@rness/cli 0.4.0 → 0.5.0

package/dist/chunk-IW5IHSPC.js

@@ -1,1740 +0,0 @@
-// src/core/fs.ts
-import {
-  access,
-  lstat,
-  readFile,
-  rename,
-  rm,
-  writeFile
-} from "fs/promises";
-import { basename, dirname, join } from "path";
-async function exists(p) {
-  try {
-    await access(p);
-    return true;
-  } catch {
-    return false;
-  }
-}
-async function isSymlink(p) {
-  try {
-    return (await lstat(p)).isSymbolicLink();
-  } catch (e) {
-    if (e.code === "ENOENT") return false;
-    throw e;
-  }
-}
-async function readOrNull(p) {
-  try {
-    return await readFile(p, "utf8");
-  } catch (e) {
-    if (e.code === "ENOENT") return null;
-    throw e;
-  }
-}
-var sequence = 0;
-async function writeFileAtomic(p, text) {
-  sequence += 1;
-  const tmp = join(dirname(p), `.${basename(p)}.${process.pid}.${sequence}.tmp`);
-  await writeFile(tmp, text, "utf8");
-  try {
-    await rename(tmp, p);
-  } catch (e) {
-    await rm(tmp, { force: true }).catch(() => void 0);
-    throw e;
-  }
-}
-
-// src/core/remote.ts
-import { spawn } from "child_process";
-
-// src/core/git.ts
-import { execFile } from "child_process";
-import { dirname as dirname2, resolve } from "path";
-import { promisify } from "util";
-var execFileP = promisify(execFile);
-async function git(args, cwd) {
-  try {
-    const { stdout } = await execFileP("git", [...args], {
-      ...cwd === void 0 ? {} : { cwd },
-      env: {
-        ...process.env,
-        GIT_TERMINAL_PROMPT: "0",
-        // Pin the command to `cwd` itself: without a ceiling, git walks up and
-        // a plain directory under `org/` would report — or be pulled into —
-        // whatever repository happens to sit above the workspace root. git
-        // ignores a relative ceiling entry, hence the resolve().
-        ...cwd === void 0 ? {} : { GIT_CEILING_DIRECTORIES: dirname2(resolve(cwd)) }
-      },
-      maxBuffer: 16 * 1024 * 1024
-    });
-    return stdout;
-  } catch (e) {
-    const err = e;
-    const text = err.stderr !== void 0 && err.stderr !== "" ? err.stderr : err.message ?? "unknown error";
-    const first = text.split("\n").find((l) => l.trim() !== "") ?? "unknown error";
-    throw new Error(`git ${args[0] ?? ""} failed: ${first.trim()}`, {
-      cause: e
-    });
-  }
-}
-function positional(value, what) {
-  if (value.startsWith("-"))
-    throw new Error(`refusing suspicious ${what}: ${value}`);
-  return value;
-}
-async function clone(url, dir) {
-  await git([
-    "clone",
-    "--quiet",
-    "--",
-    positional(url, "repository url"),
-    positional(dir, "directory")
-  ]);
-}
-async function isClean(dir, ignore = []) {
-  const pathspec = ignore.map((p) => `:!${p}`);
-  return (await git(
-    [
-      "status",
-      "--porcelain",
-      ...pathspec.length > 0 ? ["--", ...pathspec] : []
-    ],
-    dir
-  )).trim() === "";
-}
-async function pullFastForward(dir) {
-  await git(["pull", "--ff-only", "--quiet"], dir);
-}
-async function originUrl(dir) {
-  try {
-    return (await git(["remote", "get-url", "origin"], dir)).trim();
-  } catch {
-    return null;
-  }
-}
-async function init(dir) {
-  await git(["init", "-q", "-b", "main"], dir);
-}
-async function commitAll(dir, message) {
-  await git(["add", "-A"], dir);
-  await git(["commit", "-q", "-m", message], dir);
-}
-
-// src/core/remote.ts
-var DEFAULT_HOST = "https://github.com/";
-var SSH_HOST = "git@github.com:";
-function repoUrl(host, org, repo) {
-  return `${host}${org}/${repo}.git`;
-}
-var AUTH = [
-  /authentication failed/i,
-  /permission denied/i,
-  /could not read username/i,
-  /terminal prompts disabled/i
-];
-var NOT_FOUND = [
-  /repository .*not found/i,
-  /does not appear to be a git repository/i
-];
-function firstLine(text) {
-  return text.split("\n").find((l) => l.trim() !== "")?.trim() ?? "unknown error";
-}
-function classifyProbe(url, exitCode, stderr) {
-  if (exitCode === 0 || exitCode === 2) return { kind: "found" };
-  if (AUTH.some((r) => r.test(stderr)))
-    return {
-      kind: "error",
-      message: `cannot access ${url}: ${firstLine(stderr)}`
-    };
-  if (NOT_FOUND.some((r) => r.test(stderr))) return { kind: "not-found" };
-  return { kind: "error", message: `cannot reach ${url}: ${firstLine(stderr)}` };
-}
-var STDERR_FLUSH_MS = 200;
-async function probeRemote(url, timeoutMs = 6e4) {
-  positional(url, "repository url");
-  return new Promise((resolve4) => {
-    const child = spawn("git", ["ls-remote", "--exit-code", url, "HEAD"], {
-      stdio: ["ignore", "ignore", "pipe"],
-      env: { ...process.env, GIT_TERMINAL_PROMPT: "0" }
-    });
-    const chunks = [];
-    child.stderr?.setEncoding("utf8");
-    child.stderr?.on("data", (chunk) => chunks.push(chunk));
-    let settled = false;
-    const settle = (probe) => {
-      if (settled) return;
-      settled = true;
-      clearTimeout(timer);
-      child.stderr?.destroy();
-      resolve4(probe);
-    };
-    const timer = setTimeout(() => {
-      child.kill("SIGKILL");
-      settle({
-        kind: "error",
-        message: `cannot reach ${url}: timed out after ${Math.round(timeoutMs / 1e3)}s`
-      });
-    }, timeoutMs);
-    child.on("error", (e) => settle(classifyProbe(url, 1, e.message)));
-    child.on("exit", (code) => {
-      const finish = () => settle(classifyProbe(url, code ?? 1, chunks.join("")));
-      const stderr = child.stderr;
-      if (stderr === null || stderr.readableEnded || stderr.destroyed)
-        return finish();
-      const flush = setTimeout(finish, STDERR_FLUSH_MS);
-      const done = () => {
-        clearTimeout(flush);
-        finish();
-      };
-      stderr.once("end", done);
-      stderr.once("error", done);
-    });
-  });
-}
-
-// src/core/manifest.ts
-import { readFile as readFile2 } from "fs/promises";
-import { basename as basename2, join as join2 } from "path";
-var NAME = /^[a-z0-9][a-z0-9-]*$/;
-var KEYS = ["contract", "org", "repos", "scopes"];
-function fail(message) {
-  throw new Error(`rness.json: ${message}`);
-}
-function isRecord(value) {
-  return value !== null && typeof value === "object" && !Array.isArray(value);
-}
-function checkPath(scope, path) {
-  if (typeof path !== "string" || path === "")
-    fail(`scope "${scope}" needs a string "path"`);
-  if (path.startsWith("/")) fail(`scope "${scope}" path must be relative`);
-  if (path.split("/").includes(".."))
-    fail(`scope "${scope}" path must not contain ".."`);
-  if (path.split("/").some((segment) => segment === ""))
-    fail(`scope "${scope}" path must not contain empty segments`);
-  return path;
-}
-function readOrg(value) {
-  if (value === void 0 || value === null) return null;
-  if (typeof value !== "string" || !NAME.test(value)) {
-    fail(
-      `"org" must be a name matching [a-z0-9-] (got ${JSON.stringify(value)})`
-    );
-  }
-  return value;
-}
-function resolveOrg(manifest, root) {
-  if (manifest.org !== null) return { org: manifest.org, warning: null };
-  const name = basename2(root);
-  return {
-    org: name,
-    warning: `rness.json: no "org"; using the directory name "${name}"`
-  };
-}
-function readRepos(value) {
-  const raw = value ?? {};
-  if (!isRecord(raw)) fail('"repos" must be an object');
-  const repos = {};
-  for (const [name, entry] of Object.entries(raw)) {
-    if (!NAME.test(name)) fail(`repo name "${name}" is not [a-z0-9-]`);
-    if (!isRecord(entry) || typeof entry.url !== "string")
-      fail(`repo "${name}" needs a string "url"`);
-    repos[name] = { url: entry.url };
-  }
-  return repos;
-}
-function readScopes(value) {
-  const raw = value ?? {};
-  if (!isRecord(raw)) fail('"scopes" must be an object');
-  const scopes = {};
-  for (const [name, entry] of Object.entries(raw)) {
-    if (!NAME.test(name)) fail(`scope name "${name}" is not [a-z0-9-]`);
-    if (!isRecord(entry)) fail(`scope "${name}" must be an object`);
-    const path = checkPath(name, entry.path);
-    const ext = entry.extends ?? [];
-    if (!Array.isArray(ext) || !ext.every((t) => typeof t === "string")) {
-      fail(`scope "${name}" extends must be an array of scope names`);
-    }
-    scopes[name] = { path, extends: ext };
-  }
-  for (const [name, entry] of Object.entries(scopes)) {
-    for (const target of entry.extends) {
-      if (!Object.hasOwn(scopes, target))
-        fail(`scope "${name}" extends unknown scope "${target}"`);
-    }
-  }
-  return scopes;
-}
-async function loadManifest(rnessDir) {
-  let raw;
-  try {
-    raw = await readFile2(join2(rnessDir, "rness.json"), "utf8");
-  } catch {
-    fail("not found");
-  }
-  let data;
-  try {
-    data = JSON.parse(raw);
-  } catch (e) {
-    fail(`invalid JSON (${e instanceof Error ? e.message : String(e)})`);
-  }
-  if (!isRecord(data)) fail("must be a JSON object");
-  if (data.contract !== 1)
-    fail(`unsupported contract: ${JSON.stringify(data.contract)} (expected 1)`);
-  for (const key of Object.keys(data)) {
-    if (!KEYS.includes(key)) fail(`unknown key ${JSON.stringify(key)}`);
-  }
-  return {
-    contract: 1,
-    org: readOrg(data.org),
-    repos: readRepos(data.repos),
-    scopes: readScopes(data.scopes)
-  };
-}
-async function writeManifest(rnessDir, manifest) {
-  const repos = Object.entries(manifest.repos).map(
-    ([name, r]) => `    ${JSON.stringify(name)}: { "url": ${JSON.stringify(r.url)} }`
-  );
-  const scopes = Object.entries(manifest.scopes).map(([name, s]) => {
-    const ext = s.extends.length === 0 ? "" : `, "extends": [${s.extends.map((e) => JSON.stringify(e)).join(", ")}]`;
-    return `    ${JSON.stringify(name)}: { "path": ${JSON.stringify(s.path)}${ext} }`;
-  });
-  const lines = ["{", '  "contract": 1,'];
-  if (manifest.org !== null)
-    lines.push(`  "org": ${JSON.stringify(manifest.org)},`);
-  lines.push(
-    '  "repos": {',
-    repos.join(",\n"),
-    "  },",
-    '  "scopes": {',
-    scopes.join(",\n"),
-    "  }",
-    "}"
-  );
-  const text = `${lines.filter((l) => l !== "").join("\n")}
-`;
-  await writeFileAtomic(join2(rnessDir, "rness.json"), text);
-}
-var FULL_URL = /^(https?:\/\/|git@|ssh:\/\/|file:\/\/)/;
-function parseRepoSpec(spec, org, host) {
-  let url;
-  if (FULL_URL.test(spec)) {
-    url = spec;
-  } else {
-    const parts = spec.split("/");
-    if (parts.length === 1) url = repoUrl(host, org, spec);
-    else if (parts.length === 2 && parts[0] !== void 0 && parts[1] !== void 0)
-      url = repoUrl(host, parts[0], parts[1]);
-    else
-      throw new Error(
-        `repository name "${spec}" is not [a-z0-9-] (use <repo>, <owner>/<repo>, or a URL)`
-      );
-  }
-  const last = url.replace(/\/+$/, "").split(/[/:]/).at(-1) ?? "";
-  const name = last.endsWith(".git") ? last.slice(0, -4) : last;
-  if (!NAME.test(name))
-    throw new Error(`repository name "${name}" is not [a-z0-9-]`);
-  return { name, url };
-}
-
-// src/core/repos.ts
-import { glob, readFile as readFile3, rm as rm2 } from "fs/promises";
-import { join as join3, posix, sep } from "path";
-async function addRepository(input) {
-  const { name, url } = parseRepoSpec(input.spec, input.org, input.host);
-  const dir = join3(input.root, "org", name);
-  const repoPath = `org/${name}`;
-  const current = input.manifest.scopes[name];
-  if (current !== void 0 && current.path !== repoPath)
-    throw new Error(`scope "${name}" already points at ${current.path}`);
-  const scopes = {
-    ...input.manifest.scopes,
-    [name]: { path: repoPath, extends: current?.extends ?? [] }
-  };
-  const subs = [];
-  for (const sub of input.scopes) {
-    const clean = sub.replace(/^\/+|\/+$/g, "");
-    const segments = clean.split("/");
-    if (segments.some((s) => s === "" || s === "." || s === ".."))
-      throw new Error(
-        `sub-scope "${clean}" must be a relative path inside the repository`
-      );
-    const base = segments.at(-1) ?? "";
-    const path = `org/${name}/${clean}`;
-    if (!NAME.test(base))
-      throw new Error(`sub-scope "${clean}" needs a [a-z0-9-] last segment`);
-    const existing = scopes[base];
-    if (existing !== void 0 && existing.path !== path)
-      throw new Error(`scope "${base}" already points at ${existing.path}`);
-    scopes[base] = { path, extends: [name] };
-    subs.push({ path, base });
-  }
-  let action;
-  if (await exists(dir)) {
-    const origin = await originUrl(dir);
-    if (origin === null)
-      throw new Error(`org/${name} exists and is not a git clone`);
-    if (origin !== url)
-      throw new Error(`org/${name} is a clone of ${origin}, not ${url}`);
-    action = "adopted";
-  } else {
-    await clone(url, dir);
-    action = "cloned";
-  }
-  const declared = [name];
-  for (const { path, base } of subs) {
-    if (!await exists(join3(input.root, ...path.split("/")))) {
-      if (action === "cloned") await rm2(dir, { recursive: true, force: true });
-      throw new Error(`${path} does not exist`);
-    }
-    declared.push(base);
-  }
-  const manifest = {
-    ...input.manifest,
-    repos: { ...input.manifest.repos, [name]: { url } },
-    scopes
-  };
-  await writeManifest(input.rnessDir, manifest);
-  return { manifest, name, url, action, declared };
-}
-async function workspaceDirs(repoDir) {
-  let patterns = [];
-  try {
-    const pkg = JSON.parse(
-      await readFile3(join3(repoDir, "package.json"), "utf8")
-    );
-    const w = pkg.workspaces;
-    if (Array.isArray(w))
-      patterns = w.filter((p) => typeof p === "string");
-    else if (w !== null && typeof w === "object" && Array.isArray(w.packages)) {
-      patterns = w.packages.filter(
-        (p) => typeof p === "string"
-      );
-    }
-  } catch {
-    return [];
-  }
-  const dirs = /* @__PURE__ */ new Set();
-  for (const pattern of patterns) {
-    for await (const match of glob(pattern, { cwd: repoDir })) {
-      const rel = match.split(sep).join(posix.sep);
-      if (await exists(join3(repoDir, ...rel.split(posix.sep), "package.json")))
-        dirs.add(rel);
-    }
-  }
-  return [...dirs].sort();
-}
-
-// src/core/workspace.ts
-import { dirname as dirname3, join as join4, parse, resolve as resolve2 } from "path";
-async function findWorkspace(startDir) {
-  const start = resolve2(startDir);
-  const { root: fsRoot } = parse(start);
-  const ancestors = [];
-  for (let dir = start; ; dir = dirname3(dir)) {
-    ancestors.push(dir);
-    if (dir === fsRoot) break;
-  }
-  for (const dir of ancestors) {
-    if (await exists(join4(dir, ".rness", "rness.json")))
-      return { root: dir, rnessDir: join4(dir, ".rness") };
-  }
-  for (const dir of ancestors) {
-    if (await exists(join4(dir, "rness.json")))
-      return { root: dirname3(dir), rnessDir: dir };
-  }
-  throw new Error(`no rness workspace found above ${startDir}`);
-}
-
-// src/report.ts
-function reportError(e) {
-  const debug = process.env["RNESS_DEBUG"] === "1";
-  if (debug && e instanceof Error && e.stack) {
-    process.stderr.write(`${e.stack}
-`);
-  } else {
-    const message = e instanceof Error ? e.message : String(e);
-    process.stderr.write(`${message}
-`);
-  }
-  return 1;
-}
-
-// src/core/block.ts
-import { createHash } from "crypto";
-var BEGIN = "<!-- BEGIN rness -->";
-var END = "<!-- END rness -->";
-var BLOCK_SIZE_WARNING = 32 * 1024;
-var HEADER = /^<!-- rness (\S+) · scope: (\S+) · contract: 1 · hash: ([0-9a-f]{12}) · generated: run `rness sync`, never edit inside this block -->$/;
-function toLf(s) {
-  return s.replace(/\r\n?/g, "\n");
-}
-function blockHash(body) {
-  return createHash("sha256").update(toLf(body), "utf8").digest("hex").slice(0, 12);
-}
-function intro(scope, org, depth) {
-  if (scope === null) {
-    return [
-      `This is the root of rness workspace \`${org}\`. Full context lives in \`.rness/\` \u2014`,
-      "read `STATUS.md`, then task-relevant `adr/`, `specs/`, `plans/`; live: `rness context`.",
-      "Every `org/<repo>/` carries its own block with the rules that apply there."
-    ].join("\n");
-  }
-  const rel = `${"../".repeat(depth)}.rness/`;
-  return [
-    `This directory is scope \`${scope}\` of rness workspace \`${org}\`. Full context lives in`,
-    `\`${rel}\` \u2014 read \`STATUS.md\`, then task-relevant \`adr/\`, \`specs/\`, \`plans/\`;`,
-    `live: \`rness context --scope ${scope}\`. If \`.rness/\` is not reachable, this is a`,
-    "standalone clone: the rules below are all you have."
-  ].join("\n");
-}
-function header(version, scope, hash) {
-  return `<!-- rness ${version} \xB7 scope: ${scope ?? "global"} \xB7 contract: 1 \xB7 hash: ${hash} \xB7 generated: run \`rness sync\`, never edit inside this block -->`;
-}
-function renderBlock({
-  scope,
-  org,
-  depth,
-  context,
-  version
-}) {
-  const standards = context.collections.find((c) => c.name === "standards")?.files ?? [];
-  const rules = standards.length === 0 ? ["_No standards apply to this scope yet._"] : standards.map(
-    (f) => `<!-- rness: standards/${f.rel} -->
-${toLf(f.content).trim()}`
-  );
-  const body = `${intro(scope, org, depth)}
-
-## Rules
-${rules.join("\n\n")}`;
-  const hash = blockHash(body);
-  const text = [BEGIN, header(version, scope, hash), body, END].join("\n");
-  return { text, hash, bytes: Buffer.byteLength(text, "utf8") };
-}
-function parseHeader(line) {
-  const m = HEADER.exec(line.trimEnd());
-  if (m === null) return null;
-  return { version: m[1] ?? "", scope: m[2] ?? "", hash: m[3] ?? "" };
-}
-function bodyOf(blockLines) {
-  return blockLines.slice(2, -1).join("\n");
-}
-
-// src/core/frontmatter.ts
-import { parse as parse2 } from "yaml";
-var FRONT_MATTER = /^---\r?\n(?:([\s\S]*?)\r?\n)?---(?:\r?\n|$)/;
-function fail2(message) {
-  throw new Error(`front matter: ${message}`);
-}
-function stripBom(source) {
-  return source.startsWith("\uFEFF") ? source.slice(1) : source;
-}
-function parseFrontMatter(source) {
-  const match = stripBom(source).match(FRONT_MATTER);
-  if (match === null) return null;
-  const block = match[1] ?? "";
-  if (block.trim() === "") return {};
-  let doc;
-  try {
-    doc = parse2(block, { logLevel: "error" });
-  } catch (e) {
-    fail2(
-      e instanceof Error ? (e.message.split("\n")[0] ?? "invalid YAML").replace(/:$/, "") : "invalid YAML"
-    );
-  }
-  if (doc === null || doc === void 0) return {};
-  if (typeof doc !== "object" || Array.isArray(doc))
-    fail2("block must be a mapping of keys to values");
-  return doc;
-}
-function stripFrontMatter(source) {
-  const text = stripBom(source);
-  const match = text.match(FRONT_MATTER);
-  if (match === null) return text;
-  return text.slice(match[0].length).replace(/^(?:[ \t]*\r?\n)+/, "");
-}
-function extractTitle(source) {
-  return stripBom(source).match(/^# (.+)$/m)?.[1]?.trim() ?? null;
-}
-
-// src/core/collect.ts
-import { glob as glob2, readFile as readFile4 } from "fs/promises";
-import { join as join5, posix as posix2, sep as sep2 } from "path";
-function toPosix(rel) {
-  return rel.split(sep2).join(posix2.sep);
-}
-async function collectMarkdown(dir) {
-  const rels = [];
-  for await (const rel of glob2("**/*.md", { cwd: dir })) rels.push(toPosix(rel));
-  const items = await Promise.all(
-    rels.map(async (rel) => {
-      const path = join5(dir, ...rel.split(posix2.sep));
-      const body = await readFile4(path, "utf8");
-      let fields = null;
-      let fieldsError = null;
-      try {
-        fields = parseFrontMatter(body);
-      } catch (e) {
-        fieldsError = e instanceof Error ? e.message : String(e);
-      }
-      return {
-        path,
-        rel,
-        fields,
-        fieldsError,
-        title: extractTitle(body),
-        body,
-        content: stripFrontMatter(body)
-      };
-    })
-  );
-  return items.sort((a, b) => a.rel < b.rel ? -1 : a.rel > b.rel ? 1 : 0);
-}
-
-// src/core/scope.ts
-function isPrefix(prefix, target) {
-  return prefix === target || target.startsWith(`${prefix}/`);
-}
-function resolveScope(manifest, relDir) {
-  let best = null;
-  let bestLen = -1;
-  for (const [name, entry] of Object.entries(manifest.scopes)) {
-    if (isPrefix(entry.path, relDir) && entry.path.length > bestLen) {
-      best = name;
-      bestLen = entry.path.length;
-    }
-  }
-  return best;
-}
-function scopeChain(manifest, scope) {
-  if (scope === null) return [];
-  const chain = [];
-  const seen = /* @__PURE__ */ new Set();
-  const visit = (name, stack) => {
-    if (stack.has(name)) throw new Error(`extends cycle at scope "${name}"`);
-    if (seen.has(name)) return;
-    seen.add(name);
-    chain.push(name);
-    stack.add(name);
-    const entry = Object.hasOwn(manifest.scopes, name) ? manifest.scopes[name] : void 0;
-    for (const target of entry?.extends ?? []) visit(target, stack);
-    stack.delete(name);
-  };
-  visit(scope, /* @__PURE__ */ new Set());
-  return chain;
-}
-
-// src/core/context.ts
-import { join as join6 } from "path";
-var COLLECTIONS = [
-  "standards",
-  "adr",
-  "specs",
-  "plans",
-  "skills"
-];
-function ownerScope(rel) {
-  const slash = rel.indexOf("/");
-  return slash === -1 ? null : rel.slice(0, slash);
-}
-async function assembleCollection(dir, name, chain) {
-  const items = await collectMarkdown(dir);
-  const groups = new Map(chain.map((s) => [s, []]));
-  const rootFiles = [];
-  for (const item of items) {
-    const owner = ownerScope(item.rel);
-    if (owner === null) rootFiles.push({ ...item, scope: null });
-    else groups.get(owner)?.push({ ...item, scope: owner });
-  }
-  const files = [];
-  const push = (f) => {
-    files.push({
-      rel: f.rel,
-      scope: f.scope,
-      title: f.title,
-      body: f.body,
-      content: f.content
-    });
-  };
-  for (const s of chain) for (const f of groups.get(s) ?? []) push(f);
-  for (const f of rootFiles) push(f);
-  return { name, files };
-}
-async function assembleContext({
-  rnessDir,
-  manifest,
-  scope
-}) {
-  const chain = scopeChain(manifest, scope);
-  const collections = await Promise.all(
-    COLLECTIONS.map(
-      (name) => assembleCollection(join6(rnessDir, name), name, chain)
-    )
-  );
-  return { scope, collections };
-}
-
-// src/core/merge.ts
-import { join as join7 } from "path";
-function findBlock(lines) {
-  const begins = [];
-  const ends = [];
-  lines.forEach((line, i) => {
-    const l = line.trimEnd();
-    if (l === BEGIN) begins.push(i);
-    if (l === END) ends.push(i);
-  });
-  if (begins.length === 0 && ends.length === 0) return { kind: "none" };
-  const begin = begins[0];
-  const end = ends[0];
-  if (begins.length !== 1 || ends.length !== 1 || begin === void 0 || end === void 0) {
-    return {
-      kind: "error",
-      message: `expected exactly one ${BEGIN} \u2026 ${END} span, found ${begins.length} BEGIN and ${ends.length} END`
-    };
-  }
-  if (end < begin)
-    return { kind: "error", message: `${END} comes before ${BEGIN}` };
-  return { kind: "one", begin, end };
-}
-function mergeBlock(existing, block) {
-  if (existing === null) return { ok: true, text: `${block}
-`, changed: true };
-  const eol = existing.includes("\r\n") ? "\r\n" : "\n";
-  const lines = existing.split(/\r?\n/);
-  const found = findBlock(lines);
-  if (found.kind === "error") return { ok: false, error: found.message };
-  const rendered = block.split("\n").join(eol);
-  const starts = [0];
-  for (const m of existing.matchAll(/\r?\n/g))
-    starts.push((m.index ?? 0) + m[0].length);
-  const lineStart = (i) => starts[i] ?? existing.length;
-  let text;
-  if (found.kind === "one") {
-    const endLine = lines[found.end] ?? "";
-    const afterEnd = lineStart(found.end) + endLine.length;
-    text = `${existing.slice(0, lineStart(found.begin))}${rendered}${existing.slice(afterEnd)}`;
-  } else if (lines.length >= 3 && (lines[0] ?? "").startsWith("# ") && lines[1] === "") {
-    const at = lineStart(2);
-    text = `${existing.slice(0, at)}${rendered}${eol}${eol}${existing.slice(at)}`;
-  } else {
-    text = `${rendered}${eol}${eol}${existing}`;
-  }
-  return { ok: true, text, changed: text !== existing };
-}
-async function ensureClaudeMd(dir) {
-  const file = join7(dir, "CLAUDE.md");
-  if (await isSymlink(file)) return "unchanged";
-  const existing = await readOrNull(file);
-  if (existing === null) {
-    await writeFileAtomic(file, "@AGENTS.md\n");
-    return "created";
-  }
-  if (existing.split(/\r?\n/).some((l) => l.trim() === "@AGENTS.md"))
-    return "unchanged";
-  const eol = existing.includes("\r\n") ? "\r\n" : "\n";
-  await writeFileAtomic(file, `@AGENTS.md${eol}${existing}`);
-  return "prepended";
-}
-
-// src/version.ts
-var VERSION = "0.4.0";
-
-// src/commands/sync.ts
-import { join as join8 } from "path";
-var MANAGED_FILES = ["AGENTS.md", "CLAUDE.md"];
-function targetsOf(manifest, root, only) {
-  const targets = [];
-  if (only === void 0)
-    targets.push({ scope: null, dir: root, depth: 0, label: "AGENTS.md" });
-  for (const [name, entry] of Object.entries(manifest.scopes)) {
-    if (only !== void 0 && name !== only) continue;
-    const segments = entry.path.split("/");
-    targets.push({
-      scope: name,
-      dir: join8(root, ...segments),
-      depth: segments.length,
-      label: `${entry.path}/AGENTS.md`
-    });
-  }
-  return targets;
-}
-async function confirmOrExit(org) {
-  if (!process.stdin.isTTY || !process.stdout.isTTY) {
-    process.stderr.write(
-      "rness sync writes files; pass --yes to run without a prompt\n"
-    );
-    return 2;
-  }
-  const { confirm, isCancel } = await import("@clack/prompts");
-  const answer = await confirm({
-    message: `Sync workspace \`${org}\`: clone missing repositories and rewrite the rness blocks?`
-  });
-  if (isCancel(answer) || answer !== true) {
-    process.stderr.write("cancelled\n");
-    return 1;
-  }
-  return null;
-}
-async function syncCommand(opts) {
-  const cwd = opts.cwd ?? process.cwd();
-  const check = opts.check === true;
-  try {
-    const ws = await findWorkspace(cwd);
-    const manifest = await loadManifest(ws.rnessDir);
-    const { org, warning } = resolveOrg(manifest, ws.root);
-    if (warning !== null) process.stderr.write(`warning: ${warning}
-`);
-    if (opts.scope !== void 0 && !Object.hasOwn(manifest.scopes, opts.scope)) {
-      process.stderr.write(`unknown scope: ${opts.scope}
-`);
-      return 1;
-    }
-    if (!check && opts.yes !== true) {
-      const refused = await confirmOrExit(org);
-      if (refused !== null) return refused;
-    }
-    const lines = [];
-    const problems = [];
-    try {
-      for (const [name, repo] of Object.entries(manifest.repos)) {
-        const dir = join8(ws.root, "org", name);
-        const label = `org/${name}`;
-        if (!await exists(dir)) {
-          if (check) {
-            lines.push(`missing  ${label} (would clone ${repo.url})`);
-            continue;
-          }
-          try {
-            await clone(repo.url, dir);
-            lines.push(`cloned   ${label}`);
-          } catch (e) {
-            problems.push(
-              `${label}: ${e instanceof Error ? e.message : String(e)}`
-            );
-          }
-        } else if (opts.pull === true && !check) {
-          try {
-            if (!await isClean(dir, MANAGED_FILES)) {
-              lines.push(`skipped  ${label} (working tree not clean)`);
-              continue;
-            }
-            await pullFastForward(dir);
-            lines.push(`pulled   ${label}`);
-          } catch (e) {
-            problems.push(
-              `${label}: ${e instanceof Error ? e.message : String(e)}`
-            );
-          }
-        }
-      }
-      if (!await exists(join8(ws.root, "org"))) {
-        lines.push("skipped  blocks (no org/ directory here)");
-      } else {
-        let differences = 0;
-        for (const t of targetsOf(manifest, ws.root, opts.scope)) {
-          if (!await exists(t.dir)) {
-            lines.push(`skipped  ${t.label} (directory not present)`);
-            continue;
-          }
-          const linked = await Promise.all(
-            MANAGED_FILES.map((f) => isSymlink(join8(t.dir, f)))
-          );
-          if (linked.includes(true)) {
-            lines.push(`skipped  ${t.label} (symlink)`);
-            continue;
-          }
-          const context = await assembleContext({
-            rnessDir: ws.rnessDir,
-            manifest,
-            scope: t.scope
-          });
-          const block = renderBlock({
-            scope: t.scope,
-            org,
-            depth: t.depth,
-            context,
-            version: VERSION
-          });
-          if (block.bytes > BLOCK_SIZE_WARNING) {
-            process.stderr.write(
-              `warning: ${t.label}: block is ${Math.round(block.bytes / 1024)} KB (over 32 KB)
-`
-            );
-          }
-          const file = join8(t.dir, "AGENTS.md");
-          const merged = mergeBlock(await readOrNull(file), block.text);
-          if (!merged.ok) {
-            problems.push(`${t.label}: ${merged.error}`);
-            continue;
-          }
-          if (!merged.changed) {
-            lines.push(`unchanged ${t.label}`);
-            if (!check) await ensureClaudeMd(t.dir);
-            continue;
-          }
-          if (check) {
-            lines.push(`stale    ${t.label}`);
-            differences += 1;
-            continue;
-          }
-          await writeFileAtomic(file, merged.text);
-          await ensureClaudeMd(t.dir);
-          lines.push(`updated  ${t.label}`);
-        }
-        if (check && differences > 0)
-          problems.push(`${differences} block(s) out of date \u2014 run rness sync`);
-      }
-      return problems.length > 0 ? 1 : 0;
-    } finally {
-      for (const l of lines) process.stdout.write(`${l}
-`);
-      for (const p of problems) process.stderr.write(`${p}
-`);
-    }
-  } catch (e) {
-    return reportError(e);
-  }
-}
-
-// src/commands/add.ts
-import { join as join9 } from "path";
-function isTty() {
-  return process.stdin.isTTY === true && process.stdout.isTTY === true;
-}
-function printDeclared(result, already) {
-  for (const name of result.declared) {
-    if (already.has(name)) continue;
-    const entry = result.manifest.scopes[name];
-    if (entry === void 0) continue;
-    const ext = entry.extends.length === 0 ? "" : `, extends ${entry.extends.join(", ")}`;
-    process.stdout.write(`declared scope ${name} (${entry.path}${ext})
-`);
-  }
-}
-async function addCommand(spec, opts) {
-  const cwd = opts.cwd ?? process.cwd();
-  const host = opts.host ?? (opts.ssh === true ? SSH_HOST : DEFAULT_HOST);
-  try {
-    const ws = await findWorkspace(cwd);
-    const manifest = await loadManifest(ws.rnessDir);
-    const { org, warning } = resolveOrg(manifest, ws.root);
-    if (warning !== null) process.stderr.write(`warning: ${warning}
-`);
-    let parsed;
-    try {
-      parsed = parseRepoSpec(spec, org, host);
-    } catch (e) {
-      process.stderr.write(`${e instanceof Error ? e.message : String(e)}
-`);
-      return 2;
-    }
-    const scopes = (opts.scopes ?? "").split(",").map((s) => s.trim()).filter((s) => s !== "");
-    const dir = join9(ws.root, "org", parsed.name);
-    const present = await exists(dir);
-    if (opts.yes !== true) {
-      if (!isTty()) {
-        process.stderr.write(
-          "rness add clones and writes files; pass --yes to run without a prompt\n"
-        );
-        return 2;
-      }
-      const { confirm, isCancel } = await import("@clack/prompts");
-      const plan = present ? `adopt org/${parsed.name}` : `clone ${parsed.url} into org/${parsed.name}`;
-      const ok = await confirm({
-        message: `${plan}, declare scope "${parsed.name}" in rness.json, then sync?`
-      });
-      if (isCancel(ok) || ok !== true) {
-        process.stderr.write("cancelled\n");
-        return 1;
-      }
-    }
-    let result = await addRepository({
-      root: ws.root,
-      rnessDir: ws.rnessDir,
-      manifest,
-      spec,
-      org,
-      host,
-      scopes
-    });
-    process.stdout.write(
-      `${result.action === "cloned" ? "cloned  " : "adopted "} org/${result.name}
-`
-    );
-    const announced = /* @__PURE__ */ new Set();
-    printDeclared(result, announced);
-    for (const name of result.declared) announced.add(name);
-    if (opts.yes !== true && scopes.length === 0) {
-      const candidates = await workspaceDirs(dir);
-      if (candidates.length > 0) {
-        const { isCancel, multiselect } = await import("@clack/prompts");
-        const picked = await multiselect({
-          message: "Declare these workspace packages as scopes?",
-          options: candidates.map((c) => ({ value: c, label: c })),
-          required: false
-        });
-        if (isCancel(picked)) {
-          process.stderr.write("cancelled\n");
-          return 1;
-        }
-        if (Array.isArray(picked) && picked.length > 0) {
-          result = await addRepository({
-            root: ws.root,
-            rnessDir: ws.rnessDir,
-            manifest: result.manifest,
-            spec,
-            org,
-            host,
-            scopes: picked
-          });
-          printDeclared(result, announced);
-        }
-      }
-    }
-    return syncCommand({ yes: true, cwd: ws.root });
-  } catch (e) {
-    return reportError(e);
-  }
-}
-
-// src/commands/context.ts
-import { posix as posix3, relative, sep as sep3 } from "path";
-function renderMarkdown(ctx) {
-  const parts = [];
-  for (const collection of ctx.collections) {
-    if (collection.files.length === 0) continue;
-    parts.push(`## ${collection.name}
-`);
-    for (const file of collection.files) {
-      parts.push(
-        `<!-- rness: ${collection.name}/${file.rel} -->
-${file.content.trim()}
-`
-      );
-    }
-  }
-  return `${parts.join("\n")}
-`;
-}
-async function contextCommand(opts) {
-  const cwd = opts.cwd ?? process.cwd();
-  try {
-    const ws = await findWorkspace(cwd);
-    const manifest = await loadManifest(ws.rnessDir);
-    let scope;
-    if (opts.scope !== void 0) {
-      if (!Object.hasOwn(manifest.scopes, opts.scope)) {
-        process.stderr.write(`unknown scope: ${opts.scope}
-`);
-        return 1;
-      }
-      scope = opts.scope;
-    } else {
-      const rel = relative(ws.root, cwd).split(sep3).join(posix3.sep);
-      scope = resolveScope(manifest, rel);
-    }
-    const ctx = await assembleContext({
-      rnessDir: ws.rnessDir,
-      manifest,
-      scope
-    });
-    process.stdout.write(
-      opts.json ? `${JSON.stringify(ctx, null, 2)}
-` : renderMarkdown(ctx)
-    );
-    return 0;
-  } catch (e) {
-    return reportError(e);
-  }
-}
-
-// src/core/delegate.ts
-import { readFile as readFile5 } from "fs/promises";
-import { join as join10 } from "path";
-var DEFAULT_BIN = "dist/bin/rness.js";
-async function readPinnedCli(rnessDir) {
-  const dir = join10(rnessDir, "node_modules", "@rness", "cli");
-  let pkg;
-  try {
-    pkg = JSON.parse(await readFile5(join10(dir, "package.json"), "utf8"));
-  } catch {
-    return null;
-  }
-  const declared = pkg.bin;
-  let bin = DEFAULT_BIN;
-  if (typeof declared === "string") bin = declared;
-  else if (declared !== null && typeof declared === "object") {
-    const named = declared["rness"];
-    if (typeof named === "string") bin = named;
-  }
-  return {
-    dir,
-    bin,
-    version: typeof pkg.version === "string" ? pkg.version : null
-  };
-}
-async function findDelegate(cwd, ownVersion) {
-  let root;
-  let rnessDir;
-  try {
-    const ws = await findWorkspace(cwd);
-    root = ws.root;
-    rnessDir = ws.rnessDir;
-  } catch {
-    return null;
-  }
-  const pinned = await readPinnedCli(rnessDir);
-  if (pinned === null) return null;
-  const { version } = pinned;
-  if (version === null || version === ownVersion) return null;
-  return { entry: join10(pinned.dir, "dist", "index.js"), version, root };
-}
-
-// src/core/pm.ts
-import { execFile as execFile2 } from "child_process";
-import { promisify as promisify2 } from "util";
-var execFileP2 = promisify2(execFile2);
-var PACKAGE_MANAGERS = [
-  "npm",
-  "pnpm",
-  "yarn",
-  "bun"
-];
-function isPackageManager(value) {
-  return PACKAGE_MANAGERS.includes(value);
-}
-function detectPackageManager(userAgent = process.env["npm_config_user_agent"] ?? "") {
-  const name = userAgent.split("/")[0] ?? "";
-  return isPackageManager(name) ? name : "npm";
-}
-function firstLine2(text) {
-  return text.split("\n").find((l) => l.trim() !== "")?.trim() ?? "unknown error";
-}
-async function packageManagerVersion(pm) {
-  try {
-    const { stdout } = await execFileP2(pm, ["--version"]);
-    return stdout.trim();
-  } catch (e) {
-    throw new Error(`${pm} is not available on PATH`, { cause: e });
-  }
-}
-async function installDependencies(pm, dir) {
-  try {
-    await execFileP2(pm, ["install"], { cwd: dir, maxBuffer: 16 * 1024 * 1024 });
-  } catch (e) {
-    const err = e;
-    throw new Error(
-      `${pm} install failed in ${dir}: ${firstLine2(err.stderr ?? err.message)}`,
-      { cause: e }
-    );
-  }
-}
-
-// src/core/scaffold.ts
-import { statSync } from "fs";
-import { dirname as dirname4, join as join11 } from "path";
-import { fileURLToPath } from "url";
-var SCAFFOLD_FILES = [
-  "AGENTS.md",
-  "CONVENTIONS.md",
-  "README.md",
-  "WORKSPACE.md",
-  "rness.json",
-  "package.json",
-  "_gitignore",
-  ".githooks/pre-commit",
-  ".github/workflows/validate.yml",
-  "pnpm-workspace.yaml",
-  "adr/0000-template.md",
-  "standards/.gitkeep",
-  "specs/.gitkeep",
-  "plans/.gitkeep",
-  "skills/.gitkeep",
-  "docs/.gitkeep"
-];
-function scaffoldDir() {
-  let dir = dirname4(fileURLToPath(import.meta.url));
-  for (let i = 0; i < 4; i += 1) {
-    const candidate = join11(dir, "scaffold");
-    try {
-      if (statSync(join11(candidate, "rness.json")).isFile()) return candidate;
-    } catch {
-    }
-    dir = dirname4(dir);
-  }
-  throw new Error("scaffold directory not found next to the @rness/cli package");
-}
-
-// src/core/scaffold-copy.ts
-import { chmod, mkdir, readFile as readFile6, stat, writeFile as writeFile2 } from "fs/promises";
-import { dirname as dirname5, join as join12 } from "path";
-var TOKENISED = /* @__PURE__ */ new Set(["package.json", ".github/workflows/validate.yml"]);
-async function copyScaffold(dest, tokens) {
-  const source = scaffoldDir();
-  for (const rel of SCAFFOLD_FILES) {
-    if (rel === "rness.json") continue;
-    const from = join12(source, ...rel.split("/"));
-    const targetRel = rel === "_gitignore" ? ".gitignore" : rel;
-    const to = join12(dest, ...targetRel.split("/"));
-    await mkdir(dirname5(to), { recursive: true });
-    let content = await readFile6(from, "utf8");
-    if (TOKENISED.has(rel)) {
-      content = content.replaceAll("__RNESS_VERSION__", tokens.version).replaceAll("__RNESS_PM__", tokens.packageManager);
-    }
-    await writeFile2(to, content, "utf8");
-    const mode = (await stat(from)).mode & 511;
-    if (mode & 73) await chmod(to, mode);
-  }
-}
-
-// src/commands/create.ts
-import { execFile as execFile3 } from "child_process";
-import { mkdir as mkdir2, readdir, rm as rm3 } from "fs/promises";
-import { dirname as dirname6, join as join13, relative as relative2, resolve as resolve3 } from "path";
-import { promisify as promisify3 } from "util";
-var execFileP3 = promisify3(execFile3);
-function isTty2() {
-  return process.stdin.isTTY === true && process.stdout.isTTY === true;
-}
-async function isEmptyDir(dir) {
-  return (await readdir(dir)).length === 0;
-}
-async function ghAvailable() {
-  try {
-    await execFileP3("gh", ["--version"]);
-    return true;
-  } catch {
-    return false;
-  }
-}
-async function insideWorkspace(dir) {
-  try {
-    await findWorkspace(dir);
-    return true;
-  } catch {
-    return false;
-  }
-}
-function firstLine3(text) {
-  return text.split("\n").find((l) => l.trim() !== "")?.trim() ?? "unknown error";
-}
-function splitSpecs(list) {
-  return list.split(",").map((s) => s.trim()).filter((s) => s !== "");
-}
-async function addRepositories(input) {
-  let manifest = input.manifest;
-  const failures = [];
-  for (const spec of input.specs) {
-    try {
-      const result = await addRepository({
-        root: input.root,
-        rnessDir: input.rnessDir,
-        manifest,
-        spec,
-        org: input.org,
-        host: input.host,
-        scopes: []
-      });
-      manifest = result.manifest;
-      process.stdout.write(
-        `${result.action === "cloned" ? "cloned  " : "adopted "} org/${result.name}
-declared scope ${result.name} (org/${result.name})
-`
-      );
-    } catch (e) {
-      const message = firstLine3(e instanceof Error ? e.message : String(e));
-      process.stderr.write(`${spec}: ${message}
-`);
-      failures.push({ spec, message });
-    }
-  }
-  return failures;
-}
-async function syncPinned(root, shown) {
-  const rnessDir = join13(root, ".rness");
-  const installed = await readPinnedCli(rnessDir);
-  if (installed === null) return syncCommand({ yes: true, cwd: root });
-  const pinned = join13(installed.dir, ...installed.bin.split("/"));
-  if (!await exists(pinned)) {
-    process.stderr.write(
-      `@rness/cli in ${shown}/.rness is not installed correctly (missing ${installed.bin}); reinstall in .rness/
-`
-    );
-    return 1;
-  }
-  try {
-    const { stdout, stderr } = await execFileP3(
-      process.execPath,
-      [pinned, "sync", "--yes"],
-      {
-        cwd: root,
-        maxBuffer: 16 * 1024 * 1024
-      }
-    );
-    process.stdout.write(stdout);
-    if (stderr !== "") process.stderr.write(stderr);
-    return 0;
-  } catch (e) {
-    const err = e;
-    if (err.stdout !== void 0 && err.stdout !== "")
-      process.stdout.write(err.stdout);
-    if (err.stderr !== void 0 && err.stderr !== "")
-      process.stderr.write(err.stderr);
-    return typeof err.code === "number" ? err.code : 1;
-  }
-}
-async function createCommand(org, opts) {
-  const cwd = opts.cwd ?? process.cwd();
-  if (opts.template !== void 0) {
-    process.stderr.write("--template is reserved for a later version\n");
-    return 2;
-  }
-  if (!NAME.test(org)) {
-    process.stderr.write(`organisation name "${org}" is not [a-z0-9-]
-`);
-    return 2;
-  }
-  if (opts.pm !== void 0 && !isPackageManager(opts.pm)) {
-    process.stderr.write(`--pm must be one of ${PACKAGE_MANAGERS.join(", ")}
-`);
-    return 2;
-  }
-  const pm = opts.pm !== void 0 && isPackageManager(opts.pm) ? opts.pm : detectPackageManager();
-  const host = opts.host ?? (opts.ssh === true ? SSH_HOST : DEFAULT_HOST);
-  try {
-    const root = resolve3(cwd, opts.dir ?? org);
-    const shown = relative2(cwd, root) || ".";
-    if (await insideWorkspace(cwd) || await insideWorkspace(dirname6(root))) {
-      process.stderr.write(
-        "already inside an rness workspace; create runs from outside one\n"
-      );
-      return 1;
-    }
-    if (await exists(root)) {
-      if (await exists(join13(root, ".rness", "rness.json"))) {
-        if (!await exists(join13(root, ".rness", "node_modules"))) {
-          process.stderr.write(
-            `${shown} holds an rness workspace whose dependencies are not installed; cd ${shown}/.rness && ${pm} install, then rness sync
-`
-          );
-          return 1;
-        }
-        process.stderr.write(
-          `${shown} already holds an rness workspace (.rness/); run rness add inside it to add repositories
-`
-        );
-        return 1;
-      }
-      if (!await isEmptyDir(root)) {
-        process.stderr.write(`${shown} is not empty
-`);
-        return 1;
-      }
-    }
-    if (opts.yes !== true && !isTty2()) {
-      process.stderr.write(
-        "rness create writes files; pass --yes to run without a prompt\n"
-      );
-      return 2;
-    }
-    const contextUrl = repoUrl(host, org, ".rness");
-    const probe = await probeRemote(contextUrl);
-    if (probe.kind === "error") {
-      process.stderr.write(`${probe.message}
-`);
-      return 1;
-    }
-    const joining = probe.kind === "found";
-    if (opts.yes !== true) {
-      const { confirm, isCancel } = await import("@clack/prompts");
-      const message = joining ? `Join organisation \`${org}\`: clone ${contextUrl} into ${shown}/.rness and sync its repositories?` : `No ${contextUrl} found (or no access to it). Start a new workspace \`${org}\` in ${shown}/?`;
-      const ok = await confirm({ message });
-      if (isCancel(ok) || ok !== true) {
-        process.stderr.write("cancelled\n");
-        return 1;
-      }
-    }
-    const rnessDir = join13(root, ".rness");
-    if (joining) {
-      await mkdir2(root, { recursive: true });
-      await clone(contextUrl, rnessDir);
-      const manifest2 = await loadManifest(rnessDir);
-      process.stdout.write(`cloned   ${shown}/.rness (joined ${org})
-`);
-      if (opts.skipInstall === true)
-        process.stdout.write("skipped  install (--skip-install)\n");
-      else {
-        await installDependencies(pm, rnessDir);
-        process.stdout.write(`installed dependencies with ${pm}
-`);
-      }
-      await mkdir2(join13(root, "org"), { recursive: true });
-      const failures2 = await addRepositories({
-        root,
-        rnessDir,
-        manifest: manifest2,
-        org,
-        host,
-        specs: splitSpecs(opts.repos ?? "")
-      });
-      const code2 = await syncPinned(root, shown);
-      if (code2 !== 0) return code2;
-      return failures2.length > 0 ? 1 : 0;
-    }
-    const pmVersion = await packageManagerVersion(pm);
-    await mkdir2(root, { recursive: true });
-    const manifest = { contract: 1, org, repos: {}, scopes: {} };
-    try {
-      await copyScaffold(rnessDir, {
-        version: VERSION,
-        packageManager: `${pm}@${pmVersion}`
-      });
-      await writeManifest(rnessDir, manifest);
-      process.stdout.write(`created  ${shown}/.rness (new workspace)
-`);
-      if (opts.skipInstall === true)
-        process.stdout.write("skipped  install (--skip-install)\n");
-      else {
-        await installDependencies(pm, rnessDir);
-        process.stdout.write(`installed dependencies with ${pm}
-`);
-      }
-    } catch (e) {
-      reportError(e);
-      await rm3(rnessDir, { recursive: true, force: true }).catch(
-        () => void 0
-      );
-      if (root !== resolve3(cwd) && await isEmptyDir(root).catch(() => false))
-        await rm3(root, { recursive: true, force: true }).catch(() => void 0);
-      process.stderr.write(
-        `removed ${shown}/.rness after the failure; fix it and retry
-`
-      );
-      return 1;
-    }
-    await mkdir2(join13(root, "org"), { recursive: true });
-    let specs = splitSpecs(opts.repos ?? "");
-    if (opts.repos === void 0 && opts.yes !== true) {
-      const { isCancel, text } = await import("@clack/prompts");
-      const answer = await text({
-        message: "Repositories to add now (owner/repo, comma-separated; empty for none)",
-        defaultValue: ""
-      });
-      if (isCancel(answer)) {
-        process.stderr.write("cancelled\n");
-        return 1;
-      }
-      if (typeof answer === "string") specs = splitSpecs(answer);
-    }
-    const failures = await addRepositories({
-      root,
-      rnessDir,
-      manifest,
-      org,
-      host,
-      specs
-    });
-    await init(rnessDir);
-    try {
-      await commitAll(rnessDir, "chore: rness workspace context");
-      process.stdout.write(`committed ${shown}/.rness
-`);
-    } catch (e) {
-      process.stderr.write(
-        `warning: ${e instanceof Error ? e.message : String(e)} \u2014 commit ${shown}/.rness yourself
-`
-      );
-    }
-    const code = await syncPinned(root, shown);
-    if (code !== 0) return code;
-    const gh = await ghAvailable();
-    process.stdout.write(
-      [
-        "",
-        `Workspace \`${org}\` is ready in ${shown}/.`,
-        "",
-        "Next:",
-        `  cd ${shown}/.rness`,
-        // What was asked for and did not happen, as the command that retries
-        // it — the workspace is complete otherwise.
-        ...failures.map(
-          (f) => `  rness add ${f.spec}   # failed: ${f.message}`
-        ),
-        gh ? `  gh repo create ${org}/.rness --private --source . --push` : `  git remote add origin ${contextUrl} && git push -u origin main`,
-        `  # then, for every teammate: npm create rness ${org}`,
-        ""
-      ].join("\n")
-    );
-    return failures.length > 0 ? 1 : 0;
-  } catch (e) {
-    return reportError(e);
-  }
-}
-
-// src/core/blocks.ts
-import { join as join14 } from "path";
-async function checkBlocks({
-  root,
-  rnessDir,
-  manifest,
-  org
-}) {
-  const problems = [];
-  const warnings = [];
-  if (!await exists(join14(root, "org"))) return { problems, warnings };
-  const targets = [{ scope: null, dir: root, depth: 0, label: "AGENTS.md" }];
-  for (const [name, entry] of Object.entries(manifest.scopes)) {
-    const segments = entry.path.split("/");
-    targets.push({
-      scope: name,
-      dir: join14(root, ...segments),
-      depth: segments.length,
-      label: `${entry.path}/AGENTS.md`
-    });
-  }
-  for (const t of targets) {
-    if (!await exists(t.dir)) {
-      warnings.push(`${t.label}: directory not present, block not checked`);
-      continue;
-    }
-    const text = await readOrNull(join14(t.dir, "AGENTS.md"));
-    const lines = text === null ? [] : text.split(/\r?\n/);
-    const found = findBlock(lines);
-    if (found.kind === "none") {
-      warnings.push(`${t.label}: no rness block yet (run rness sync)`);
-      continue;
-    }
-    if (found.kind === "error") {
-      problems.push(`${t.label}: ${found.message}`);
-      continue;
-    }
-    const header2 = parseHeader(lines[found.begin + 1] ?? "");
-    const context = await assembleContext({
-      rnessDir,
-      manifest,
-      scope: t.scope
-    });
-    const fresh = renderBlock({
-      scope: t.scope,
-      org,
-      depth: t.depth,
-      context,
-      version: VERSION
-    });
-    const actual = blockHash(bodyOf(lines.slice(found.begin, found.end + 1)));
-    if (header2 === null || header2.hash !== fresh.hash || header2.hash !== actual) {
-      problems.push(`${t.label}: stale rness block (run rness sync)`);
-    }
-  }
-  return { problems, warnings };
-}
-
-// src/core/contract.ts
-import { join as join15 } from "path";
-var STATUSES = {
-  adr: ["Proposed", "Accepted", "Rejected", "Superseded"],
-  specs: [
-    "Draft",
-    "Proposed",
-    "Approved",
-    "Implemented",
-    "Superseded",
-    "Rejected"
-  ],
-  plans: ["Draft", "Ready", "In progress", "Blocked", "Completed", "Abandoned"]
-};
-var SKIP = /* @__PURE__ */ new Set(["adr/0000-template.md"]);
-var PLACEMENT_KEYS = ["scopes", "scope"];
-async function checkContract(rnessDir) {
-  const problems = [];
-  for (const name of COLLECTIONS) {
-    const allowed = STATUSES[name];
-    const items = await collectMarkdown(join15(rnessDir, name));
-    for (const item of items) {
-      const where = `${name}/${item.rel}`;
-      if (SKIP.has(where)) continue;
-      if (item.fieldsError !== null) {
-        problems.push(`${where}: invalid front matter (${item.fieldsError})`);
-        continue;
-      }
-      if (item.fields !== null) {
-        for (const key of PLACEMENT_KEYS) {
-          if (Object.hasOwn(item.fields, key)) {
-            problems.push(
-              `${where}: front matter "${key}" is not supported \u2014 the directory decides the scope; move the file`
-            );
-          }
-        }
-      }
-      if (allowed === void 0) continue;
-      if (item.fields === null) {
-        problems.push(`${where}: missing a front-matter block`);
-        continue;
-      }
-      if (item.title === null) problems.push(`${where}: missing a "# " title`);
-      const status = item.fields["status"];
-      if (status === void 0 || status === null || status === "") {
-        problems.push(`${where}: missing "status"`);
-      } else if (typeof status !== "string" || !allowed.includes(status)) {
-        problems.push(
-          `${where}: unknown status ${JSON.stringify(status)} (expected ${allowed.join(", ")})`
-        );
-      }
-    }
-  }
-  return problems;
-}
-
-// src/commands/validate.ts
-async function validateCommand(opts) {
-  const cwd = opts.cwd ?? process.cwd();
-  try {
-    const ws = await findWorkspace(cwd);
-    const manifest = await loadManifest(ws.rnessDir);
-    for (const s of Object.keys(manifest.scopes)) scopeChain(manifest, s);
-    const { org, warning } = resolveOrg(manifest, ws.root);
-    const warnings = warning === null ? [] : [warning];
-    const problems = await checkContract(ws.rnessDir);
-    const blocks = await checkBlocks({
-      root: ws.root,
-      rnessDir: ws.rnessDir,
-      manifest,
-      org
-    });
-    problems.push(...blocks.problems);
-    warnings.push(...blocks.warnings);
-    for (const p of problems) process.stderr.write(`${p}
-`);
-    for (const w of warnings) process.stderr.write(`warning: ${w}
-`);
-    if (problems.length > 0) return 1;
-    process.stdout.write("context ok\n");
-    return 0;
-  } catch (e) {
-    return reportError(e);
-  }
-}
-
-// src/cli.ts
-import { Command, CommanderError, Option } from "commander";
-function buildProgram(state) {
-  const program = new Command().name("rness").description("Configuration-plane CLI for rness workspaces").version(VERSION, "-v, --version", "print the version").exitOverride().showHelpAfterError().configureOutput({
-    writeOut: (s) => {
-      process.stdout.write(s);
-    },
-    writeErr: (s) => {
-      process.stderr.write(s);
-    }
-  });
-  program.command("context").description("Resolve and print the context for a scope").option(
-    "--scope <name>",
-    "scope to resolve (default: the scope owning the current directory)"
-  ).option("--json", "print JSON instead of Markdown").addOption(new Option("--cwd <dir>").hideHelp()).action(async (opts) => {
-    state.code = await contextCommand(opts);
-  });
-  program.command("validate").description(
-    "Check the .rness/ tree against the contract and every generated block"
-  ).addOption(new Option("--cwd <dir>").hideHelp()).action(async (opts) => {
-    state.code = await validateCommand(opts);
-  });
-  program.command("sync").description(
-    "Clone missing repositories and write the rness block into every AGENTS.md"
-  ).option("--scope <name>", "only this scope (the root block is skipped)").option(
-    "--check",
-    "render and compare only; exit 1 when a block is out of date"
-  ).option("--pull", "git pull --ff-only in every clean clone").option("-y, --yes", "do not ask for confirmation").addOption(new Option("--cwd <dir>").hideHelp()).action(async (opts) => {
-    state.code = await syncCommand(opts);
-  });
-  program.command("add").description(
-    "Clone (or adopt) a repository under org/ and declare it in rness.json"
-  ).argument("<repo>", "<repo>, <owner>/<repo>, or a clone URL").option(
-    "--scopes <list>",
-    "comma-separated sub-directories to declare as scopes extending the repository"
-  ).option("--ssh", "use git@github.com: instead of https://github.com/").option("-y, --yes", "do not ask for confirmation").addOption(new Option("--host <base>").hideHelp()).addOption(new Option("--cwd <dir>").hideHelp()).action(async (repo, opts) => {
-    state.code = await addCommand(repo, opts);
-  });
-  program.command("create").description(
-    "Start a workspace for a GitHub organisation, or join its existing .rness"
-  ).argument("<org>", "the GitHub organisation (github.com/<org>)").option("--dir <path>", "target directory (default: ./<org>)").option("--repos <list>", "comma-separated repositories to add right away").option(
-    "--pm <name>",
-    `package manager for .rness/ (${PACKAGE_MANAGERS.join(", ")}; default: the one running this command)`
-  ).option("--ssh", "use git@github.com: instead of https://github.com/").option("--skip-install", "do not install .rness/ dependencies").option("-y, --yes", "do not ask for confirmation").option("--template <name>", "reserved").addOption(new Option("--host <base>").hideHelp()).addOption(new Option("--cwd <dir>").hideHelp()).action(async (org, opts) => {
-    state.code = await createCommand(org, opts);
-  });
-  return program;
-}
-async function run(argv) {
-  const state = { code: 0 };
-  const program = buildProgram(state);
-  if (argv.length === 0) {
-    process.stdout.write(program.helpInformation());
-    return 0;
-  }
-  try {
-    await program.parseAsync(argv, { from: "user" });
-  } catch (e) {
-    if (e instanceof CommanderError) {
-      return e.exitCode === 0 ? 0 : 2;
-    }
-    throw e;
-  }
-  return state.code;
-}
-
-export {
-  exists,
-  readOrNull,
-  writeFileAtomic,
-  DEFAULT_HOST,
-  SSH_HOST,
-  repoUrl,
-  classifyProbe,
-  probeRemote,
-  NAME,
-  loadManifest,
-  writeManifest,
-  parseRepoSpec,
-  addRepository,
-  workspaceDirs,
-  findWorkspace,
-  reportError,
-  BEGIN,
-  END,
-  BLOCK_SIZE_WARNING,
-  blockHash,
-  renderBlock,
-  parseHeader,
-  bodyOf,
-  parseFrontMatter,
-  extractTitle,
-  collectMarkdown,
-  resolveScope,
-  scopeChain,
-  COLLECTIONS,
-  assembleContext,
-  findBlock,
-  mergeBlock,
-  ensureClaudeMd,
-  VERSION,
-  syncCommand,
-  addCommand,
-  renderMarkdown,
-  contextCommand,
-  findDelegate,
-  PACKAGE_MANAGERS,
-  isPackageManager,
-  detectPackageManager,
-  packageManagerVersion,
-  installDependencies,
-  SCAFFOLD_FILES,
-  scaffoldDir,
-  copyScaffold,
-  createCommand,
-  checkBlocks,
-  STATUSES,
-  checkContract,
-  validateCommand,
-  run
-};
-//# sourceMappingURL=chunk-IW5IHSPC.js.map