtifacts(argv) {
 async function handleCleanup(argv) {
   const keepValues = argv.keep?.split(",").map((value) => value.trim()).filter(Boolean);
   const keep = parseCleanupKeepPins(keepValues);
-  const repoPaths = argv.repo ? [path77.resolve(argv.repo)] : void 0;
+  const repoPaths = argv.repo ? [path80.resolve(argv.repo)] : void 0;
   const plan = await discoverCleanupCandidates({
     cwd: process.cwd(),
     repoPaths,
@@ -80317,7 +80965,7 @@ async function handleCleanup(argv) {
   return finishCommand(failed > 0 ? 1 : 0);
 }
 async function handleRunsList(argv) {
-  const repoPath = path77.resolve(argv.repo);
+  const repoPath = path80.resolve(argv.repo);
   const runs = listRuns(repoPath, { stageId: argv.stage, limit: argv.limit });
   if (argv.json) {
     process.stdout.write(JSON.stringify({ runs }, null, 2) + "\n");
@@ -80334,7 +80982,7 @@ async function handleRunsList(argv) {
   }
 }
 async function handleRunsGet(argv) {
-  const run2 = getRun(path77.resolve(argv.repo), argv.runId);
+  const run2 = getRun(path80.resolve(argv.repo), argv.runId);
   if (!run2) {
     error(`Run not found: ${argv.runId}`);
     return finishCommand(1);
@@ -80451,7 +81099,7 @@ function printNextSteps() {
 }
 
 // src/cli/commands/control.ts
-var path82 = __toESM(require("path"));
+var path85 = __toESM(require("path"));
 init_control_config();
 init_portal_targets();
 
@@ -80459,8 +81107,8 @@ init_portal_targets();
 init_control_config();
 
 // src/core/portal-connect.ts
-var fs70 = __toESM(require("fs"));
-var path78 = __toESM(require("path"));
+var fs72 = __toESM(require("fs"));
+var path81 = __toESM(require("path"));
 var import_crypto2 = require("crypto");
 init_control_repo_path();
 init_control_registry();
@@ -80506,7 +81154,7 @@ async function loginViaBrowser(portalUrl, openUrlOrOptions = openBrowser) {
   const options = typeof openUrlOrOptions === "function" ? { openUrl: openUrlOrOptions } : openUrlOrOptions;
   const openUrl = options.openUrl ?? openBrowser;
   const state = (0, import_crypto.randomUUID)();
-  return new Promise((resolve60, reject) => {
+  return new Promise((resolve66, reject) => {
     let timer;
     const server = http.createServer((req, res) => {
       const requestUrl = new URL(req.url ?? "", "http://127.0.0.1");
@@ -80534,7 +81182,7 @@ async function loginViaBrowser(portalUrl, openUrlOrOptions = openBrowser) {
       res.end("<h1>Logged in</h1><p>You can close this tab and return to the terminal.</p>");
       cleanup();
       const targets = parseCliTargetsParam(requestUrl.searchParams.get("targets"));
-      resolve60({
+      resolve66({
         portalUrl,
         token,
         workspace: workspaceSlug ?? workspace,
@@ -80629,8 +81277,8 @@ function remainingConnections(connections, usedAliases) {
 // src/core/portal-connect.ts
 init_portal_targets();
 function attachRepoIfPresent(alias, repoPath) {
-  const resolved = path78.resolve(repoPath ?? ".");
-  if (!fs70.existsSync(resolved)) return null;
+  const resolved = path81.resolve(repoPath ?? ".");
+  if (!fs72.existsSync(resolved)) return null;
   const canonical = canonicalizeControlRepoPath(resolved);
   attachRepoPortalTarget(canonical, alias);
   recordRepoForControlSync(canonical);
@@ -80697,8 +81345,8 @@ async function runPortalConnect(input) {
   return { record: record2, attachedRepo, extraAttached, mappedInBrowser: true };
 }
 function listRegisteredReposForConnect(repoPath) {
-  const resolved = repoPath ? path78.resolve(repoPath) : null;
-  const current = resolved && fs70.existsSync(resolved) ? canonicalizeControlRepoPath(resolved) : null;
+  const resolved = repoPath ? path81.resolve(repoPath) : null;
+  const current = resolved && fs72.existsSync(resolved) ? canonicalizeControlRepoPath(resolved) : null;
   return [.../* @__PURE__ */ new Set([...current ? [current] : [], ...listRegisteredRepos()])];
 }
 
@@ -81014,21 +81662,21 @@ init_control_port();
 init_control_sync();
 
 // src/core/control-sync-selection.ts
-var fs71 = __toESM(require("fs"));
+var fs73 = __toESM(require("fs"));
 var os25 = __toESM(require("os"));
-var path79 = __toESM(require("path"));
+var path82 = __toESM(require("path"));
 init_control_repo_path();
 function getSelectionPath() {
   if (process.env.HAR_CONTROL_SYNC_SELECTION_PATH) {
-    return path79.resolve(process.env.HAR_CONTROL_SYNC_SELECTION_PATH);
+    return path82.resolve(process.env.HAR_CONTROL_SYNC_SELECTION_PATH);
   }
-  return path79.join(os25.homedir(), ".har", "sync-selection.json");
+  return path82.join(os25.homedir(), ".har", "sync-selection.json");
 }
 function readSyncSelection() {
   const selectionPath = getSelectionPath();
   try {
-    if (!fs71.existsSync(selectionPath)) return null;
-    const parsed = JSON.parse(fs71.readFileSync(selectionPath, "utf8"));
+    if (!fs73.existsSync(selectionPath)) return null;
+    const parsed = JSON.parse(fs73.readFileSync(selectionPath, "utf8"));
     if (!Array.isArray(parsed.repos)) return null;
     return parsed.repos.map((repoPath) => canonicalizeControlRepoPath(repoPath));
   } catch {
@@ -81038,8 +81686,8 @@ function readSyncSelection() {
 function writeSyncSelection(repos) {
   const selectionPath = getSelectionPath();
   const canonical = Array.from(new Set(repos.map((repoPath) => canonicalizeControlRepoPath(repoPath))));
-  fs71.mkdirSync(path79.dirname(selectionPath), { recursive: true });
-  fs71.writeFileSync(selectionPath, JSON.stringify({ repos: canonical }, null, 2) + "\n");
+  fs73.mkdirSync(path82.dirname(selectionPath), { recursive: true });
+  fs73.writeFileSync(selectionPath, JSON.stringify({ repos: canonical }, null, 2) + "\n");
 }
 function resolveSyncSelection(input) {
   const { discovered, stored, forceSelect, isTTY } = input;
@@ -81066,8 +81714,8 @@ function resolveSyncSelection(input) {
 }
 
 // src/core/control-unregister.ts
-var fs72 = __toESM(require("fs"));
-var path80 = __toESM(require("path"));
+var fs74 = __toESM(require("fs"));
+var path83 = __toESM(require("path"));
 init_control_repo_path();
 init_control_registry();
 init_control_config();
@@ -81077,9 +81725,9 @@ function listUnregisterWorktreeCandidates(repoPath) {
   const harnessRoot = canonicalizeControlRepoPath(repoPath);
   const byPath = /* @__PURE__ */ new Map();
   const add = (partial2) => {
-    const resolved = path80.resolve(partial2.worktreePath);
+    const resolved = path83.resolve(partial2.worktreePath);
     if (!resolved || resolved === harnessRoot) return;
-    const exists = partial2.exists ?? fs72.existsSync(resolved);
+    const exists = partial2.exists ?? fs74.existsSync(resolved);
     const prev = byPath.get(resolved);
     if (prev) {
       byPath.set(resolved, {
@@ -81130,8 +81778,8 @@ async function askYesNo6(question) {
   if (!process.stdin.isTTY || !process.stdout.isTTY) return false;
   const readline8 = await import("readline");
   const rl = readline8.createInterface({ input: process.stdin, output: process.stderr });
-  const answer = await new Promise((resolve60) => {
-    rl.question(question, resolve60);
+  const answer = await new Promise((resolve66) => {
+    rl.question(question, resolve66);
   });
   rl.close();
   return /^[Yy]$/.test(answer.trim());
@@ -81193,28 +81841,28 @@ async function teardownWorktrees(repoPath, candidates, dryRun) {
         trigger: "cli"
       });
       if (result.code !== 0) {
-        if (fs72.existsSync(candidate.worktreePath)) {
-          fs72.rmSync(candidate.worktreePath, { recursive: true, force: true });
+        if (fs74.existsSync(candidate.worktreePath)) {
+          fs74.rmSync(candidate.worktreePath, { recursive: true, force: true });
         }
       }
       outcomes.push({
         path: candidate.worktreePath,
         agentId: candidate.agentId,
-        deleted: !fs72.existsSync(candidate.worktreePath),
-        error: result.code !== 0 && fs72.existsSync(candidate.worktreePath) ? result.stderr : void 0
+        deleted: !fs74.existsSync(candidate.worktreePath),
+        error: result.code !== 0 && fs74.existsSync(candidate.worktreePath) ? result.stderr : void 0
       });
     } catch (err) {
       const message = err instanceof Error ? err.message : String(err);
       try {
-        if (fs72.existsSync(candidate.worktreePath)) {
-          fs72.rmSync(candidate.worktreePath, { recursive: true, force: true });
+        if (fs74.existsSync(candidate.worktreePath)) {
+          fs74.rmSync(candidate.worktreePath, { recursive: true, force: true });
         }
       } catch {
       }
       outcomes.push({
         path: candidate.worktreePath,
         agentId: candidate.agentId,
-        deleted: !fs72.existsSync(candidate.worktreePath),
+        deleted: !fs74.existsSync(candidate.worktreePath),
         error: message
       });
     }
@@ -81277,16 +81925,16 @@ init_control_config();
 init_control_registry();
 
 // src/core/harness-scrub.ts
-var fs73 = __toESM(require("fs"));
-var path81 = __toESM(require("path"));
+var fs75 = __toESM(require("fs"));
+var path84 = __toESM(require("path"));
 var HARNESS_SCRUB_DIRS = ["runs", "validations", "state", "slots"];
 function scrubLocalHarnessDirs(repoPath) {
   const results = [];
-  const resolved = path81.resolve(repoPath);
-  if (!fs73.existsSync(resolved)) {
+  const resolved = path84.resolve(repoPath);
+  if (!fs75.existsSync(resolved)) {
     for (const directory of HARNESS_SCRUB_DIRS) {
       results.push({
-        path: path81.join(resolved, ".har", directory),
+        path: path84.join(resolved, ".har", directory),
         directory,
         deleted: false,
         error: "repository path does not exist"
@@ -81295,24 +81943,24 @@ function scrubLocalHarnessDirs(repoPath) {
     return results;
   }
   for (const directory of HARNESS_SCRUB_DIRS) {
-    const target = path81.join(resolved, ".har", directory);
-    if (!fs73.existsSync(target)) {
+    const target = path84.join(resolved, ".har", directory);
+    if (!fs75.existsSync(target)) {
       results.push({ path: target, directory, deleted: true });
       continue;
     }
     try {
-      fs73.rmSync(target, { recursive: true, force: true });
+      fs75.rmSync(target, { recursive: true, force: true });
       results.push({
         path: target,
         directory,
-        deleted: !fs73.existsSync(target),
-        error: fs73.existsSync(target) ? "failed to remove directory" : void 0
+        deleted: !fs75.existsSync(target),
+        error: fs75.existsSync(target) ? "failed to remove directory" : void 0
       });
     } catch (err) {
       results.push({
         path: target,
         directory,
-        deleted: !fs73.existsSync(target),
+        deleted: !fs75.existsSync(target),
         error: err instanceof Error ? err.message : String(err)
       });
     }
@@ -81323,7 +81971,7 @@ function scrubLocalHarnessForRepos(repoPaths) {
   const results = [];
   const seen = /* @__PURE__ */ new Set();
   for (const repoPath of repoPaths) {
-    const key = path81.resolve(repoPath);
+    const key = path84.resolve(repoPath);
     if (seen.has(key)) continue;
     seen.add(key);
     results.push(...scrubLocalHarnessDirs(key));
@@ -81336,8 +81984,8 @@ async function askYesNo7(question) {
   if (!process.stdin.isTTY || !process.stdout.isTTY) return false;
   const readline8 = await import("readline");
   const rl = readline8.createInterface({ input: process.stdin, output: process.stderr });
-  const answer = await new Promise((resolve60) => {
-    rl.question(question, resolve60);
+  const answer = await new Promise((resolve66) => {
+    rl.question(question, resolve66);
   });
   rl.close();
   return /^[Yy]$/.test(answer.trim());
@@ -81616,7 +82264,7 @@ async function handleDown() {
   return finishCommand(code);
 }
 async function handleRegister(argv) {
-  const repoPath = path82.resolve(argv.repo);
+  const repoPath = path85.resolve(argv.repo);
   header("har control register");
   info(`Repository: ${repoPath}`);
   try {
@@ -81714,7 +82362,7 @@ async function handleReset(argv) {
   }
 }
 async function handleUnregister(argv) {
-  const repoPath = path82.resolve(argv.repo);
+  const repoPath = path85.resolve(argv.repo);
   const worktrees = listUnregisterWorktreeCandidates(repoPath);
   try {
     let deleteWorktrees = argv.deleteWorktrees;
@@ -81995,12 +82643,12 @@ async function handleTrajectory(argv) {
 }
 
 // src/cli/commands/hooks.ts
-var path84 = __toESM(require("path"));
+var path87 = __toESM(require("path"));
 init_hooks();
 
 // src/core/claude-hooks.ts
-var fs74 = __toESM(require("fs"));
-var path83 = __toESM(require("path"));
+var fs76 = __toESM(require("fs"));
+var path86 = __toESM(require("path"));
 init_paths();
 var CLAUDE_GUARD_RELATIVE_PATH = ".har/hooks/claude-worktree-guard.sh";
 var CLAUDE_SETTINGS_RELATIVE_PATH = ".claude/settings.json";
@@ -82012,8 +82660,8 @@ function isHarGuardEntry(entry) {
   );
 }
 function readSettings(settingsPath) {
-  if (!fs74.existsSync(settingsPath)) return {};
-  const raw = fs74.readFileSync(settingsPath, "utf8").trim();
+  if (!fs76.existsSync(settingsPath)) return {};
+  const raw = fs76.readFileSync(settingsPath, "utf8").trim();
   if (raw === "") return {};
   const parsed = JSON.parse(raw);
   if (parsed === null || typeof parsed !== "object" || Array.isArray(parsed)) {
@@ -82022,19 +82670,19 @@ function readSettings(settingsPath) {
   return parsed;
 }
 function writeSettings(settingsPath, settings) {
-  fs74.mkdirSync(path83.dirname(settingsPath), { recursive: true });
-  fs74.writeFileSync(settingsPath, JSON.stringify(settings, null, 2) + "\n");
+  fs76.mkdirSync(path86.dirname(settingsPath), { recursive: true });
+  fs76.writeFileSync(settingsPath, JSON.stringify(settings, null, 2) + "\n");
 }
 function installClaudeGuard(repoPath) {
   const templatePath = resolveTemplateFile("claude-worktree-guard.sh.template");
   if (!templatePath) {
     throw new Error("Guard template not found (claude-worktree-guard.sh.template). Run npm run build.");
   }
-  const guardScript = path83.join(repoPath, CLAUDE_GUARD_RELATIVE_PATH);
-  fs74.mkdirSync(path83.dirname(guardScript), { recursive: true });
-  fs74.copyFileSync(templatePath, guardScript);
-  fs74.chmodSync(guardScript, 493);
-  const settingsPath = path83.join(repoPath, CLAUDE_SETTINGS_RELATIVE_PATH);
+  const guardScript = path86.join(repoPath, CLAUDE_GUARD_RELATIVE_PATH);
+  fs76.mkdirSync(path86.dirname(guardScript), { recursive: true });
+  fs76.copyFileSync(templatePath, guardScript);
+  fs76.chmodSync(guardScript, 493);
+  const settingsPath = path86.join(repoPath, CLAUDE_SETTINGS_RELATIVE_PATH);
   const settings = readSettings(settingsPath);
   const hooks = settings.hooks ?? {};
   const preToolUse = (hooks.PreToolUse ?? []).filter((entry) => !isHarGuardEntry(entry));
@@ -82048,15 +82696,15 @@ function installClaudeGuard(repoPath) {
 }
 function uninstallClaudeGuard(repoPath) {
   let removed = false;
-  const guardScript = path83.join(repoPath, CLAUDE_GUARD_RELATIVE_PATH);
-  if (fs74.existsSync(guardScript)) {
-    fs74.rmSync(guardScript);
+  const guardScript = path86.join(repoPath, CLAUDE_GUARD_RELATIVE_PATH);
+  if (fs76.existsSync(guardScript)) {
+    fs76.rmSync(guardScript);
     removed = true;
-    const parent = path83.dirname(guardScript);
-    if (fs74.existsSync(parent) && fs74.readdirSync(parent).length === 0) fs74.rmdirSync(parent);
+    const parent = path86.dirname(guardScript);
+    if (fs76.existsSync(parent) && fs76.readdirSync(parent).length === 0) fs76.rmdirSync(parent);
   }
-  const settingsPath = path83.join(repoPath, CLAUDE_SETTINGS_RELATIVE_PATH);
-  if (fs74.existsSync(settingsPath)) {
+  const settingsPath = path86.join(repoPath, CLAUDE_SETTINGS_RELATIVE_PATH);
+  if (fs76.existsSync(settingsPath)) {
     const settings = readSettings(settingsPath);
     const preToolUse = settings.hooks?.PreToolUse;
     if (preToolUse) {
@@ -82081,8 +82729,8 @@ function uninstallClaudeGuard(repoPath) {
   return { removed };
 }
 function claudeGuardInstalled(repoPath) {
-  const settingsPath = path83.join(repoPath, CLAUDE_SETTINGS_RELATIVE_PATH);
-  if (!fs74.existsSync(settingsPath)) return false;
+  const settingsPath = path86.join(repoPath, CLAUDE_SETTINGS_RELATIVE_PATH);
+  if (!fs76.existsSync(settingsPath)) return false;
   try {
     const settings = readSettings(settingsPath);
     return (settings.hooks?.PreToolUse ?? []).some(isHarGuardEntry);
@@ -82099,7 +82747,7 @@ function repoOption(y) {
 function handleInstall2(argv) {
   try {
     if (argv.claude) {
-      const result2 = installClaudeGuard(path84.resolve(argv.repo));
+      const result2 = installClaudeGuard(path87.resolve(argv.repo));
       success("Claude Code worktree guard installed.");
       info(`Guard script:  ${result2.guardScript}`);
       info(`Settings:      ${result2.settingsPath} (PreToolUse: Edit|Write|MultiEdit|NotebookEdit)`);
@@ -82107,7 +82755,7 @@ function handleInstall2(argv) {
       info("Commit both files so the guard travels with the repo.");
       return;
     }
-    const result = installHooks({ repoPath: path84.resolve(argv.repo), force: argv.force });
+    const result = installHooks({ repoPath: path87.resolve(argv.repo), force: argv.force });
     success(`Commit gate installed in ${result.hooksDir}`);
     info(`pre-commit: ${result.preCommit}, post-commit: ${result.postCommit}`);
     info("Commits of unverified change batches will be blocked in agent worktrees.");
@@ -82120,7 +82768,7 @@ function handleInstall2(argv) {
 function handleUninstall(argv) {
   try {
     if (argv.claude) {
-      const result2 = uninstallClaudeGuard(path84.resolve(argv.repo));
+      const result2 = uninstallClaudeGuard(path87.resolve(argv.repo));
       if (result2.removed) {
         success("Claude Code worktree guard removed.");
       } else {
@@ -82128,7 +82776,7 @@ function handleUninstall(argv) {
       }
       return;
     }
-    const result = uninstallHooks(path84.resolve(argv.repo));
+    const result = uninstallHooks(path87.resolve(argv.repo));
     if (result.removed) {
       success(`Commit gate removed from ${result.hooksDir}`);
     } else {
@@ -82141,7 +82789,7 @@ function handleUninstall(argv) {
 }
 function handleStatus2(argv) {
   try {
-    const status = getHooksStatus(path84.resolve(argv.repo));
+    const status = getHooksStatus(path87.resolve(argv.repo));
     if (argv.json) {
       process.stdout.write(`${JSON.stringify(status, null, 2)}
 `);
@@ -82159,7 +82807,7 @@ function handleStatus2(argv) {
     );
     info(`Effective:     ${status.effectiveMode} (in this checkout)`);
     info(
-      `Claude guard:  ${claudeGuardInstalled(path84.resolve(argv.repo)) ? `installed (${CLAUDE_GUARD_RELATIVE_PATH})` : "not installed"}`
+      `Claude guard:  ${claudeGuardInstalled(path87.resolve(argv.repo)) ? `installed (${CLAUDE_GUARD_RELATIVE_PATH})` : "not installed"}`
     );
   } catch (err) {
     error(err instanceof Error ? err.message : String(err));
@@ -82420,10 +83068,10 @@ function assignProp(target, prop, value) {
     configurable: true
   });
 }
-function getElementAtPath(obj, path91) {
-  if (!path91)
+function getElementAtPath(obj, path97) {
+  if (!path97)
     return obj;
-  return path91.reduce((acc, key) => acc?.[key], obj);
+  return path97.reduce((acc, key) => acc?.[key], obj);
 }
 function promiseAllObject(promisesObj) {
   const keys = Object.keys(promisesObj);
@@ -82743,11 +83391,11 @@ function aborted(x, startIndex = 0) {
   }
   return false;
 }
-function prefixIssues(path91, issues) {
+function prefixIssues(path97, issues) {
   return issues.map((iss) => {
     var _a2;
     (_a2 = iss).path ?? (_a2.path = []);
-    iss.path.unshift(path91);
+    iss.path.unshift(path97);
     return iss;
   });
 }
@@ -88070,7 +88718,7 @@ var Protocol = class {
           return;
         }
         const pollInterval = task2.pollInterval ?? this._options?.defaultTaskPollInterval ?? 1e3;
-        await new Promise((resolve60) => setTimeout(resolve60, pollInterval));
+        await new Promise((resolve66) => setTimeout(resolve66, pollInterval));
         options?.signal?.throwIfAborted();
       }
     } catch (error3) {
@@ -88087,7 +88735,7 @@ var Protocol = class {
    */
   request(request, resultSchema, options) {
     const { relatedRequestId, resumptionToken, onresumptiontoken, task, relatedTask } = options ?? {};
-    return new Promise((resolve60, reject) => {
+    return new Promise((resolve66, reject) => {
       const earlyReject = (error3) => {
         reject(error3);
       };
@@ -88165,7 +88813,7 @@ var Protocol = class {
           if (!parseResult.success) {
             reject(parseResult.error);
           } else {
-            resolve60(parseResult.data);
+            resolve66(parseResult.data);
           }
         } catch (error3) {
           reject(error3);
@@ -88426,12 +89074,12 @@ var Protocol = class {
       }
     } catch {
     }
-    return new Promise((resolve60, reject) => {
+    return new Promise((resolve66, reject) => {
       if (signal.aborted) {
         reject(new McpError(ErrorCode.InvalidRequest, "Request cancelled"));
         return;
       }
-      const timeoutId = setTimeout(resolve60, interval);
+      const timeoutId = setTimeout(resolve66, interval);
       signal.addEventListener("abort", () => {
         clearTimeout(timeoutId);
         reject(new McpError(ErrorCode.InvalidRequest, "Request cancelled"));
@@ -89221,7 +89869,7 @@ var Server = class extends Protocol {
 };
 
 // src/mcp/server.ts
-var path85 = __toESM(require("path"));
+var path90 = __toESM(require("path"));
 
 // node_modules/@modelcontextprotocol/sdk/dist/esm/server/stdio.js
 var import_node_process3 = __toESM(require("node:process"), 1);
@@ -89304,12 +89952,12 @@ var StdioServerTransport = class {
     this.onclose?.();
   }
   send(message) {
-    return new Promise((resolve60) => {
+    return new Promise((resolve66) => {
       const json = serializeMessage(message);
       if (this._stdout.write(json)) {
-        resolve60();
+        resolve66();
       } else {
-        this._stdout.once("drain", resolve60);
+        this._stdout.once("drain", resolve66);
       }
     });
   }
@@ -89319,6 +89967,387 @@ var StdioServerTransport = class {
 init_package_version();
 init_telemetry_config();
 init_runs();
+
+// src/core/lines.ts
+var path89 = __toESM(require("path"));
+
+// src/harness/line-create.ts
+var fs77 = __toESM(require("fs"));
+var path88 = __toESM(require("path"));
+init_paths();
+init_schema2();
+var LINE_ID_PATTERN = /^[a-z0-9][a-z0-9._-]*$/;
+function renderSkeleton(templatePath, tokens) {
+  let content = fs77.readFileSync(templatePath, "utf8");
+  for (const [token, value] of Object.entries(tokens)) {
+    content = content.replace(new RegExp(token, "g"), value);
+  }
+  return content;
+}
+function createLine(repoPath, options) {
+  const resolved = path88.resolve(repoPath);
+  if (!harnessExists(resolved)) {
+    throw new Error('No .har/ harness found. Run "har onboard" first.');
+  }
+  const id = options.id.trim();
+  if (!LINE_ID_PATTERN.test(id)) {
+    throw new Error(
+      `Invalid line id "${id}". Use lowercase letters, digits, dots, dashes (e.g. "onboarding-line").`
+    );
+  }
+  const lineDir = path88.join(resolved, LOCAL_LINES_DIR, id);
+  const lineDirRel2 = `${LOCAL_LINES_DIR}/${id}`;
+  if (fs77.existsSync(lineDir) && !options.force) {
+    throw new Error(`Line already exists: ${lineDirRel2}/. Use --force to overwrite.`);
+  }
+  const stationIds = options.stations?.length ? options.stations : ["S1", "S2"];
+  const title = options.title ?? `${id} factory line`;
+  const gateStageId = `${id}-gate`;
+  const withGateStage = options.gateStage ?? true;
+  const program = LineProgramSchema.parse({
+    contractVersion: LINE_CONTRACT_VERSION,
+    id,
+    title,
+    description: options.description ?? 'Describe the program: what it produces, and what "done" means at the last station.',
+    skills: [{ id: "factory-line", role: "orchestrator", install: "repo:.claude/skills/factory-line" }],
+    mcp: [],
+    plugins: [],
+    stations: stationIds.map((stationId, i) => ({
+      id: stationId,
+      title: `Station ${i + 1}`,
+      description: "What this station produces.",
+      work: { source: "none", ids: [], optional: true }
+    })),
+    gate: {
+      cumulative: true,
+      optInEnv: options.optInEnv ?? null,
+      stages: withGateStage ? [{ id: gateStageId, fromStation: stationIds[0], tier: "full" }] : []
+    },
+    extraStages: withGateStage ? [
+      {
+        id: gateStageId,
+        kind: "test",
+        tier: "full",
+        description: `Line-owned gate for ${id} \u2014 registered, never on verify`
+      }
+    ] : [],
+    handoff: {
+      autonomousShip: false,
+      waitFor: "human review before merge or release"
+    },
+    prototypeNotes: []
+  });
+  const manifest = LineManifestSchema.parse({
+    kind: LINE_BUNDLE_KIND,
+    id,
+    title,
+    program: "line.json",
+    files: withGateStage ? [{ src: `stages/${gateStageId}.sh`, dest: `.har/stages/${gateStageId}.sh`, executable: true }] : [],
+    stages: withGateStage ? [
+      {
+        id: gateStageId,
+        kind: "test",
+        description: `Line-owned gate for ${id} \u2014 registered, never on verify`,
+        script: `stages/${gateStageId}.sh`,
+        requiresAgentId: true,
+        artifacts: [
+          {
+            path: `.har/artifacts/${gateStageId}`,
+            kind: "directory",
+            description: `Artifacts for the ${gateStageId} stage`
+          }
+        ],
+        tier: "full"
+      }
+    ] : [],
+    nextSteps: [
+      `Edit ${lineDirRel2}/line.json \u2014 name the stations and bind tracker work`,
+      ...withGateStage ? [`Edit ${lineDirRel2}/stages/${gateStageId}.sh \u2014 replace the TODO with the real gate`] : [],
+      `har line status ${id}`,
+      `har line gate ${stationIds[0]} --line ${id}`
+    ],
+    docsPath: `${lineDirRel2}/README.md`
+  });
+  const filesWritten = [];
+  const write = (rel, content, executable = false) => {
+    const abs = path88.join(lineDir, rel);
+    fs77.mkdirSync(path88.dirname(abs), { recursive: true });
+    fs77.writeFileSync(abs, content);
+    if (executable) fs77.chmodSync(abs, 493);
+    filesWritten.push(`${lineDirRel2}/${rel}`);
+  };
+  write("line.manifest.json", `${JSON.stringify(manifest, null, 2)}
+`);
+  write("line.json", `${JSON.stringify(program, null, 2)}
+`);
+  if (withGateStage) {
+    const stageScript = renderSkeleton(
+      path88.join(resolveTemplatesDir(), "plugins", "custom-stage-skeleton.sh"),
+      {
+        __STAGE_ID__: gateStageId,
+        __STAGE_KIND__: "test",
+        __STAGE_DESCRIPTION__: `Line-owned gate for ${id} (not on verify)`
+      }
+    );
+    write(`stages/${gateStageId}.sh`, stageScript, true);
+  }
+  write("README.md", renderLineReadme(id, title, stationIds, gateStageId, withGateStage));
+  return {
+    lineId: id,
+    lineDir,
+    filesWritten,
+    nextSteps: [
+      `Edit ${lineDirRel2}/line.json \u2014 stations, work binding, gate tags`,
+      ...withGateStage ? [`Edit ${lineDirRel2}/stages/${gateStageId}.sh \u2014 replace the TODO with the real gate`] : [],
+      `Install it: har line add ${id}   (re-run with --force after changes)`,
+      `Installing writes .har/ADAPT-PROMPT-line-${id}.md \u2014 a ready adaptation prompt for your coding agent`,
+      "Publishing later (npm/git) needs zero format changes \u2014 see the README"
+    ]
+  };
+}
+function renderLineReadme(id, title, stationIds, gateStageId, withGateStage) {
+  return `# ${title}
+
+A HAR **factory line**: an ordered program of stations plus a cumulative gate.
+
+A line is not a verification plugin. Installing it registers stages but never
+adds them to \`verificationStages\` \u2014 default \`har env verify --full\` stays
+exactly as fast as it was. Line gate stages run on demand:
+
+\`\`\`bash
+har line gate ${stationIds[0]} --line ${id}
+\`\`\`
+
+If a check should gate *every* verify, it belongs in a verification plugin
+(\`har plugin create\` / \`har env add-plugin\`), not here.
+
+## Layout
+
+\`\`\`text
+${id}/
+\u251C\u2500\u2500 line.manifest.json   # kind: line \u2014 what \`har line add\` applies
+\u251C\u2500\u2500 line.json            # the program: stations, gate, handoff
+${withGateStage ? `\u251C\u2500\u2500 stages/${gateStageId}.sh   # extra gate stage \u2014 registered, NOT on verify
+` : ""}\u2514\u2500\u2500 README.md
+\`\`\`
+
+## Stations
+
+${stationIds.map((s, i) => `${i + 1}. \`${s}\``).join("\n")}
+
+## The ratchet
+
+\`gate.stages[].fromStation\` tags a stage as required at that station **and
+every later one**. Adding a station must never drop an earlier station's
+stages \u2014 that is what \`gate.cumulative: true\` means, and it is contract.
+
+## Install channels
+
+\`\`\`bash
+har line add ${id}                        # this repo (.har/lines/${id})
+har line add ./${id}                      # local path
+har line add github:acme/${id}            # git
+har line add @acme/${id}                  # npm
+\`\`\`
+
+Publishing needs no format change: add a \`package.json\` and push.
+`;
+}
+
+// src/core/lines.ts
+init_stages();
+init_slot_registry();
+init_runs();
+function listInstalledLineIds(repoPath) {
+  const ledger = readLineLedger(repoPath);
+  const fromLedger = ledger?.lines.map((l) => l.id) ?? [];
+  const onDisk = listLocalLineIds(repoPath).filter(
+    (id) => readInstalledLineProgram(repoPath, id) !== null
+  );
+  return [.../* @__PURE__ */ new Set([...fromLedger, ...onDisk])].sort();
+}
+function cumulativeGateStages(program, stationId) {
+  const stationIndex = program.stations.findIndex((s) => s.id === stationId);
+  if (stationIndex < 0) {
+    throw new Error(
+      `Unknown station "${stationId}". Stations: ${program.stations.map((s) => s.id).join(", ")}`
+    );
+  }
+  const indexOf = new Map(program.stations.map((s, i) => [s.id, i]));
+  return program.gate.stages.filter((stage) => {
+    const from2 = indexOf.get(stage.fromStation);
+    return from2 !== void 0 && from2 <= stationIndex;
+  });
+}
+function latestRunStatusByStage(repoPath, stageIds) {
+  const statuses = /* @__PURE__ */ new Map();
+  for (const stageId of stageIds) {
+    const [latest] = listRuns(repoPath, { stageId, limit: 1 });
+    if (latest) statuses.set(stageId, latest.status);
+  }
+  return statuses;
+}
+function getLineStatus(repoPath, lineId) {
+  const resolved = path89.resolve(repoPath);
+  const program = readInstalledLineProgram(resolved, lineId);
+  if (!program) {
+    throw new Error(
+      `Line not installed: ${lineId}. Install one with "har line add <spec>" or scaffold with "har line create <id>".`
+    );
+  }
+  const ledger = readLineLedger(resolved);
+  const entry = ledger?.lines.find((l) => l.id === lineId);
+  const registry2 = readStageRegistry(resolved);
+  const registeredIds = new Set(registry2.stages.map((s) => s.id));
+  const verificationStages = registry2.verificationStages ?? [];
+  const allGateStageIds = [...new Set(program.gate.stages.map((s) => s.id))];
+  const runStatuses = latestRunStatusByStage(resolved, allGateStageIds);
+  const stations = program.stations.map((station, index) => {
+    const required2 = cumulativeGateStages(program, station.id);
+    const requiredStageIds = [...new Set(required2.map((s) => s.id))];
+    const missingStageIds = requiredStageIds.filter((id) => !registeredIds.has(id));
+    const passedStageIds = requiredStageIds.filter((id) => runStatuses.get(id) === "pass");
+    const neverRunStageIds = requiredStageIds.filter((id) => !runStatuses.has(id));
+    return {
+      id: station.id,
+      title: station.title,
+      index,
+      requiredStageIds,
+      passedStageIds,
+      neverRunStageIds,
+      missingStageIds,
+      green: missingStageIds.length === 0 && passedStageIds.length === requiredStageIds.length,
+      work: station.work
+    };
+  });
+  let currentStationId;
+  for (const station of stations) {
+    if (station.green) currentStationId = station.id;
+    else break;
+  }
+  const nextStationId = stations.find((s) => !s.green)?.id;
+  const lineStageIds = entry?.stageIds ?? [];
+  const verifyLeaks = lineStageIds.filter((id) => verificationStages.includes(id));
+  const warnings = [];
+  if (verifyLeaks.length > 0) {
+    warnings.push(
+      `Line stage(s) ${verifyLeaks.join(", ")} are listed in verificationStages \u2014 line gate stages must stay off \`har env verify --full\`. Remove them from .har/stages.json.`
+    );
+  }
+  for (const station of stations) {
+    for (const missing of station.missingStageIds) {
+      warnings.push(`Gate stage "${missing}" (station ${station.id}) is not registered in .har/stages.json`);
+    }
+  }
+  const slotsInFlight = listSlotRegistryEntries(resolved).map((slot) => ({
+    agentId: slot.agentId,
+    branch: slot.branch,
+    workUnitId: slot.workUnitId,
+    workDir: slot.workDir
+  }));
+  return {
+    lineId,
+    title: program.title,
+    programPath: entry?.programPath ?? `.har/lines/${lineId}/line.json`,
+    installed: true,
+    source: entry?.source,
+    stations,
+    currentStationId,
+    nextStationId,
+    optInEnv: program.gate.optInEnv,
+    registeredStageIds: lineStageIds,
+    verifyLeaks,
+    slotsInFlight,
+    handoffAutonomousShip: false,
+    warnings: [...new Set(warnings)]
+  };
+}
+function getAllLineStatuses(repoPath) {
+  return listInstalledLineIds(repoPath).map((id) => getLineStatus(repoPath, id));
+}
+function resolveLineId(repoPath, lineId) {
+  if (lineId) return lineId;
+  const ids = listInstalledLineIds(repoPath);
+  if (ids.length === 0) {
+    throw new Error('No factory line installed. Run "har line create <id>" or "har line add <spec>".');
+  }
+  if (ids.length > 1) {
+    throw new Error(`Multiple lines installed (${ids.join(", ")}). Pass --line <id>.`);
+  }
+  return ids[0];
+}
+async function runLineGate(options) {
+  const repoPath = path89.resolve(options.repoPath);
+  const lineId = resolveLineId(repoPath, options.lineId);
+  const program = readInstalledLineProgram(repoPath, lineId);
+  if (!program) {
+    throw new Error(`Line not installed: ${lineId}`);
+  }
+  const required2 = cumulativeGateStages(program, options.station);
+  if (program.gate.optInEnv && !options.force && process.env[program.gate.optInEnv] !== "1") {
+    return {
+      lineId,
+      station: options.station,
+      stages: required2.map((stage) => ({
+        stageId: stage.id,
+        fromStation: stage.fromStation,
+        status: "skipped",
+        reason: `${program.gate.optInEnv} is not "1"`
+      })),
+      pass: true,
+      skipped: true,
+      skipReason: `Gate is opt-in: set ${program.gate.optInEnv}=1 (or pass --force) to run it.`
+    };
+  }
+  const registry2 = readStageRegistry(repoPath);
+  const registeredIds = new Set(registry2.stages.map((s) => s.id));
+  if (options.agentId === void 0) {
+    const needSlot = required2.filter((stage) => registry2.stages.find((s) => s.id === stage.id)?.requiresAgentId).map((stage) => stage.id);
+    if (needSlot.length > 0) {
+      throw new Error(
+        `Gate stage(s) ${needSlot.join(", ")} run in an agent slot \u2014 pass --agent <id> (har line gate ${options.station} --line ${lineId} --agent 1).`
+      );
+    }
+  }
+  const results = [];
+  let pass = true;
+  for (const stage of required2) {
+    if (!registeredIds.has(stage.id)) {
+      results.push({
+        stageId: stage.id,
+        fromStation: stage.fromStation,
+        status: "skipped",
+        reason: "stage is not registered in .har/stages.json"
+      });
+      pass = false;
+      continue;
+    }
+    const result = await runStage({
+      repoPath,
+      stageId: stage.id,
+      agentId: options.agentId,
+      trigger: "cli"
+    });
+    results.push({
+      stageId: stage.id,
+      fromStation: stage.fromStation,
+      status: result.status,
+      durationMs: result.durationMs
+    });
+    if (result.status !== "pass") {
+      pass = false;
+    }
+  }
+  return { lineId, station: options.station, stages: results, pass, skipped: false };
+}
+function createLineBundle(repoPath, options) {
+  return createLine(repoPath, options);
+}
+function addLine(repoPath, spec, options = {}) {
+  return applyLine(repoPath, spec, options);
+}
+
+// src/mcp/server.ts
 init_work_units();
 init_manifest();
 
@@ -89450,7 +90479,12 @@ var PreflightEnvironmentOutputSchema = ShellRunOutputSchema.extend({
 var CompleteEnvironmentInputSchema = external_exports.object({
   repo: external_exports.string().default("."),
   agentId: agentIdSchema,
-  skipVerify: external_exports.boolean().default(false).describe("Tear down without running verification (no validation is recorded)")
+  verify: external_exports.boolean().optional().describe(
+    "Re-run full verification before teardown when the tree may have changed since the last passing --full"
+  ),
+  skipVerify: external_exports.boolean().optional().describe(
+    "Deprecated. Complete already skips re-verification by default. Pass verify=true to re-run; skipVerify=false still forces a re-run."
+  )
 });
 var CompleteEnvironmentOutputSchema = ShellRunOutputSchema.extend({
   branch: external_exports.string().optional().describe("Session branch kept for the user to push / open a PR"),
@@ -89532,6 +90566,32 @@ var ControlUpOutputSchema = external_exports.object({
   failed: external_exports.number().int(),
   apiReady: external_exports.boolean()
 });
+var CreateLineInputSchema = external_exports.object({
+  repo: external_exports.string().default("."),
+  id: external_exports.string().min(1).describe("Line id (lowercase slug, e.g. onboarding-line)"),
+  title: external_exports.string().min(1).optional().describe("Human-readable line title"),
+  description: external_exports.string().min(1).max(2e3).optional(),
+  stations: external_exports.array(external_exports.string().min(1)).optional().describe("Station ids in order (default: S1, S2)"),
+  gateStage: external_exports.boolean().default(true).describe("Scaffold one registered-but-off-verify gate stage"),
+  optInEnv: external_exports.string().min(1).optional().describe('Env var that must be "1" for the gate to run (e.g. HAR_FIXTURE_E2E)'),
+  force: external_exports.boolean().default(false)
+});
+var AddLineInputSchema = external_exports.object({
+  repo: external_exports.string().default("."),
+  line: external_exports.string().min(1).describe("Line id, local path (./line), npm package (@org/pkg), or git URL (github:org/repo)"),
+  force: external_exports.boolean().default(false).describe("Overwrite existing line files and stage entries")
+});
+var LineStatusInputSchema = external_exports.object({
+  repo: external_exports.string().default("."),
+  line: external_exports.string().min(1).optional().describe("Line id (default: every installed line)")
+});
+var RunLineGateInputSchema = external_exports.object({
+  repo: external_exports.string().default("."),
+  station: external_exports.string().min(1).describe("Station id whose cumulative gate should run"),
+  line: external_exports.string().min(1).optional().describe("Line id when more than one is installed"),
+  agentId: external_exports.number().int().optional().describe("Agent slot to run the stages in"),
+  force: external_exports.boolean().default(false).describe("Run even when the program declares an opt-in env var that is not set")
+});
 
 // src/mcp/server.ts
 var HAR_MCP_TOOLS = [
@@ -89732,14 +90792,18 @@ var HAR_MCP_TOOLS = [
   },
   {
     name: "har_complete_environment",
-    description: "Finish a session when the work is done: runs full verification (recorded as a validation of the worktree tree hash), tears the slot down, and KEEPS the session branch so the user can push it and open a PR.",
+    description: "Finish a session when the work is done: reuses the last passing full validation for the current worktree (or re-runs verify when verify=true), tears the slot down, and KEEPS the session branch so the user can push it and open a PR.",
     inputSchema: objectJsonSchema(
       {
         repo: repoJsonProperty,
         agentId: agentIdJsonProperty,
+        verify: {
+          type: "boolean",
+          description: "Re-run full verification before teardown when the tree may have changed since the last passing --full"
+        },
         skipVerify: {
           type: "boolean",
-          description: "Tear down without running verification (no validation is recorded)"
+          description: "Deprecated. Complete already skips re-verification by default. Pass verify=true to re-run."
         }
       },
       ["agentId"]
@@ -89780,6 +90844,73 @@ var HAR_MCP_TOOLS = [
       repo: repoJsonProperty,
       detach: { type: "boolean", description: "Run the container in detached mode (default true)" }
     })
+  },
+  {
+    name: "har_line_create",
+    description: "Scaffold a project-owned factory line at .har/lines/<id>/ (manifest, program, optional gate stage, README). A line is a multi-station program, not a verification plugin.",
+    inputSchema: objectJsonSchema(
+      {
+        repo: repoJsonProperty,
+        id: { type: "string", description: "Line id (lowercase slug, e.g. onboarding-line)" },
+        title: { type: "string", description: "Human-readable line title" },
+        description: { type: "string", description: "One-paragraph description of the program" },
+        stations: {
+          type: "array",
+          items: { type: "string" },
+          description: "Station ids in order (default: S1, S2)"
+        },
+        gateStage: {
+          type: "boolean",
+          description: "Scaffold one registered-but-off-verify gate stage (default true)"
+        },
+        optInEnv: {
+          type: "string",
+          description: 'Env var that must be "1" for the gate to run (e.g. HAR_FIXTURE_E2E)'
+        },
+        force: { type: "boolean", description: "Overwrite an existing line" }
+      },
+      ["id"]
+    )
+  },
+  {
+    name: "har_add_line",
+    description: "Install a factory line bundle (local id, path, npm package, or git URL). Registers the line's stages but NEVER adds them to verificationStages \u2014 default verify stays unchanged. Verification plugins use har_add_plugin instead.",
+    inputSchema: objectJsonSchema(
+      {
+        repo: repoJsonProperty,
+        line: {
+          type: "string",
+          description: "Line id, local path (./line), npm package (@org/pkg), or git URL"
+        },
+        force: { type: "boolean", description: "Overwrite existing line files and stage entries" }
+      },
+      ["line"]
+    )
+  },
+  {
+    name: "har_line_status",
+    description: "Stations, cumulative gate progress derived from .har/runs/ records, and slots in flight for installed factory lines. Pure read \u2014 writes no run records.",
+    inputSchema: objectJsonSchema({
+      repo: repoJsonProperty,
+      line: { type: "string", description: "Line id (default: every installed line)" }
+    })
+  },
+  {
+    name: "har_run_line_gate",
+    description: "Run one station's cumulative gate: every gate stage tagged at that station or earlier. Runs through the normal stage runner and writes run records; does not call verify and does not widen the verify plan.",
+    inputSchema: objectJsonSchema(
+      {
+        repo: repoJsonProperty,
+        station: { type: "string", description: "Station id whose cumulative gate should run" },
+        line: { type: "string", description: "Line id when more than one is installed" },
+        agentId: agentIdJsonProperty,
+        force: {
+          type: "boolean",
+          description: "Run even when the program declares an opt-in env var that is not set"
+        }
+      },
+      ["station"]
+    )
   }
 ];
 function jsonContent(data) {
@@ -90009,6 +91140,7 @@ async function handleMcpToolCall(toolName, args, defaultRepo = ".") {
       const result = await completeEnvironment({
         repoPath: repo,
         agentId,
+        verify: input.verify,
         skipVerify: input.skipVerify,
         capture: true,
         trigger: "mcp"
@@ -90045,7 +91177,7 @@ async function handleMcpToolCall(toolName, args, defaultRepo = ".") {
       const input = ControlUpInputSchema.parse({ ...args, repo });
       const result = await startControlAndSync({
         detach: input.detach,
-        cwd: path85.resolve(input.repo)
+        cwd: path90.resolve(input.repo)
       });
       if (result.code !== 0) {
         return {
@@ -90067,6 +91199,59 @@ async function handleMcpToolCall(toolName, args, defaultRepo = ".") {
         })
       );
     }
+    case "har_line_create": {
+      const input = CreateLineInputSchema.parse({ ...args, repo });
+      const result = createLineBundle(repo, {
+        id: input.id,
+        title: input.title,
+        description: input.description,
+        stations: input.stations,
+        gateStage: input.gateStage,
+        optInEnv: input.optInEnv,
+        force: input.force
+      });
+      return jsonContent({
+        lineId: result.lineId,
+        filesWritten: result.filesWritten,
+        nextSteps: result.nextSteps
+      });
+    }
+    case "har_add_line": {
+      const input = AddLineInputSchema.parse({ ...args, repo });
+      const result = addLine(repo, input.line, { force: input.force, spec: input.line });
+      return jsonContent({
+        lineId: result.lineId,
+        title: result.title,
+        stationIds: result.stationIds,
+        firstGatedStationId: result.firstGatedStationId,
+        stageIds: result.stageIds,
+        filesWritten: result.filesWritten,
+        warnings: result.warnings,
+        nextSteps: result.nextSteps,
+        programPath: result.programPath,
+        docsPath: result.docsPath,
+        source: result.source,
+        adaptPromptPath: result.adaptPromptPath,
+        verificationStagesUnchanged: true
+      });
+    }
+    case "har_line_status": {
+      const input = LineStatusInputSchema.parse({ ...args, repo });
+      const statuses = input.line ? [getLineStatus(repo, input.line)] : getAllLineStatuses(repo);
+      return jsonContent(input.line ? statuses[0] : { lines: statuses });
+    }
+    case "har_run_line_gate": {
+      const input = RunLineGateInputSchema.parse({ ...args, repo });
+      const agentId = input.agentId === void 0 ? void 0 : validateAgentId(input.agentId, repo);
+      const result = await runLineGate({
+        repoPath: repo,
+        lineId: input.line,
+        station: input.station,
+        agentId,
+        force: input.force
+      });
+      return jsonContent(result);
+    }
     default:
       throw new Error(`Unknown tool: ${toolName}`);
   }
@@ -90109,11 +91294,11 @@ var mcpCommand = {
 };
 
 // src/cli/commands/onboard.ts
-var path87 = __toESM(require("path"));
+var path92 = __toESM(require("path"));
 init_stages();
 
 // src/core/onboarding.ts
-var path86 = __toESM(require("path"));
+var path91 = __toESM(require("path"));
 init_control_config();
 init_control_sync();
 init_otel_hooks();
@@ -90150,7 +91335,7 @@ var ONBOARDING_GUIDE_STEPS = [
     body: [
       "Quick:  har env verify <id>",
       "Done:   har env verify <id> --full   then   har env complete <id>",
-      "`complete` records a validation, frees the slot, and keeps the session branch for a PR."
+      "`complete` reuses the last matching full validation, frees the slot, and keeps the session branch for a PR. Pass --verify if the tree changed."
     ].join("\n")
   },
   {
@@ -90257,7 +91442,7 @@ async function defaultEnsureControl(options) {
   return { started: true, apiUrl: result.apiUrl };
 }
 async function runOnboarding(options, deps = {}) {
-  const repoPath = path86.resolve(options.repoPath);
+  const repoPath = path91.resolve(options.repoPath);
   const applyTelemetry = deps.applyTelemetry ?? applyOnboardingTelemetry;
   const ensureControl = deps.ensureControl ?? defaultEnsureControl;
   const init = deps.initHarness ?? initHarness;
@@ -90455,7 +91640,7 @@ async function promptChoices(args, docker) {
     };
   }
   const pluginChoices = listPluginChoices();
-  const repoPath = path87.resolve(args.repo);
+  const repoPath = path92.resolve(args.repo);
   const alreadyPresent = harnessExists(repoPath);
   const needProfile = !alreadyPresent && !args.skipInit && args.profile === void 0;
   const needAgentSlots = shouldConfigureSlots && flaggedSlots === void 0;
@@ -90576,7 +91761,7 @@ function printSummary(result) {
   console.error("");
 }
 async function handleOnboard(argv) {
-  const repoPath = path87.resolve(argv.repo);
+  const repoPath = path92.resolve(argv.repo);
   header("har onboard");
   info(`Repository: ${repoPath}`);
   try {
@@ -90693,24 +91878,288 @@ var onboardCommand = {
   handler: (argv) => handleOnboard(argv)
 };
 
+// src/cli/commands/line.ts
+var path93 = __toESM(require("path"));
+init_logging();
+function handleLineCreate(argv) {
+  if (!argv.id) {
+    error('Missing line id. Usage: har line create <id> [--stations S1,S2] [--title "..."]');
+    return finishCommand(1);
+  }
+  const repoPath = path93.resolve(argv.repo);
+  header("har line create");
+  info(`Repository: ${repoPath}`);
+  info(`Line: ${argv.id}`);
+  try {
+    const result = createLineBundle(repoPath, {
+      id: argv.id,
+      title: argv.title,
+      description: argv.description,
+      stations: argv.stations,
+      gateStage: argv.gateStage,
+      optInEnv: argv.optInEnv,
+      force: argv.force
+    });
+    divider();
+    success(`Factory line scaffolded: .har/lines/${result.lineId}/`);
+    for (const file of result.filesWritten) {
+      info(`  + ${file}`);
+    }
+    console.error("");
+    console.error("  Next steps:");
+    for (const step of result.nextSteps) {
+      console.error(`    ${step}`);
+    }
+    console.error("");
+    console.error(`  Docs: .har/lines/${result.lineId}/README.md`);
+    console.error("");
+  } catch (err) {
+    error(err.message);
+    return finishCommand(1);
+  }
+}
+function handleLineAdd(argv) {
+  if (!argv.spec) {
+    error("Missing line spec. Usage: har line add <id|path|npm|git>");
+    return finishCommand(1);
+  }
+  const repoPath = path93.resolve(argv.repo);
+  header("har line add");
+  info(`Repository: ${repoPath}`);
+  info(`Line: ${argv.spec}`);
+  try {
+    const result = addLine(repoPath, argv.spec, { force: argv.force, spec: argv.spec });
+    divider();
+    console.error("");
+    console.error("  verificationStages unchanged \u2014 line gate stages are opt-in.");
+    console.error(
+      `  Run the gate with: har line gate ${result.firstGatedStationId} --line ${result.lineId}`
+    );
+    console.error("");
+    console.error("  Next steps:");
+    for (const step of result.nextSteps) {
+      console.error(`    ${step}`);
+    }
+    console.error("");
+  } catch (err) {
+    error(err.message);
+    return finishCommand(1);
+  }
+}
+function renderStatus(status) {
+  header(`Line: ${status.lineId} \u2014 ${status.title}`);
+  info(`Program: ${status.programPath}${status.source ? ` (source: ${status.source})` : ""}`);
+  info(
+    status.optInEnv ? `Gate: opt-in via ${status.optInEnv}=1` : "Gate: on demand (har line gate <station>)"
+  );
+  info(
+    status.registeredStageIds.length > 0 ? `Registered stages (off verify): ${status.registeredStageIds.join(", ")}` : "Registered stages (off verify): none"
+  );
+  console.error("");
+  for (const station of status.stations) {
+    const marker = station.green ? "\u2713" : station.id === status.nextStationId ? "\u25B6" : "\xB7";
+    const required2 = station.requiredStageIds.length > 0 ? `${station.passedStageIds.length}/${station.requiredStageIds.length} gate stages green` : "no gate stages";
+    console.error(`  ${marker} ${station.id}  ${station.title}  \u2014 ${required2}`);
+    if (station.missingStageIds.length > 0) {
+      console.error(`      missing (not registered): ${station.missingStageIds.join(", ")}`);
+    }
+    const pending = station.requiredStageIds.filter((id) => !station.passedStageIds.includes(id));
+    if (pending.length > 0 && station.missingStageIds.length === 0) {
+      console.error(`      pending: ${pending.join(", ")}`);
+    }
+  }
+  console.error("");
+  if (status.slotsInFlight.length > 0) {
+    console.error("  Slots in flight:");
+    for (const slot of status.slotsInFlight) {
+      const work = slot.workUnitId ? ` work=${slot.workUnitId}` : "";
+      console.error(`    agent ${slot.agentId}: ${slot.branch ?? slot.workDir}${work}`);
+    }
+    console.error("");
+  }
+  for (const warning of status.warnings) {
+    warn(`  \u26A0 ${warning}`);
+  }
+  console.error(
+    status.nextStationId ? `  Next station: ${status.nextStationId}` : "  All stations green \u2014 hand off for human review (autonomousShip: false)."
+  );
+  console.error("");
+}
+function handleLineStatus(argv) {
+  const repoPath = path93.resolve(argv.repo);
+  try {
+    const statuses = argv.id ? [getLineStatus(repoPath, argv.id)] : getAllLineStatuses(repoPath);
+    if (argv.json) {
+      console.log(JSON.stringify(argv.id ? statuses[0] : statuses, null, 2));
+      return;
+    }
+    if (statuses.length === 0) {
+      info("No factory line installed.");
+      info("Scaffold one: har line create <id>   \u2022   Install one: har line add <spec>");
+      return;
+    }
+    for (const status of statuses) {
+      renderStatus(status);
+    }
+  } catch (err) {
+    error(err.message);
+    return finishCommand(1);
+  }
+}
+async function handleLineGate(argv) {
+  if (!argv.station) {
+    error("Missing station. Usage: har line gate <station> [--line <id>] [--agent <slot>]");
+    return finishCommand(1);
+  }
+  const repoPath = path93.resolve(argv.repo);
+  try {
+    const result = await runLineGate({
+      repoPath,
+      lineId: argv.line,
+      station: argv.station,
+      agentId: argv.agent,
+      force: argv.force
+    });
+    if (argv.json) {
+      console.log(JSON.stringify(result, null, 2));
+      return finishCommand(result.pass ? 0 : 1);
+    }
+    header(`har line gate ${result.station} (${result.lineId})`);
+    if (result.skipped) {
+      info(result.skipReason ?? "Gate skipped.");
+      for (const stage of result.stages) {
+        info(`  \xB7 ${stage.stageId} (from ${stage.fromStation}) \u2014 skipped`);
+      }
+      return;
+    }
+    for (const stage of result.stages) {
+      const mark = stage.status === "pass" ? "\u2713" : stage.status === "skipped" ? "\xB7" : "\u2717";
+      const detail = stage.reason ? ` \u2014 ${stage.reason}` : "";
+      const ms = stage.durationMs !== void 0 ? ` (${Math.round(stage.durationMs / 100) / 10}s)` : "";
+      console.error(`  ${mark} ${stage.stageId}  from ${stage.fromStation}  ${stage.status}${ms}${detail}`);
+    }
+    divider();
+    if (result.pass) {
+      success(`Gate passed for station ${result.station}`);
+    } else {
+      error(`Gate failed for station ${result.station}`);
+    }
+    return finishCommand(result.pass ? 0 : 1);
+  } catch (err) {
+    error(err.message);
+    return finishCommand(1);
+  }
+}
+function handleLineList(argv) {
+  const repoPath = path93.resolve(argv.repo);
+  const installed = new Set(listInstalledLineIds(repoPath));
+  for (const id of listBundledLineIds()) {
+    console.log(`${id}	(bundled)`);
+  }
+  for (const id of listLocalLineIds(repoPath)) {
+    console.log(`${id}	(local: .har/lines/${id})${installed.has(id) ? " [installed]" : ""}`);
+  }
+}
+function parseStations(value) {
+  if (typeof value !== "string" || value.trim() === "") return void 0;
+  return value.split(",").map((s) => s.trim()).filter(Boolean);
+}
+var lineCommand = {
+  command: "line <subcommand>",
+  describe: "Factory lines: multi-station programs with a cumulative gate that never joins verificationStages",
+  builder: (yargs) => yargs.command(
+    "create [id]",
+    "Scaffold a project-owned line at .har/lines/<id>/ (manifest, program, gate stage, README)",
+    (y) => y.positional("id", { type: "string", describe: "Line id (lowercase slug, e.g. onboarding-line)" }).option("repo", { type: "string", default: ".", describe: "Path to the repository" }).option("title", { type: "string", describe: "Human-readable line title" }).option("description", { type: "string", describe: "One-paragraph description of the program" }).option("stations", {
+      type: "string",
+      describe: "Comma-separated station ids in order (default: S1,S2)"
+    }).option("gate-stage", {
+      type: "boolean",
+      default: true,
+      describe: "Scaffold one registered-but-off-verify gate stage"
+    }).option("opt-in-env", {
+      type: "string",
+      describe: 'Env var that must be "1" for the gate to run (e.g. HAR_FIXTURE_E2E)'
+    }).option("force", { type: "boolean", default: false, describe: "Overwrite an existing line" }),
+    (argv) => handleLineCreate({
+      id: argv.id,
+      repo: argv.repo,
+      title: argv.title,
+      description: argv.description,
+      stations: parseStations(argv.stations),
+      gateStage: argv["gate-stage"],
+      optInEnv: argv["opt-in-env"],
+      force: argv.force
+    })
+  ).command(
+    "add [spec]",
+    "Install a line bundle (local id, path, npm package, or git URL) \u2014 never touches verificationStages",
+    (y) => y.positional("spec", {
+      type: "string",
+      describe: "Line id, path (./line), npm package (@org/pkg), or git URL (github:org/repo)"
+    }).option("repo", { type: "string", default: ".", describe: "Path to the repository" }).option("force", {
+      type: "boolean",
+      default: false,
+      describe: "Overwrite existing line files and stage entries"
+    }),
+    (argv) => handleLineAdd({
+      spec: argv.spec,
+      repo: argv.repo,
+      force: argv.force
+    })
+  ).command(
+    "status [id]",
+    "Show stations, cumulative gate progress from run records, and slots in flight",
+    (y) => y.positional("id", { type: "string", describe: "Line id (default: all installed lines)" }).option("repo", { type: "string", default: ".", describe: "Path to the repository" }).option("json", { type: "boolean", default: false, describe: "Emit structured JSON" }),
+    (argv) => handleLineStatus({
+      id: argv.id,
+      repo: argv.repo,
+      json: argv.json
+    })
+  ).command(
+    "gate [station]",
+    "Run the cumulative gate for a station (does NOT run verify and does not widen it)",
+    (y) => y.positional("station", { type: "string", describe: "Station id (e.g. S1)" }).option("repo", { type: "string", default: ".", describe: "Path to the repository" }).option("line", { type: "string", describe: "Line id when more than one is installed" }).option("agent", { type: "number", describe: "Agent slot to run the stages in" }).option("force", {
+      type: "boolean",
+      default: false,
+      describe: "Run even when the program declares an opt-in env var that is not set"
+    }).option("json", { type: "boolean", default: false, describe: "Emit structured JSON" }),
+    (argv) => handleLineGate({
+      station: argv.station,
+      repo: argv.repo,
+      line: argv.line,
+      agent: argv.agent,
+      force: argv.force,
+      json: argv.json
+    })
+  ).command(
+    "list",
+    "List lines available to this repository (bundled and local)",
+    (y) => y.option("repo", { type: "string", default: ".", describe: "Path to the repository" }),
+    (argv) => handleLineList({ repo: argv.repo })
+  ).demandCommand(1, "Please specify a subcommand: create, add, status, gate, list"),
+  handler: () => {
+  }
+};
+
 // src/cli/commands/plugin.ts
-var path89 = __toESM(require("path"));
+var path95 = __toESM(require("path"));
 
 // src/harness/plugin-create.ts
-var fs75 = __toESM(require("fs"));
-var path88 = __toESM(require("path"));
+var fs78 = __toESM(require("fs"));
+var path94 = __toESM(require("path"));
 init_paths();
 init_schema2();
 var PLUGIN_ID_PATTERN = /^[a-z0-9][a-z0-9._-]*$/;
-function renderSkeleton(templatePath, tokens) {
-  let content = fs75.readFileSync(templatePath, "utf8");
+function renderSkeleton2(templatePath, tokens) {
+  let content = fs78.readFileSync(templatePath, "utf8");
   for (const [token, value] of Object.entries(tokens)) {
     content = content.replace(new RegExp(token, "g"), value);
   }
   return content;
 }
 function createLocalPlugin(repoPath, options) {
-  const resolved = path88.resolve(repoPath);
+  const resolved = path94.resolve(repoPath);
   if (!harnessExists(resolved)) {
     throw new Error('No .har/ harness found. Run "har onboard" first.');
   }
@@ -90726,9 +92175,9 @@ function createLocalPlugin(repoPath, options) {
       `Invalid stage kind "${kind}". Available: ${HarnessStageKindSchema.options.join(", ")}`
     );
   }
-  const pluginDir = path88.join(resolved, LOCAL_PLUGINS_DIR, id);
+  const pluginDir = path94.join(resolved, LOCAL_PLUGINS_DIR, id);
   const pluginDirRel = `${LOCAL_PLUGINS_DIR}/${id}`;
-  if (fs75.existsSync(pluginDir) && !options.force) {
+  if (fs78.existsSync(pluginDir) && !options.force) {
     throw new Error(`Plugin already exists: ${pluginDirRel}/. Use --force to overwrite.`);
   }
   const description = options.description ?? `Custom ${kind} stage (local plugin: ${id})`;
@@ -90770,16 +92219,16 @@ function createLocalPlugin(repoPath, options) {
   });
   const filesWritten = [];
   const write = (rel, content, executable = false) => {
-    const abs = path88.join(pluginDir, rel);
-    fs75.mkdirSync(path88.dirname(abs), { recursive: true });
-    fs75.writeFileSync(abs, content);
-    if (executable) fs75.chmodSync(abs, 493);
+    const abs = path94.join(pluginDir, rel);
+    fs78.mkdirSync(path94.dirname(abs), { recursive: true });
+    fs78.writeFileSync(abs, content);
+    if (executable) fs78.chmodSync(abs, 493);
     filesWritten.push(`${pluginDirRel}/${rel}`);
   };
   write("template.manifest.json", `${JSON.stringify(manifest, null, 2)}
 `);
-  const stageScript = renderSkeleton(
-    path88.join(resolveTemplatesDir(), "plugins", "custom-stage-skeleton.sh"),
+  const stageScript = renderSkeleton2(
+    path94.join(resolveTemplatesDir(), "plugins", "custom-stage-skeleton.sh"),
     {
       __STAGE_ID__: id,
       __STAGE_KIND__: kind,
@@ -90787,8 +92236,8 @@ function createLocalPlugin(repoPath, options) {
     }
   );
   write(`stages/${id}.sh`, stageScript, true);
-  const readme = renderSkeleton(
-    path88.join(resolveTemplatesDir(), "plugins", "local-plugin-skeleton", "README.md"),
+  const readme = renderSkeleton2(
+    path94.join(resolveTemplatesDir(), "plugins", "local-plugin-skeleton", "README.md"),
     { __PLUGIN_ID__: id }
   );
   write("README.md", readme);
@@ -90820,7 +92269,7 @@ async function handlePluginCreate(argv) {
     error('Missing plugin id. Usage: har plugin create <id> [--kind test] [--description "..."]');
     return finishCommand(1);
   }
-  const repoPath = path89.resolve(argv.repo);
+  const repoPath = path95.resolve(argv.repo);
   header("har plugin create");
   info(`Repository: ${repoPath}`);
   info(`Plugin: ${argv.id}`);
@@ -90851,7 +92300,7 @@ async function handlePluginCreate(argv) {
   }
 }
 function handlePluginList(argv) {
-  const repoPath = path89.resolve(argv.repo);
+  const repoPath = path95.resolve(argv.repo);
   for (const id of listPluginIds()) {
     console.log(`${id}	(bundled)`);
   }
@@ -91018,7 +92467,7 @@ var preferencesCommand = {
 };
 
 // src/cli/commands/telemetry.ts
-var path90 = __toESM(require("path"));
+var path96 = __toESM(require("path"));
 init_control_config();
 init_control_sync();
 init_manifest();
@@ -91111,7 +92560,7 @@ async function handleOff() {
   info("Mission Control will not auto-start. Existing usage rows are kept.");
 }
 async function handleWriteEnv(argv) {
-  const repoPath = path90.resolve(argv.repo);
+  const repoPath = path96.resolve(argv.repo);
   const harnessRoot = resolveHarnessRoot(repoPath);
   const session = readSlotRegistry(harnessRoot, argv.agentId);
   const workDir = argv.workDir ?? session?.workDir ?? repoPath;
@@ -91123,7 +92572,7 @@ async function handleWriteEnv(argv) {
     suffix,
     createdAt: session?.createdAt
   });
-  const envFile = argv.envFile ?? path90.join(workDir, `.env.agent.${argv.agentId}`);
+  const envFile = argv.envFile ?? path96.join(workDir, `.env.agent.${argv.agentId}`);
   const attrs = {
     sessionKey,
     agentId: argv.agentId,
@@ -91139,7 +92588,7 @@ async function handleWriteEnv(argv) {
   success(`Wrote session attribution to ${envFile}`);
 }
 function handlePrintEnv(argv) {
-  const repoPath = path90.resolve(argv.repo);
+  const repoPath = path96.resolve(argv.repo);
   const workDir = argv.workDir ?? repoPath;
   const sessionKey = buildSessionKey({
     branch: argv.branch,
@@ -91262,7 +92711,7 @@ var telemetryCommand = {
 // src/cli/index.ts
 async function runCli() {
   ensureDefaultTelemetryPreference();
-  await yargs_default(hideBin(process.argv)).scriptName("har").usage("$0 <command> [options]").command(onboardCommand).command(envCommand).command(agentsCommand).command(controlCommand).command(hqCommand).command(hooksCommand).command(mcpCommand).command(pluginCommand).command(preferencesCommand).command(telemetryCommand).demandCommand(1, "Please specify a command. Try: har onboard   or   har env --help").epilog(HAR_ROOT_EPILOG).strict().help().version(getHarPackageVersion()).parse();
+  await yargs_default(hideBin(process.argv)).scriptName("har").usage("$0 <command> [options]").command(onboardCommand).command(envCommand).command(agentsCommand).command(controlCommand).command(hqCommand).command(hooksCommand).command(mcpCommand).command(pluginCommand).command(lineCommand).command(preferencesCommand).command(telemetryCommand).demandCommand(1, "Please specify a command. Try: har onboard   or   har env --help").epilog(HAR_ROOT_EPILOG).strict().help().version(getHarPackageVersion()).parse();
   await syncDirtyRepos();
 }