@rness/cli 0.13.0 → 0.14.0

package/dist/{chunk-4VTYSPZW.js → chunk-AXTFDXN2.js}

@@ -486,7 +486,7 @@ function parseRepoSpec(spec, org, host) {
 }
 
 // src/version.ts
-var VERSION = "0.13.0";
+var VERSION = "0.14.0";
 
 // src/core/pm.ts
 import { execFile as execFile2 } from "child_process";
@@ -523,6 +523,12 @@ function rnessRunner(pm, version) {
     return "yarn dlx @rness/cli";
   return "npx @rness/cli";
 }
+function localRunner(pm) {
+  if (pm === "pnpm") return "pnpm";
+  if (pm === "yarn") return "yarn";
+  if (pm === "bun") return "bunx";
+  return "npx";
+}
 function rnessCommand(env = process.env) {
   const agent = env["npm_config_user_agent"] ?? "";
   if (agent === "") return "rness";
@@ -3211,6 +3217,54 @@ function reportError(e) {
   return 1;
 }
 
+// src/core/delegate.ts
+import { readFile as readFile6 } from "fs/promises";
+import { join as join10 } from "path";
+var DEFAULT_BIN = "dist/bin/rness.js";
+var PINNED_BIN = `node_modules/@rness/cli/${DEFAULT_BIN}`;
+async function readPinnedCli(rnessDir) {
+  const dir = join10(rnessDir, "node_modules", "@rness", "cli");
+  let pkg;
+  try {
+    pkg = JSON.parse(await readFile6(join10(dir, "package.json"), "utf8"));
+  } catch {
+    return null;
+  }
+  const declared2 = pkg.bin;
+  let bin = DEFAULT_BIN;
+  if (typeof declared2 === "string") bin = declared2;
+  else if (declared2 !== null && typeof declared2 === "object") {
+    const named = declared2["rness"];
+    if (typeof named === "string") bin = named;
+  }
+  return {
+    dir,
+    bin,
+    version: typeof pkg.version === "string" ? pkg.version : null
+  };
+}
+async function pinnedBinPath(rnessDir) {
+  const pinned = await readPinnedCli(rnessDir);
+  if (pinned === null) return null;
+  return join10(pinned.dir, ...pinned.bin.split("/"));
+}
+async function findDelegate(cwd, ownVersion) {
+  let root;
+  let rnessDir;
+  try {
+    const ws = await findWorkspace(cwd);
+    root = ws.root;
+    rnessDir = ws.rnessDir;
+  } catch {
+    return null;
+  }
+  const pinned = await readPinnedCli(rnessDir);
+  if (pinned === null) return null;
+  const { version } = pinned;
+  if (version === null || version === ownVersion) return null;
+  return { entry: join10(pinned.dir, "dist", "index.js"), version, root };
+}
+
 // src/core/block.ts
 import { createHash as createHash2 } from "crypto";
 var BEGIN = "<!-- BEGIN rness -->";
@@ -3275,7 +3329,7 @@ function isCurrentBlock(blockLines, freshHash) {
 }
 
 // src/core/merge.ts
-import { join as join10 } from "path";
+import { join as join11 } from "path";
 function findBlock(lines) {
   const begins = [];
   const ends = [];
@@ -3334,7 +3388,7 @@ function claudeMdAtRoot(existing, block) {
   return merged.ok ? { ...merged, changed: merged.text !== existing } : merged;
 }
 async function ensureClaudeMd(dir) {
-  const file = join10(dir, "CLAUDE.md");
+  const file = join11(dir, "CLAUDE.md");
   if (await isSymlink(file)) return "unchanged";
   const existing = await readOrNull(file);
   if (existing === null) {
@@ -3349,14 +3403,222 @@ async function ensureClaudeMd(dir) {
 }
 
 // src/commands/sync.ts
-import { join as join12 } from "path";
+import { join as join14 } from "path";
 
 // src/core/agent-targets.ts
 import { mkdir as mkdir2 } from "fs/promises";
-import { dirname as dirname4, join as join11 } from "path";
+import { dirname as dirname4, join as join13 } from "path";
+
+// src/core/claude-skills.ts
+var PLUGIN = ".claude/skills/rness";
+var PLUGIN_JSON = `${JSON.stringify(
+  {
+    name: "rness",
+    description: "The rness workspace in Claude Code: /rness:status, /rness:adr, /rness:spec, /rness:plan, /rness:done."
+  },
+  null,
+  2
+)}
+`;
+function statusSkill(rness, pm) {
+  const command = `node "\${CLAUDE_PROJECT_DIR}/${rness}/${PINNED_BIN}" status --cwd "\${CLAUDE_PROJECT_DIR}"`;
+  return `---
+name: status
+description: The status of every decision, specification, plan and other tracked document of the rness workspace, one table per directory. Read-only.
+argument-hint: '[tab]'
+disable-model-invocation: true
+allowed-tools: Bash(${command})
+---
+
+!\`${command}\`
+
+Show the output above to the user as it is: the heading and the tables,
+nothing added, nothing summarised, no other tool. Arguments: \`$ARGUMENTS\`.
+When they name a tab, show only that tab's section. If the output says the
+module cannot be found, say instead that ${rness} is not installed next to
+this repository.
+
+End with this line: _For the view with tabs and scrolling: here, Ctrl+Z,
+then \`npx @rness/cli status\` (q to close), then \`fg\`; or in another
+terminal, from the workspace's \`.rness/\`: \`${localRunner(pm)} rness status\`._
+`;
+}
+var LIFECYCLE2 = [
+  {
+    name: "adr",
+    description: "Record a decision of the rness workspace as an ADR in .rness/adr/ \u2014 a choice expensive to reverse or that creates a lasting constraint. Use when the developer asks for an ADR, or when the conversation reaches such a decision.",
+    hint: "[subject | NNNN]",
+    tab: "adr",
+    body: (rness) => `You record a decision of this workspace as an ADR in \`${rness}/adr/\`. The table
+above lists the existing ADRs, newest first. Arguments: \`$ARGUMENTS\`.
+
+Before writing:
+
+1. If the developer did not ask for an ADR in so many words, propose one in
+   a single line \u2014 its title, and why the choice is hard to reverse \u2014 and
+   wait for a yes.
+2. Read \`${rness}/CONVENTIONS.md\` and \`${rness}/adr/0000-template.md\`: they hold the
+   rules and the sections; this skill is only the procedure.
+3. Arguments naming an ADR (\`NNNN\`): reopen that file. An \`Accepted\` ADR is
+   never edited: offer a new ADR that supersedes it.
+4. Otherwise the subject is the arguments, else the decision just
+   discussed. Context, alternatives or consequences missing from the
+   conversation: ask for them, one question at a time. Never invent them.
+
+Writing:
+
+- \`${rness}/adr/NNNN-<slug>.md\`, NNNN the highest number above plus one.
+- The template's front matter and sections, filled in, its guidance lines
+  removed: \`date\` today, \`status: Proposed\`, \`repo\` the repositories under
+  \`org/\` it affects.
+- An ADR it replaces is named in Context. That one becomes \`Superseded\`,
+  with \`superseded_by:\`, only once the new ADR is \`Accepted\`.
+- The rness hook checks every edit under \`${rness}/\`: fix what it reports.
+
+After writing: give the path and the Decision section, and say the ADR
+stays \`Proposed\` until the developer accepts it. Change a status only when
+the developer says so. Do not commit.
+`
+  },
+  {
+    name: "spec",
+    description: "Write a specification of the rness workspace in .rness/specs/ \u2014 the outcome wanted and its scope, before any plan. Use when the developer asks for a spec, or when agreed work is too large to start without one.",
+    hint: "[subject | NNNN]",
+    tab: "specs",
+    body: (rness) => `You write a specification of this workspace in \`${rness}/specs/\`. The table above
+lists the existing ones, newest first. Arguments: \`$ARGUMENTS\`.
+
+Before writing:
+
+1. If the developer did not ask for a specification in so many words,
+   propose one in a single line and wait for a yes.
+2. Read \`${rness}/CONVENTIONS.md\`, then the most recent specification above: match
+   its front matter, sections and tone.
+3. Arguments naming a specification (\`NNNN\`): reopen it. One that is
+   \`Implemented\`, \`Superseded\` or \`Rejected\` is not edited: offer a new one.
+4. Otherwise the subject is the arguments, else the work just discussed.
+   The problem, what is in and out of scope, the ADRs it rests on: ask what
+   the conversation does not say, one question at a time.
+
+Writing:
+
+- \`${rness}/specs/NNNN-<slug>.md\`, NNNN the highest number above plus one.
+- \`date\` and \`updated\` today, \`status: Draft\`, \`repo\`, and \`adr:\` linking
+  the decisions it rests on \u2014 or the rationale in the body when none does.
+- No specification yet to follow: Summary, Scope, Out of scope,
+  Alternatives considered, To verify, Tests.
+- What was checked in this session (a document read, a command run) is
+  written as verified, with the date; everything else as a proposal or an
+  open question.
+- The rness hook checks every edit under \`${rness}/\`: fix what it reports.
+
+After writing: give the path and the summary. It stays \`Draft\` until the
+developer moves it (\`Proposed\` for review, \`Approved\` to plan it). No plan
+here: \`/rness:plan NNNN\` once approved. Do not commit.
+`
+  },
+  {
+    name: "plan",
+    description: "Turn an approved specification of the rness workspace into a plan in .rness/plans/ \u2014 ordered tasks, each with the command that proves it done. Use when the developer asks for a plan, or when a specification has just been approved.",
+    hint: "<spec NNNN>",
+    tab: "plans",
+    body: (rness) => `You turn a specification into a plan in \`${rness}/plans/\`. The table above lists
+the existing plans, newest first. Arguments, the specification:
+\`$ARGUMENTS\`.
+
+Before writing:
+
+1. If the developer did not ask for a plan in so many words, propose one in
+   a single line and wait for a yes.
+2. No specification named: ask which. Read it, \`${rness}/CONVENTIONS.md\`, and the
+   most recent plan above: match its front matter and sections.
+3. A specification that is not \`Approved\`: say so, and plan it only if the
+   developer confirms. A plan of it that is neither \`Completed\` nor
+   \`Abandoned\`: reopen it rather than write a second.
+4. Read the code and the repositories the specification touches: every
+   task names real files and real commands.
+
+Writing:
+
+- \`${rness}/plans/NNNN-<slug>.md\`, NNNN the highest plan number above plus one \u2014
+  not the specification's.
+- \`date\` and \`updated\` today, \`status: Draft\`, \`repo\`, \`spec:\` linking the
+  specification.
+- Tasks in order, as checkboxes. Each gives the files, what changes, and
+  the command that proves it (a test, a build, a run). The last tasks:
+  the documentation the work makes inaccurate, then the release when the
+  repository has one.
+- Where the plan decides something the specification leaves open, a
+  section says so.
+- The rness hook checks every edit under \`${rness}/\`: fix what it reports.
+
+After writing: give the path and the list of tasks. It becomes \`Ready\` when
+the developer agrees. Do not commit.
+`
+  },
+  {
+    name: "done",
+    description: "Close a piece of work of the rness workspace \u2014 check each task of its plan on evidence, then move the plan and its specification to their final status and correct the documents the work made inaccurate. Use when the developer says the work is done, or when the last task of a plan passes.",
+    hint: "[plan NNNN]",
+    tab: "plans",
+    body: (rness) => `You close a piece of work: its plan in \`${rness}/plans/\`, its specification, and
+what they made inaccurate. The table above lists the plans, newest first.
+Arguments: \`$ARGUMENTS\`.
+
+1. The plan: the one named, else the one \`In progress\`. Several or none:
+   ask.
+2. If the developer did not ask to close it in so many words, propose it in
+   a single line and wait for a yes.
+3. Read the plan, its specification and \`${rness}/CONVENTIONS.md\`.
+4. Evidence first. For each task, what shows it done: a test, a build, a
+   command's output in this session. A task without evidence: run its
+   check now, or report it. Never mark a task done on belief.
+5. All tasks proven:
+   - the plan: \`status: Completed\`, \`updated\` today, the checkboxes of the
+     proven tasks ticked, and a section \`Verification (YYYY-MM-DD)\` \u2014 what
+     ran, what it showed, what could not run and why;
+   - the specification: \`Implemented\` once every plan of it is
+     \`Completed\`; \`updated\` today;
+   - the smallest set of documents the work makes inaccurate: \`${rness}/docs/\`,
+     the READMEs of the repositories it changed.
+6. A task not proven: the plan stays \`In progress\` \u2014 or \`Blocked\`, the
+   blocker written in it. Say what remains.
+7. The rness hook checks every edit under \`${rness}/\`: fix what it reports.
+
+After: list the files changed and the statuses moved. Do not commit.
+`
+  }
+];
+function lifecycleSkill(rness, s) {
+  const command = `node "\${CLAUDE_PROJECT_DIR}/${rness}/${PINNED_BIN}" status ${s.tab} --cwd "\${CLAUDE_PROJECT_DIR}"`;
+  return `---
+name: ${s.name}
+description: ${s.description}
+argument-hint: '${s.hint}'
+allowed-tools: Bash(${command})
+---
+
+!\`${command}\`
+
+${s.body(rness)}`;
+}
+function pluginFiles(rness, at, ctx) {
+  return [
+    { file: `${PLUGIN}/.claude-plugin/plugin.json`, at, content: PLUGIN_JSON },
+    {
+      file: `${PLUGIN}/skills/status/SKILL.md`,
+      at,
+      content: statusSkill(rness, ctx.packageManager)
+    },
+    ...LIFECYCLE2.map((s) => ({
+      file: `${PLUGIN}/skills/${s.name}/SKILL.md`,
+      at,
+      content: lifecycleSkill(rness, s)
+    }))
+  ];
+}
 
 // src/core/agents.ts
-var PINNED_BIN = "node_modules/@rness/cli/dist/bin/rness.js";
 function hookLine(rness, event) {
   const run3 = `f="$CLAUDE_PROJECT_DIR/${rness}/${PINNED_BIN}"; if [ -f "$f" ]; then node "$f" hook ${event};`;
   if (event !== "session-start") return `${run3} fi`;
@@ -3409,53 +3671,11 @@ function hooks(rness) {
     }
   ];
 }
-var PLUGIN = ".claude/skills/rness";
-var PLUGIN_JSON = `${JSON.stringify(
-  {
-    name: "rness",
-    description: "The rness workspace in Claude Code: /rness:status."
-  },
-  null,
-  2
-)}
-`;
-function statusSkill(rness) {
-  const command = `node "\${CLAUDE_PROJECT_DIR}/${rness}/${PINNED_BIN}" status --cwd "\${CLAUDE_PROJECT_DIR}"`;
-  return `---
-name: status
-description: The status of every decision, specification, plan and other tracked document of the rness workspace, one table per directory. Read-only.
-argument-hint: '[tab]'
-disable-model-invocation: true
-allowed-tools: Bash(${command})
----
-
-!\`${command}\`
-
-Show the output above to the user as it is: the heading and the tables,
-nothing added, nothing summarised, no other tool. Arguments: \`$ARGUMENTS\`.
-When they name a tab, show only that tab's section. If the output says the
-module cannot be found, say instead that ${rness} is not installed next to
-this repository.
-
-End with this line: _For the view with tabs and scrolling: Ctrl+Z, then
-\`npx @rness/cli status\` (q to close), then \`fg\`._
-`;
-}
-function plugin(rness, at) {
-  return [
-    { file: `${PLUGIN}/.claude-plugin/plugin.json`, at, content: PLUGIN_JSON },
-    {
-      file: `${PLUGIN}/skills/status/SKILL.md`,
-      at,
-      content: statusSkill(rness)
-    }
-  ];
-}
 var TARGETS = {
   claude: {
     name: "claude",
     label: "Claude Code",
-    files: [
+    files: (ctx) => [
       {
         file: ".claude/settings.json",
         at: "clones",
@@ -3491,7 +3711,7 @@ var TARGETS = {
           }
         ]
       },
-      ...plugin("../../.rness", "clones"),
+      ...pluginFiles("../../.rness", "clones", ctx),
       // A session opened at the workspace root reads this file, one opened
       // in a clone does not (spec 0011 §1): the hooks only, `.rness` inside.
       {
@@ -3499,7 +3719,7 @@ var TARGETS = {
         at: "root",
         guarantees: hooks(".rness")
       },
-      ...plugin(".rness", "root")
+      ...pluginFiles(".rness", "root", ctx)
     ]
   }
 };
@@ -3613,30 +3833,288 @@ function describeGuarantee(g) {
   return `${g.path.join(".")} lacks ${what}`;
 }
 
+// src/core/pinned.ts
+import { execFile as execFile3 } from "child_process";
+import { readFile as readFile7 } from "fs/promises";
+import { basename as basename3, join as join12 } from "path";
+import { promisify as promisify3 } from "util";
+var execFileP3 = promisify3(execFile3);
+var PACKAGE = "@rness/cli";
+var EXACT_VERSION = /^\d+\.\d+\.\d+(-[0-9A-Za-z.-]+)?$/;
+function compareVersions(a, b) {
+  const split = (v) => {
+    const dash = v.indexOf("-");
+    const core = dash === -1 ? v : v.slice(0, dash);
+    return [core.split(".").map(Number), dash === -1 ? null : v.slice(dash + 1)];
+  };
+  const [coreA, preA] = split(a);
+  const [coreB, preB] = split(b);
+  for (let i = 0; i < 3; i += 1) {
+    const diff = (coreA[i] ?? 0) - (coreB[i] ?? 0);
+    if (diff !== 0) return diff;
+  }
+  if (preA === preB) return 0;
+  if (preA === null) return 1;
+  if (preB === null) return -1;
+  return preA.localeCompare(preB, "en", { numeric: true });
+}
+async function readPackageJson(rnessDir) {
+  try {
+    const parsed = JSON.parse(
+      await readFile7(join12(rnessDir, "package.json"), "utf8")
+    );
+    return parsed !== null && typeof parsed === "object" ? parsed : null;
+  } catch {
+    return null;
+  }
+}
+async function readPin(rnessDir) {
+  const pkg = await readPackageJson(rnessDir);
+  if (pkg === null) return null;
+  for (const field of ["devDependencies", "dependencies"]) {
+    const deps = pkg[field];
+    if (deps === null || typeof deps !== "object") continue;
+    const spec = deps[PACKAGE];
+    if (typeof spec === "string") return { spec, field };
+  }
+  return null;
+}
+async function writePin(rnessDir, from, to) {
+  const file = join12(rnessDir, "package.json");
+  const text = await readFile7(file, "utf8");
+  const entry = new RegExp(
+    `("${PACKAGE}"\\s*:\\s*")${from.replace(/[.*+?^${}()|[\]\\]/g, "\\$&")}(")`
+  );
+  if (!entry.test(text))
+    throw new Error(`"${PACKAGE}": "${from}" not found in package.json`);
+  await writeFileAtomic(file, text.replace(entry, `$1${to}$2`));
+}
+var LOCKFILES = [
+  ["pnpm-lock.yaml", "pnpm"],
+  ["yarn.lock", "yarn"],
+  ["bun.lock", "bun"],
+  ["bun.lockb", "bun"],
+  ["package-lock.json", "npm"]
+];
+async function workspacePackageManager(rnessDir) {
+  const declared2 = (await readPackageJson(rnessDir))?.["packageManager"];
+  if (typeof declared2 === "string") {
+    const name = declared2.split("@")[0] ?? "";
+    if (isPackageManager(name)) return name;
+  }
+  for (const [lockfile, pm] of LOCKFILES)
+    if (await exists(join12(rnessDir, lockfile))) return pm;
+  return "npm";
+}
+async function hasLockfile(rnessDir, pm) {
+  for (const [lockfile, owner] of LOCKFILES)
+    if (owner === pm && await exists(join12(rnessDir, lockfile))) return true;
+  return false;
+}
+async function pinDrift(rnessDir) {
+  const pin = await readPin(rnessDir);
+  if (pin === null || !EXACT_VERSION.test(pin.spec)) return null;
+  const installed = (await readPinnedCli(rnessDir))?.version ?? null;
+  return installed === pin.spec ? null : { pin: pin.spec, installed };
+}
+async function driftWarning(cwd) {
+  let root;
+  let rnessDir;
+  try {
+    const ws = await findWorkspace(cwd);
+    root = ws.root;
+    rnessDir = ws.rnessDir;
+  } catch {
+    return null;
+  }
+  const drift = await pinDrift(rnessDir);
+  if (drift === null) return null;
+  const pm = await workspacePackageManager(rnessDir);
+  return warn(
+    `${basename3(root)}/.rness pins @rness/cli ${drift.pin} but ${drift.installed ?? "nothing"} is installed \u2014 run ${pm} install in .rness`
+  );
+}
+var CHILD_DEADLINE_MS = 12e4;
+function childEnv(env = process.env) {
+  return {
+    ...env,
+    GIT_SSH_COMMAND: `${env["GIT_SSH_COMMAND"] ?? "ssh"} -o BatchMode=yes`,
+    GIT_TERMINAL_PROMPT: "0"
+  };
+}
+async function ensureInstalled(rnessDir, opts = {}) {
+  const drift = await pinDrift(rnessDir);
+  if (drift === null) return null;
+  const env = opts.env ?? process.env;
+  if (env["RNESS_NO_INSTALL"] === "1")
+    return { installed: false, pin: drift.pin, reason: "RNESS_NO_INSTALL=1" };
+  const pm = await workspacePackageManager(rnessDir);
+  const frozen = await hasLockfile(rnessDir, pm);
+  const install = opts.install ?? installDependencies;
+  opts.announce?.(drift.pin);
+  try {
+    await install(pm, rnessDir, { frozen });
+    return { installed: true, pin: drift.pin, reason: null };
+  } catch (e) {
+    return {
+      installed: false,
+      pin: drift.pin,
+      reason: e instanceof Error ? e.message : String(e)
+    };
+  }
+}
+async function runPinnedSync(root) {
+  const installed = await readPinnedCli(join12(root, ".rness"));
+  if (installed === null) return null;
+  const pinned = join12(installed.dir, ...installed.bin.split("/"));
+  if (!await exists(pinned))
+    return {
+      code: 1,
+      stdout: "",
+      stderr: `@rness/cli in .rness is not installed correctly (missing ${installed.bin}); reinstall in .rness/
+`
+    };
+  try {
+    const { stdout, stderr } = await execFileP3(
+      process.execPath,
+      [pinned, "sync", "--yes"],
+      {
+        cwd: root,
+        maxBuffer: 16 * 1024 * 1024,
+        env: childEnv(),
+        timeout: CHILD_DEADLINE_MS,
+        killSignal: "SIGKILL"
+      }
+    );
+    return { code: 0, stdout, stderr };
+  } catch (e) {
+    const err = e;
+    const deadline = err.killed === true ? `rness sync in .rness did not finish within ${CHILD_DEADLINE_MS / 1e3}s and was stopped
+` : "";
+    return {
+      code: typeof err.code === "number" ? err.code : 1,
+      stdout: err.stdout ?? "",
+      stderr: `${err.stderr ?? ""}${deadline}`
+    };
+  }
+}
+var SYNC_VERBS = ["updated", "unchanged", "stale"];
+function counted(noun, counts) {
+  const total = [...counts.values()].reduce((a, b) => a + b, 0);
+  const detail = SYNC_VERBS.filter((verb) => counts.has(verb)).map((verb) => `${counts.get(verb) ?? 0} ${verb}`).join(", ");
+  return `${total} ${noun}${total === 1 ? "" : "s"}${detail === "" ? "" : `: ${detail}`}`;
+}
+function summariseSync(stdout) {
+  const blocks = /* @__PURE__ */ new Map();
+  const agentFiles = /* @__PURE__ */ new Map();
+  const others = [];
+  for (const line3 of stdout.split("\n")) {
+    if (line3.trim() === "") continue;
+    const m = /^(updated|unchanged|stale)\s+(\S+)/.exec(line3);
+    if (m === null) {
+      others.push(line3);
+      continue;
+    }
+    const [, verb = "", path = ""] = m;
+    const counts = /(^|\/)(AGENTS|CLAUDE)\.md$/.test(path) ? blocks : agentFiles;
+    counts.set(verb, (counts.get(verb) ?? 0) + 1);
+  }
+  return {
+    summary: [
+      counted("block", blocks),
+      ...agentFiles.size > 0 ? [counted("agent file", agentFiles)] : []
+    ].join("; "),
+    others
+  };
+}
+function syncOutcome(result, opts = {}) {
+  const { others } = summariseSync(result.stdout);
+  const wrote = /^(updated|unchanged|stale)\s/m.test(result.stdout);
+  const stderr = result.stderr.split("\n").map((l) => l.trimEnd()).filter((l) => l.trim() !== "");
+  const hints = wrote ? [...others, ...stderr] : others;
+  if (opts.sshWorks === true && /Permission denied \(publickey\)/.test(result.stderr))
+    hints.push(...agentHintLines());
+  return {
+    code: wrote ? 0 : result.code,
+    hints,
+    errors: wrote ? [] : stderr
+  };
+}
+async function syncPinned(root, shown, fallback) {
+  const rnessDir = join12(root, ".rness");
+  const installed = await readPinnedCli(rnessDir);
+  if (installed === null) {
+    if (fallback !== void 0) return fallback();
+    process.stderr.write(
+      `@rness/cli is not installed in ${shown}/.rness; install in .rness/, then ${rnessCommand()} sync
+`
+    );
+    return 1;
+  }
+  const pinned = join12(installed.dir, ...installed.bin.split("/"));
+  if (!await exists(pinned)) {
+    process.stderr.write(
+      `@rness/cli in ${shown}/.rness is not installed correctly (missing ${installed.bin}); reinstall in .rness/
+`
+    );
+    return 1;
+  }
+  try {
+    const { stdout, stderr } = await execFileP3(
+      process.execPath,
+      [pinned, "sync", "--yes"],
+      {
+        cwd: root,
+        maxBuffer: 16 * 1024 * 1024,
+        env: childEnv(),
+        timeout: CHILD_DEADLINE_MS,
+        killSignal: "SIGKILL"
+      }
+    );
+    process.stdout.write(stdout);
+    if (stderr !== "") process.stderr.write(stderr);
+    return 0;
+  } catch (e) {
+    const err = e;
+    if (err.stdout !== void 0 && err.stdout !== "")
+      process.stdout.write(err.stdout);
+    if (err.stderr !== void 0 && err.stderr !== "")
+      process.stderr.write(err.stderr);
+    return typeof err.code === "number" ? err.code : 1;
+  }
+}
+
 // src/core/agent-targets.ts
 function wholeDiff(existing, content) {
   if (existing === content) return null;
   return existing === null ? "missing" : "differs from what rness writes";
 }
+async function contextOf(root) {
+  return {
+    packageManager: await workspacePackageManager(join13(root, ".rness"))
+  };
+}
+var PATHS_ONLY = { packageManager: "npm" };
 async function filesOf(root, manifest, targets) {
   const files = [];
-  if (!await exists(join11(root, "org"))) return files;
+  if (!await exists(join13(root, "org"))) return files;
+  const ctx = await contextOf(root);
   for (const target2 of targets)
-    for (const owned of target2.files)
+    for (const owned of target2.files(ctx))
       if (owned.at === "root")
         files.push({
           ...owned,
-          file: join11(root, ...owned.file.split("/")),
+          file: join13(root, ...owned.file.split("/")),
           label: owned.file
         });
   for (const repo of Object.keys(manifest.repos)) {
-    if (!await exists(join11(root, "org", repo))) continue;
+    if (!await exists(join13(root, "org", repo))) continue;
     for (const target2 of targets)
-      for (const owned of target2.files)
+      for (const owned of target2.files(ctx))
         if (owned.at === "clones")
           files.push({
             ...owned,
-            file: join11(root, "org", repo, ...owned.file.split("/")),
+            file: join13(root, "org", repo, ...owned.file.split("/")),
             label: `org/${repo}/${owned.file}`
           });
   }
@@ -3652,7 +4130,7 @@ function writtenFiles(manifest) {
   return [
     ...BLOCK_FILES,
     ...declared(manifest).flatMap(
-      (t) => t.files.filter((f) => f.at === "clones").map((f) => f.file)
+      (t) => t.files(PATHS_ONLY).filter((f) => f.at === "clones").map((f) => f.file)
     )
   ];
 }
@@ -3960,7 +4438,7 @@ function targetsOf(manifest, root, only) {
     const segments = entry.path.split("/");
     targets.push({
       scope: name,
-      dir: join12(root, ...segments),
+      dir: join14(root, ...segments),
       depth: segments.length,
       label: `${entry.path}/AGENTS.md`
     });
@@ -4119,7 +4597,7 @@ async function syncCommand(opts, deps = {}) {
     try {
       const notCloned = /* @__PURE__ */ new Set();
       for (const [name, repo] of Object.entries(manifest.repos)) {
-        const dir = join12(ws.root, "org", name);
+        const dir = join14(ws.root, "org", name);
         const label = `org/${name}`;
         if (!await exists(dir)) {
           if (!toClone.has(name)) {
@@ -4171,7 +4649,7 @@ async function syncCommand(opts, deps = {}) {
         lines.push(
           `not in rness.json: ${undeclared.join(", ")} (${rnessCommand()} add <name> declares it)`
         );
-      if (!await exists(join12(ws.root, "org"))) {
+      if (!await exists(join14(ws.root, "org"))) {
         lines.push(["skipped", "blocks (no org/ directory here)"]);
       } else {
         let differences = 0;
@@ -4183,7 +4661,7 @@ async function syncCommand(opts, deps = {}) {
             continue;
           }
           const [agentsLinked, claudeLinked] = await Promise.all(
-            BLOCK_FILES.map((f) => isSymlink(join12(t.dir, f)))
+            BLOCK_FILES.map((f) => isSymlink(join14(t.dir, f)))
           );
           const atRoot = t.scope === null;
           if (!atRoot && (agentsLinked === true || claudeLinked === true)) {
@@ -4206,7 +4684,7 @@ async function syncCommand(opts, deps = {}) {
               `${t.label}: block is ${Math.round(block.bytes / 1024)} KB (over 32 KB)`
             );
           }
-          const agents = agentsLinked === true ? "skipped" : await syncBlockFile(join12(t.dir, "AGENTS.md"), block, check);
+          const agents = agentsLinked === true ? "skipped" : await syncBlockFile(join14(t.dir, "AGENTS.md"), block, check);
           if (typeof agents === "object") {
             problems.push(`${t.label}: ${agents.error}`);
             continue;
@@ -4221,7 +4699,7 @@ async function syncCommand(opts, deps = {}) {
           }
           if (claudeLinked === true) continue;
           const claude = await syncBlockFile(
-            join12(t.dir, "CLAUDE.md"),
+            join14(t.dir, "CLAUDE.md"),
             block,
             check,
             true
@@ -4278,7 +4756,7 @@ async function syncCommand(opts, deps = {}) {
 }
 
 // src/commands/add.ts
-import { basename as basename3, join as join13 } from "path";
+import { basename as basename4, join as join15 } from "path";
 function printDeclared(ui, result, already) {
   for (const name of result.declared) {
     if (already.has(name)) continue;
@@ -4313,7 +4791,7 @@ async function addCommand(spec, opts, deps = {}) {
     }
     if (parsed.name === CONTEXT_REPO) {
       process.stderr.write(
-        `${CONTEXT_REPO} is the workspace context, not a member repository \u2014 it is already cloned at ${basename3(ws.root)}/${CONTEXT_REPO}
+        `${CONTEXT_REPO} is the workspace context, not a member repository \u2014 it is already cloned at ${basename4(ws.root)}/${CONTEXT_REPO}
 `
       );
       return 2;
@@ -4371,7 +4849,7 @@ async function addCommand(spec, opts, deps = {}) {
     }
     parsed = parseRepoSpec(spec, org, host);
     const scopes = (opts.scopes ?? "").split(",").map((s) => s.trim()).filter((s) => s !== "");
-    const dir = join13(ws.root, "org", parsed.name);
+    const dir = join15(ws.root, "org", parsed.name);
     const present = await exists(dir);
     if (interactive) {
       const { confirm, isCancel } = await terminal.prompts();
@@ -4487,66 +4965,19 @@ async function contextCommand(opts) {
       manifest,
       scope
     });
-    process.stdout.write(
-      opts.json ? `${JSON.stringify(ctx, null, 2)}
-` : renderMarkdown(ctx)
-    );
-    return 0;
-  } catch (e) {
-    return reportError(e);
-  }
-}
-
-// src/core/delegate.ts
-import { readFile as readFile6 } from "fs/promises";
-import { join as join14 } from "path";
-var DEFAULT_BIN = "dist/bin/rness.js";
-async function readPinnedCli(rnessDir) {
-  const dir = join14(rnessDir, "node_modules", "@rness", "cli");
-  let pkg;
-  try {
-    pkg = JSON.parse(await readFile6(join14(dir, "package.json"), "utf8"));
-  } catch {
-    return null;
-  }
-  const declared2 = pkg.bin;
-  let bin = DEFAULT_BIN;
-  if (typeof declared2 === "string") bin = declared2;
-  else if (declared2 !== null && typeof declared2 === "object") {
-    const named = declared2["rness"];
-    if (typeof named === "string") bin = named;
-  }
-  return {
-    dir,
-    bin,
-    version: typeof pkg.version === "string" ? pkg.version : null
-  };
-}
-async function pinnedBinPath(rnessDir) {
-  const pinned = await readPinnedCli(rnessDir);
-  if (pinned === null) return null;
-  return join14(pinned.dir, ...pinned.bin.split("/"));
-}
-async function findDelegate(cwd, ownVersion) {
-  let root;
-  let rnessDir;
-  try {
-    const ws = await findWorkspace(cwd);
-    root = ws.root;
-    rnessDir = ws.rnessDir;
-  } catch {
-    return null;
+    process.stdout.write(
+      opts.json ? `${JSON.stringify(ctx, null, 2)}
+` : renderMarkdown(ctx)
+    );
+    return 0;
+  } catch (e) {
+    return reportError(e);
   }
-  const pinned = await readPinnedCli(rnessDir);
-  if (pinned === null) return null;
-  const { version } = pinned;
-  if (version === null || version === ownVersion) return null;
-  return { entry: join14(pinned.dir, "dist", "index.js"), version, root };
 }
 
 // src/core/scaffold.ts
 import { statSync } from "fs";
-import { dirname as dirname5, join as join15 } from "path";
+import { dirname as dirname5, join as join16 } from "path";
 import { fileURLToPath } from "url";
 var SCAFFOLD_FILES = [
   "AGENTS.md",
@@ -4570,9 +5001,9 @@ var SCAFFOLD_FILES = [
 function scaffoldDir() {
   let dir = dirname5(fileURLToPath(import.meta.url));
   for (let i = 0; i < 4; i += 1) {
-    const candidate = join15(dir, "scaffold");
+    const candidate = join16(dir, "scaffold");
     try {
-      if (statSync(join15(candidate, "rness.json")).isFile()) return candidate;
+      if (statSync(join16(candidate, "rness.json")).isFile()) return candidate;
     } catch {
     }
     dir = dirname5(dir);
@@ -4581,15 +5012,15 @@ function scaffoldDir() {
 }
 
 // src/core/scaffold-copy.ts
-import { chmod as chmod2, mkdir as mkdir3, readFile as readFile7, stat as stat2, writeFile as writeFile2 } from "fs/promises";
-import { dirname as dirname6, join as join16 } from "path";
+import { chmod as chmod2, mkdir as mkdir3, readFile as readFile8, stat as stat2, writeFile as writeFile2 } from "fs/promises";
+import { dirname as dirname6, join as join17 } from "path";
 var TOKENISED = /* @__PURE__ */ new Set(["package.json"]);
 async function renderScaffold(source, tokens) {
   const files = [];
   for (const rel of SCAFFOLD_FILES) {
     if (rel === "rness.json") continue;
-    const from = join16(source, ...rel.split("/"));
-    let content = await readFile7(from, "utf8");
+    const from = join17(source, ...rel.split("/"));
+    let content = await readFile8(from, "utf8");
     if (TOKENISED.has(rel)) {
       content = content.replaceAll("__RNESS_VERSION__", tokens.version).replaceAll("__RNESS_PM__", tokens.packageManager);
     }
@@ -4603,7 +5034,7 @@ async function renderScaffold(source, tokens) {
 }
 async function copyScaffold(dest, tokens) {
   for (const file of await renderScaffold(scaffoldDir(), tokens)) {
-    const to = join16(dest, ...file.path.split("/"));
+    const to = join17(dest, ...file.path.split("/"));
     await mkdir3(dirname6(to), { recursive: true });
     await writeFile2(to, file.content, "utf8");
     if (file.executable) await chmod2(to, 493);
@@ -4615,16 +5046,16 @@ import { spawn as spawn3 } from "child_process";
 import { realpath } from "fs/promises";
 
 // src/core/setup-git.ts
-import { execFile as execFile3 } from "child_process";
-import { promisify as promisify3 } from "util";
-var execFileP3 = promisify3(execFile3);
+import { execFile as execFile4 } from "child_process";
+import { promisify as promisify4 } from "util";
+var execFileP4 = promisify4(execFile4);
 var KEY = "credential.https://github.com.helper";
 function helperValue(node, bin) {
   return `!'${node}' '${bin}' git-credential`;
 }
 var isOurs = (value) => /^!'[^']+' '[^']*rness[^']*' git-credential$/.test(value);
 async function config(args) {
-  const { stdout } = await execFileP3("git", ["config", "--global", ...args]);
+  const { stdout } = await execFileP4("git", ["config", "--global", ...args]);
   return stdout;
 }
 async function values() {
@@ -4802,257 +5233,6 @@ async function askProvider(p) {
 import { mkdir as mkdir4, readdir as readdir3, rm as rm5, stat as stat3 } from "fs/promises";
 import { dirname as dirname8, join as join19, relative as relative2 } from "path";
 
-// src/core/pinned.ts
-import { execFile as execFile4 } from "child_process";
-import { readFile as readFile8 } from "fs/promises";
-import { basename as basename4, join as join17 } from "path";
-import { promisify as promisify4 } from "util";
-var execFileP4 = promisify4(execFile4);
-var PACKAGE = "@rness/cli";
-var EXACT_VERSION = /^\d+\.\d+\.\d+(-[0-9A-Za-z.-]+)?$/;
-function compareVersions(a, b) {
-  const split = (v) => {
-    const dash = v.indexOf("-");
-    const core = dash === -1 ? v : v.slice(0, dash);
-    return [core.split(".").map(Number), dash === -1 ? null : v.slice(dash + 1)];
-  };
-  const [coreA, preA] = split(a);
-  const [coreB, preB] = split(b);
-  for (let i = 0; i < 3; i += 1) {
-    const diff = (coreA[i] ?? 0) - (coreB[i] ?? 0);
-    if (diff !== 0) return diff;
-  }
-  if (preA === preB) return 0;
-  if (preA === null) return 1;
-  if (preB === null) return -1;
-  return preA.localeCompare(preB, "en", { numeric: true });
-}
-async function readPackageJson(rnessDir) {
-  try {
-    const parsed = JSON.parse(
-      await readFile8(join17(rnessDir, "package.json"), "utf8")
-    );
-    return parsed !== null && typeof parsed === "object" ? parsed : null;
-  } catch {
-    return null;
-  }
-}
-async function readPin(rnessDir) {
-  const pkg = await readPackageJson(rnessDir);
-  if (pkg === null) return null;
-  for (const field of ["devDependencies", "dependencies"]) {
-    const deps = pkg[field];
-    if (deps === null || typeof deps !== "object") continue;
-    const spec = deps[PACKAGE];
-    if (typeof spec === "string") return { spec, field };
-  }
-  return null;
-}
-async function writePin(rnessDir, from, to) {
-  const file = join17(rnessDir, "package.json");
-  const text = await readFile8(file, "utf8");
-  const entry = new RegExp(
-    `("${PACKAGE}"\\s*:\\s*")${from.replace(/[.*+?^${}()|[\]\\]/g, "\\$&")}(")`
-  );
-  if (!entry.test(text))
-    throw new Error(`"${PACKAGE}": "${from}" not found in package.json`);
-  await writeFileAtomic(file, text.replace(entry, `$1${to}$2`));
-}
-var LOCKFILES = [
-  ["pnpm-lock.yaml", "pnpm"],
-  ["yarn.lock", "yarn"],
-  ["bun.lock", "bun"],
-  ["bun.lockb", "bun"],
-  ["package-lock.json", "npm"]
-];
-async function workspacePackageManager(rnessDir) {
-  const declared2 = (await readPackageJson(rnessDir))?.["packageManager"];
-  if (typeof declared2 === "string") {
-    const name = declared2.split("@")[0] ?? "";
-    if (isPackageManager(name)) return name;
-  }
-  for (const [lockfile, pm] of LOCKFILES)
-    if (await exists(join17(rnessDir, lockfile))) return pm;
-  return "npm";
-}
-async function hasLockfile(rnessDir, pm) {
-  for (const [lockfile, owner] of LOCKFILES)
-    if (owner === pm && await exists(join17(rnessDir, lockfile))) return true;
-  return false;
-}
-async function pinDrift(rnessDir) {
-  const pin = await readPin(rnessDir);
-  if (pin === null || !EXACT_VERSION.test(pin.spec)) return null;
-  const installed = (await readPinnedCli(rnessDir))?.version ?? null;
-  return installed === pin.spec ? null : { pin: pin.spec, installed };
-}
-async function driftWarning(cwd) {
-  let root;
-  let rnessDir;
-  try {
-    const ws = await findWorkspace(cwd);
-    root = ws.root;
-    rnessDir = ws.rnessDir;
-  } catch {
-    return null;
-  }
-  const drift = await pinDrift(rnessDir);
-  if (drift === null) return null;
-  const pm = await workspacePackageManager(rnessDir);
-  return warn(
-    `${basename4(root)}/.rness pins @rness/cli ${drift.pin} but ${drift.installed ?? "nothing"} is installed \u2014 run ${pm} install in .rness`
-  );
-}
-var CHILD_DEADLINE_MS = 12e4;
-function childEnv(env = process.env) {
-  return {
-    ...env,
-    GIT_SSH_COMMAND: `${env["GIT_SSH_COMMAND"] ?? "ssh"} -o BatchMode=yes`,
-    GIT_TERMINAL_PROMPT: "0"
-  };
-}
-async function ensureInstalled(rnessDir, opts = {}) {
-  const drift = await pinDrift(rnessDir);
-  if (drift === null) return null;
-  const env = opts.env ?? process.env;
-  if (env["RNESS_NO_INSTALL"] === "1")
-    return { installed: false, pin: drift.pin, reason: "RNESS_NO_INSTALL=1" };
-  const pm = await workspacePackageManager(rnessDir);
-  const frozen = await hasLockfile(rnessDir, pm);
-  const install = opts.install ?? installDependencies;
-  opts.announce?.(drift.pin);
-  try {
-    await install(pm, rnessDir, { frozen });
-    return { installed: true, pin: drift.pin, reason: null };
-  } catch (e) {
-    return {
-      installed: false,
-      pin: drift.pin,
-      reason: e instanceof Error ? e.message : String(e)
-    };
-  }
-}
-async function runPinnedSync(root) {
-  const installed = await readPinnedCli(join17(root, ".rness"));
-  if (installed === null) return null;
-  const pinned = join17(installed.dir, ...installed.bin.split("/"));
-  if (!await exists(pinned))
-    return {
-      code: 1,
-      stdout: "",
-      stderr: `@rness/cli in .rness is not installed correctly (missing ${installed.bin}); reinstall in .rness/
-`
-    };
-  try {
-    const { stdout, stderr } = await execFileP4(
-      process.execPath,
-      [pinned, "sync", "--yes"],
-      {
-        cwd: root,
-        maxBuffer: 16 * 1024 * 1024,
-        env: childEnv(),
-        timeout: CHILD_DEADLINE_MS,
-        killSignal: "SIGKILL"
-      }
-    );
-    return { code: 0, stdout, stderr };
-  } catch (e) {
-    const err = e;
-    const deadline = err.killed === true ? `rness sync in .rness did not finish within ${CHILD_DEADLINE_MS / 1e3}s and was stopped
-` : "";
-    return {
-      code: typeof err.code === "number" ? err.code : 1,
-      stdout: err.stdout ?? "",
-      stderr: `${err.stderr ?? ""}${deadline}`
-    };
-  }
-}
-var SYNC_VERBS = ["updated", "unchanged", "stale"];
-function counted(noun, counts) {
-  const total = [...counts.values()].reduce((a, b) => a + b, 0);
-  const detail = SYNC_VERBS.filter((verb) => counts.has(verb)).map((verb) => `${counts.get(verb) ?? 0} ${verb}`).join(", ");
-  return `${total} ${noun}${total === 1 ? "" : "s"}${detail === "" ? "" : `: ${detail}`}`;
-}
-function summariseSync(stdout) {
-  const blocks = /* @__PURE__ */ new Map();
-  const agentFiles = /* @__PURE__ */ new Map();
-  const others = [];
-  for (const line3 of stdout.split("\n")) {
-    if (line3.trim() === "") continue;
-    const m = /^(updated|unchanged|stale)\s+(\S+)/.exec(line3);
-    if (m === null) {
-      others.push(line3);
-      continue;
-    }
-    const [, verb = "", path = ""] = m;
-    const counts = /(^|\/)(AGENTS|CLAUDE)\.md$/.test(path) ? blocks : agentFiles;
-    counts.set(verb, (counts.get(verb) ?? 0) + 1);
-  }
-  return {
-    summary: [
-      counted("block", blocks),
-      ...agentFiles.size > 0 ? [counted("agent file", agentFiles)] : []
-    ].join("; "),
-    others
-  };
-}
-function syncOutcome(result, opts = {}) {
-  const { others } = summariseSync(result.stdout);
-  const wrote = /^(updated|unchanged|stale)\s/m.test(result.stdout);
-  const stderr = result.stderr.split("\n").map((l) => l.trimEnd()).filter((l) => l.trim() !== "");
-  const hints = wrote ? [...others, ...stderr] : others;
-  if (opts.sshWorks === true && /Permission denied \(publickey\)/.test(result.stderr))
-    hints.push(...agentHintLines());
-  return {
-    code: wrote ? 0 : result.code,
-    hints,
-    errors: wrote ? [] : stderr
-  };
-}
-async function syncPinned(root, shown, fallback) {
-  const rnessDir = join17(root, ".rness");
-  const installed = await readPinnedCli(rnessDir);
-  if (installed === null) {
-    if (fallback !== void 0) return fallback();
-    process.stderr.write(
-      `@rness/cli is not installed in ${shown}/.rness; install in .rness/, then ${rnessCommand()} sync
-`
-    );
-    return 1;
-  }
-  const pinned = join17(installed.dir, ...installed.bin.split("/"));
-  if (!await exists(pinned)) {
-    process.stderr.write(
-      `@rness/cli in ${shown}/.rness is not installed correctly (missing ${installed.bin}); reinstall in .rness/
-`
-    );
-    return 1;
-  }
-  try {
-    const { stdout, stderr } = await execFileP4(
-      process.execPath,
-      [pinned, "sync", "--yes"],
-      {
-        cwd: root,
-        maxBuffer: 16 * 1024 * 1024,
-        env: childEnv(),
-        timeout: CHILD_DEADLINE_MS,
-        killSignal: "SIGKILL"
-      }
-    );
-    process.stdout.write(stdout);
-    if (stderr !== "") process.stderr.write(stderr);
-    return 0;
-  } catch (e) {
-    const err = e;
-    if (err.stdout !== void 0 && err.stdout !== "")
-      process.stdout.write(err.stdout);
-    if (err.stderr !== void 0 && err.stderr !== "")
-      process.stderr.write(err.stderr);
-    return typeof err.code === "number" ? err.code : 1;
-  }
-}
-
 // src/core/scaffold-git.ts
 import { execFile as execFile5 } from "child_process";
 import { mkdtemp, realpath as realpath2, rm as rm4, writeFile as writeFile3 } from "fs/promises";
@@ -8353,6 +8533,7 @@ export {
   defaultTransport,
   findWorkspace,
   reportError,
+  findDelegate,
   BEGIN,
   END,
   BLOCK_SIZE_WARNING,
@@ -8367,7 +8548,6 @@ export {
   addCommand,
   renderMarkdown,
   contextCommand,
-  findDelegate,
   SCAFFOLD_FILES,
   scaffoldDir,
   copyScaffold,
@@ -8381,4 +8561,4 @@ export {
   OWN_COMMANDS,
   catchUp
 };
-//# sourceMappingURL=chunk-4VTYSPZW.js.map
+//# sourceMappingURL=chunk-AXTFDXN2.js.map