@telora/daemon 0.20.89 → 0.20.95

package/dist/cli/connect/agents.d.ts

@@ -1,24 +1,74 @@
 /**
- * Codex/IDE harness config writer: the seeded `AGENTS.md` block. Extracted
- * verbatim from `../connect.ts` and re-exported from there for import
- * stability.
+ * Codex/IDE harness config writer: the seeded `AGENTS.md` block.
+ *
+ * Codex has no SessionStart hook, so its seed cannot ride the harness the way
+ * the Claude seed does -- it needs a FILE carrier, and that file must live off
+ * the repo root so the connector never fights the repo for `<repo>/AGENTS.md`.
+ * There are three carriers, one per consumer:
+ *
+ *  - `writeProductCodexAgentsMd` -> the daemon's ISOLATED PER-PRODUCT CODEX_HOME
+ *    (`~/.telora/codex/<productId>/AGENTS.md`, resolveProductCodexHome). Read by
+ *    daemon-spawned LOCAL-MODEL Codex agents (whose CODEX_HOME is redirected
+ *    there at spawn). Being per-product, it carries the baked per-product
+ *    connection-invariant header correctly.
+ *  - `writeOrMergeGlobalAgentsMd` -> the operator's own `~/.codex/AGENTS.md`
+ *    (globalAgentsMdPath). Read by an INTERACTIVE operator running Codex AND by
+ *    daemon-spawned HOSTED Codex agents (whose ChatGPT-account auth lives in
+ *    `~/.codex/auth.json`, so their CODEX_HOME cannot be redirected without
+ *    breaking auth). Workstation-shared across products, so it carries the
+ *    HEADER-LESS seed (identity resolved on demand via `telora-daemon status`).
+ *  - `writeOrMergeAgentsMd` -> a REPO-ROOT `<repo>/AGENTS.md` for the IDE
+ *    harnesses (Cursor / VS Code) that read it natively and have no off-repo
+ *    carrier. Made SAFE: it never creates or appends where the repo TRACKS
+ *    AGENTS.md -- it reports that state instead, so it cannot dirty tracked
+ *    content and reproduce this focus's original bug.
+ *
+ * `retireAgentsMdSeed` removes a connector-written repo-root AGENTS.md block the
+ * Codex file-writer era left behind.
  */
 import { type AgentsMdConnectionInvariant } from '../../templates/agents-md.js';
 import type { ConnectIO } from './shared.js';
 /**
- * Write or merge a seeded `AGENTS.md` at the repo root (Codex harness).
+ * The workstation-shared operator Codex AGENTS.md path: `$CODEX_HOME/AGENTS.md`,
+ * with CODEX_HOME defaulting to `~/.codex`. This is the location an interactive
+ * Codex session (and a hosted daemon spawn) reads global instructions from.
+ */
+export declare function globalAgentsMdPath(): string;
+/**
+ * Write or merge the PER-PRODUCT Codex seed into the isolated CODEX_HOME
+ * (`~/.telora/codex/<productId>/AGENTS.md`). This is the carrier a daemon-spawned
+ * LOCAL-MODEL Codex agent reads (its CODEX_HOME is redirected there at spawn).
+ * The destination is genuinely per-product, so the baked connection-invariant
+ * header stays correct -- `renderAgentsMd(inv)` is reused unchanged.
+ */
+export declare function writeProductCodexAgentsMd(inv: AgentsMdConnectionInvariant, io: ConnectIO): void;
+/**
+ * Write or merge the workstation-shared operator Codex seed at
+ * `$CODEX_HOME/AGENTS.md` (default `~/.codex/AGENTS.md`).
  *
- * The exact analog of `writeOrMergeClaudeMd` for the Codex operator surface:
- * AGENTS.md is Codex's CLAUDE.md-equivalent. Same merge semantics --
- *  - Fresh repo: writes the seeded block straight in.
- *  - Existing AGENTS.md without the Telora delimiters: appends a delimited
- *    block at the end; user content untouched.
- *  - Existing AGENTS.md WITH the delimiters: replaces only the delimited block.
+ * Read by an interactive operator running Codex AND by daemon-spawned HOSTED
+ * Codex agents (whose auth lives in `~/.codex` and whose CODEX_HOME therefore
+ * cannot be redirected). Header-LESS: one workstation hosts many products, so
+ * this shared file cannot bake a correct per-product header -- the identity is
+ * resolved on demand via `telora-daemon status`.
+ */
+export declare function writeOrMergeGlobalAgentsMd(io: ConnectIO): void;
+/**
+ * Write or merge a seeded `AGENTS.md` at the repo root, SAFELY (IDE harnesses).
  *
- * Idempotent at the filesystem level: when the computed content equals what is
- * already on disk, NO write occurs (no spurious mtime bump, no git churn). The
- * daemon re-invokes this on boot to self-heal the seed block, so the
- * unchanged-common-case must not touch the file.
+ * Cursor / VS Code read a repo-root AGENTS.md natively and have no off-repo
+ * carrier, so those harnesses still seed one -- but never at the cost of dirtying
+ * tracked content. If the repo TRACKS AGENTS.md, this REPORTS that state and
+ * writes nothing (the repo owns its tracked file). Only an absent or untracked
+ * AGENTS.md is created / merged. The Codex harness NO LONGER writes here.
  */
 export declare function writeOrMergeAgentsMd(repoPath: string, inv: AgentsMdConnectionInvariant, io: ConnectIO): void;
+/**
+ * Retire a connector-written repo-root `AGENTS.md` seed block. The Codex path
+ * used to write one; the connector no longer owns `<repo>/AGENTS.md`, so this
+ * removes the block it left behind -- honoring the ownership asymmetry
+ * (connector-created file removed; repo-tracked file reported, never rewritten).
+ * See `retireSeedFile` for the three on-disk states handled.
+ */
+export declare function retireAgentsMdSeed(repoPath: string, io: ConnectIO): void;
 //# sourceMappingURL=agents.d.ts.map

package/dist/cli/connect/agents.d.ts.map

@@ -1 +1 @@
-{"version":3,"file":"agents.d.ts","sourceRoot":"","sources":["../../../src/cli/connect/agents.ts"],"names":[],"mappings":"AAAA;;;;GAIG;AAIH,OAAO,EAIL,KAAK,2BAA2B,EACjC,MAAM,8BAA8B,CAAC;AACtC,OAAO,KAAK,EAAE,SAAS,EAAE,MAAM,aAAa,CAAC;AAE7C;;;;;;;;;;;;;;GAcG;AACH,wBAAgB,oBAAoB,CAClC,QAAQ,EAAE,MAAM,EAChB,GAAG,EAAE,2BAA2B,EAChC,EAAE,EAAE,SAAS,GACZ,IAAI,CA0CN"}
+{"version":3,"file":"agents.d.ts","sourceRoot":"","sources":["../../../src/cli/connect/agents.ts"],"names":[],"mappings":"AAAA;;;;;;;;;;;;;;;;;;;;;;;;;;;GA2BG;AAKH,OAAO,EAKL,KAAK,2BAA2B,EACjC,MAAM,8BAA8B,CAAC;AAGtC,OAAO,KAAK,EAAE,SAAS,EAAE,MAAM,aAAa,CAAC;AAE7C;;;;GAIG;AACH,wBAAgB,kBAAkB,IAAI,MAAM,CAG3C;AAwDD;;;;;;GAMG;AACH,wBAAgB,yBAAyB,CAAC,GAAG,EAAE,2BAA2B,EAAE,EAAE,EAAE,SAAS,GAAG,IAAI,CAG/F;AAED;;;;;;;;;GASG;AACH,wBAAgB,0BAA0B,CAAC,EAAE,EAAE,SAAS,GAAG,IAAI,CAE9D;AAED;;;;;;;;GAQG;AACH,wBAAgB,oBAAoB,CAClC,QAAQ,EAAE,MAAM,EAChB,GAAG,EAAE,2BAA2B,EAChC,EAAE,EAAE,SAAS,GACZ,IAAI,CAUN;AAED;;;;;;GAMG;AACH,wBAAgB,kBAAkB,CAAC,QAAQ,EAAE,MAAM,EAAE,EAAE,EAAE,SAAS,GAAG,IAAI,CAExE"}

package/dist/cli/connect/agents.js

@@ -1,30 +1,61 @@
 /**
- * Codex/IDE harness config writer: the seeded `AGENTS.md` block. Extracted
- * verbatim from `../connect.ts` and re-exported from there for import
- * stability.
+ * Codex/IDE harness config writer: the seeded `AGENTS.md` block.
+ *
+ * Codex has no SessionStart hook, so its seed cannot ride the harness the way
+ * the Claude seed does -- it needs a FILE carrier, and that file must live off
+ * the repo root so the connector never fights the repo for `<repo>/AGENTS.md`.
+ * There are three carriers, one per consumer:
+ *
+ *  - `writeProductCodexAgentsMd` -> the daemon's ISOLATED PER-PRODUCT CODEX_HOME
+ *    (`~/.telora/codex/<productId>/AGENTS.md`, resolveProductCodexHome). Read by
+ *    daemon-spawned LOCAL-MODEL Codex agents (whose CODEX_HOME is redirected
+ *    there at spawn). Being per-product, it carries the baked per-product
+ *    connection-invariant header correctly.
+ *  - `writeOrMergeGlobalAgentsMd` -> the operator's own `~/.codex/AGENTS.md`
+ *    (globalAgentsMdPath). Read by an INTERACTIVE operator running Codex AND by
+ *    daemon-spawned HOSTED Codex agents (whose ChatGPT-account auth lives in
+ *    `~/.codex/auth.json`, so their CODEX_HOME cannot be redirected without
+ *    breaking auth). Workstation-shared across products, so it carries the
+ *    HEADER-LESS seed (identity resolved on demand via `telora-daemon status`).
+ *  - `writeOrMergeAgentsMd` -> a REPO-ROOT `<repo>/AGENTS.md` for the IDE
+ *    harnesses (Cursor / VS Code) that read it natively and have no off-repo
+ *    carrier. Made SAFE: it never creates or appends where the repo TRACKS
+ *    AGENTS.md -- it reports that state instead, so it cannot dirty tracked
+ *    content and reproduce this focus's original bug.
+ *
+ * `retireAgentsMdSeed` removes a connector-written repo-root AGENTS.md block the
+ * Codex file-writer era left behind.
  */
-import { existsSync, readFileSync, writeFileSync } from 'node:fs';
-import { resolve } from 'node:path';
-import { TELORA_AGENTS_MD_BEGIN, TELORA_AGENTS_MD_END, renderAgentsMd, } from '../../templates/agents-md.js';
+import { existsSync, mkdirSync, readFileSync, writeFileSync } from 'node:fs';
+import { homedir } from 'node:os';
+import { dirname, join, resolve } from 'node:path';
+import { TELORA_AGENTS_MD_BEGIN, TELORA_AGENTS_MD_END, renderAgentsMd, renderCodexOperatorSeed, } from '../../templates/agents-md.js';
+import { resolveProductCodexHome } from '../codex-provision.js';
+import { isPathTracked, retireSeedFile } from './seed-retirement.js';
 /**
- * Write or merge a seeded `AGENTS.md` at the repo root (Codex harness).
+ * The workstation-shared operator Codex AGENTS.md path: `$CODEX_HOME/AGENTS.md`,
+ * with CODEX_HOME defaulting to `~/.codex`. This is the location an interactive
+ * Codex session (and a hosted daemon spawn) reads global instructions from.
+ */
+export function globalAgentsMdPath() {
+    const codexHome = process.env.CODEX_HOME || join(homedir(), '.codex');
+    return join(codexHome, 'AGENTS.md');
+}
+/**
+ * Core delimited-block merge for an AGENTS.md at an absolute path, given a
+ * pre-rendered seed block.
  *
- * The exact analog of `writeOrMergeClaudeMd` for the Codex operator surface:
- * AGENTS.md is Codex's CLAUDE.md-equivalent. Same merge semantics --
- *  - Fresh repo: writes the seeded block straight in.
- *  - Existing AGENTS.md without the Telora delimiters: appends a delimited
- *    block at the end; user content untouched.
- *  - Existing AGENTS.md WITH the delimiters: replaces only the delimited block.
+ *  - No file: writes the seeded block straight in (creating the parent dir).
+ *  - File without the Telora delimiters: appends a delimited block; user
+ *    content untouched.
+ *  - File WITH the delimiters: replaces only the delimited block.
  *
  * Idempotent at the filesystem level: when the computed content equals what is
- * already on disk, NO write occurs (no spurious mtime bump, no git churn). The
- * daemon re-invokes this on boot to self-heal the seed block, so the
- * unchanged-common-case must not touch the file.
+ * already on disk, NO write occurs (no spurious mtime bump, no git churn).
  */
-export function writeOrMergeAgentsMd(repoPath, inv, io) {
-    const path = resolve(repoPath, 'AGENTS.md');
-    const seedBlock = renderAgentsMd(inv);
+function writeOrMergeAgentsBlockAt(path, seedBlock, io) {
     if (!existsSync(path)) {
+        mkdirSync(dirname(path), { recursive: true });
         writeFileSync(path, seedBlock);
         io.out(`Wrote ${path}.\n`);
         return;
@@ -62,4 +93,56 @@ export function writeOrMergeAgentsMd(repoPath, inv, io) {
     writeFileSync(path, newContent);
     io.out(message);
 }
+/**
+ * Write or merge the PER-PRODUCT Codex seed into the isolated CODEX_HOME
+ * (`~/.telora/codex/<productId>/AGENTS.md`). This is the carrier a daemon-spawned
+ * LOCAL-MODEL Codex agent reads (its CODEX_HOME is redirected there at spawn).
+ * The destination is genuinely per-product, so the baked connection-invariant
+ * header stays correct -- `renderAgentsMd(inv)` is reused unchanged.
+ */
+export function writeProductCodexAgentsMd(inv, io) {
+    const path = resolve(resolveProductCodexHome(inv.productId), 'AGENTS.md');
+    writeOrMergeAgentsBlockAt(path, renderAgentsMd(inv), io);
+}
+/**
+ * Write or merge the workstation-shared operator Codex seed at
+ * `$CODEX_HOME/AGENTS.md` (default `~/.codex/AGENTS.md`).
+ *
+ * Read by an interactive operator running Codex AND by daemon-spawned HOSTED
+ * Codex agents (whose auth lives in `~/.codex` and whose CODEX_HOME therefore
+ * cannot be redirected). Header-LESS: one workstation hosts many products, so
+ * this shared file cannot bake a correct per-product header -- the identity is
+ * resolved on demand via `telora-daemon status`.
+ */
+export function writeOrMergeGlobalAgentsMd(io) {
+    writeOrMergeAgentsBlockAt(globalAgentsMdPath(), renderCodexOperatorSeed(), io);
+}
+/**
+ * Write or merge a seeded `AGENTS.md` at the repo root, SAFELY (IDE harnesses).
+ *
+ * Cursor / VS Code read a repo-root AGENTS.md natively and have no off-repo
+ * carrier, so those harnesses still seed one -- but never at the cost of dirtying
+ * tracked content. If the repo TRACKS AGENTS.md, this REPORTS that state and
+ * writes nothing (the repo owns its tracked file). Only an absent or untracked
+ * AGENTS.md is created / merged. The Codex harness NO LONGER writes here.
+ */
+export function writeOrMergeAgentsMd(repoPath, inv, io) {
+    const path = resolve(repoPath, 'AGENTS.md');
+    if (existsSync(path) && isPathTracked(repoPath, 'AGENTS.md')) {
+        io.out(`AGENTS.md at ${path} is repo-tracked; leaving it to the repo (the ` +
+            `connector will not modify tracked content).\n`);
+        return;
+    }
+    writeOrMergeAgentsBlockAt(path, renderAgentsMd(inv), io);
+}
+/**
+ * Retire a connector-written repo-root `AGENTS.md` seed block. The Codex path
+ * used to write one; the connector no longer owns `<repo>/AGENTS.md`, so this
+ * removes the block it left behind -- honoring the ownership asymmetry
+ * (connector-created file removed; repo-tracked file reported, never rewritten).
+ * See `retireSeedFile` for the three on-disk states handled.
+ */
+export function retireAgentsMdSeed(repoPath, io) {
+    retireSeedFile(repoPath, 'AGENTS.md', TELORA_AGENTS_MD_BEGIN, TELORA_AGENTS_MD_END, io);
+}
 //# sourceMappingURL=agents.js.map

package/dist/cli/connect/agents.js.map

@@ -1 +1 @@
-{"version":3,"file":"agents.js","sourceRoot":"","sources":["../../../src/cli/connect/agents.ts"],"names":[],"mappings":"AAAA;;;;GAIG;AAEH,OAAO,EAAE,UAAU,EAAE,YAAY,EAAE,aAAa,EAAE,MAAM,SAAS,CAAC;AAClE,OAAO,EAAE,OAAO,EAAE,MAAM,WAAW,CAAC;AACpC,OAAO,EACL,sBAAsB,EACtB,oBAAoB,EACpB,cAAc,GAEf,MAAM,8BAA8B,CAAC;AAGtC;;;;;;;;;;;;;;GAcG;AACH,MAAM,UAAU,oBAAoB,CAClC,QAAgB,EAChB,GAAgC,EAChC,EAAa;IAEb,MAAM,IAAI,GAAG,OAAO,CAAC,QAAQ,EAAE,WAAW,CAAC,CAAC;IAC5C,MAAM,SAAS,GAAG,cAAc,CAAC,GAAG,CAAC,CAAC;IAEtC,IAAI,CAAC,UAAU,CAAC,IAAI,CAAC,EAAE,CAAC;QACtB,aAAa,CAAC,IAAI,EAAE,SAAS,CAAC,CAAC;QAC/B,EAAE,CAAC,GAAG,CAAC,SAAS,IAAI,KAAK,CAAC,CAAC;QAC3B,OAAO;IACT,CAAC;IAED,MAAM,QAAQ,GAAG,YAAY,CAAC,IAAI,EAAE,OAAO,CAAC,CAAC;IAC7C,MAAM,QAAQ,GAAG,QAAQ,CAAC,OAAO,CAAC,sBAAsB,CAAC,CAAC;IAE1D,IAAI,UAAkB,CAAC;IACvB,IAAI,OAAe,CAAC;IACpB,IAAI,QAAQ,KAAK,CAAC,CAAC,EAAE,CAAC;QACpB,MAAM,GAAG,GAAG,QAAQ,CAAC,QAAQ,CAAC,IAAI,CAAC,CAAC,CAAC,CAAC,IAAI,CAAC,CAAC,CAAC,MAAM,CAAC;QACpD,UAAU,GAAG,QAAQ,GAAG,GAAG,GAAG,SAAS,CAAC;QACxC,OAAO,GAAG,iCAAiC,IAAI,KAAK,CAAC;IACvD,CAAC;SAAM,CAAC;QACN,MAAM,MAAM,GAAG,QAAQ,CAAC,OAAO,CAAC,oBAAoB,EAAE,QAAQ,CAAC,CAAC;QAChE,IAAI,MAAM,KAAK,CAAC,CAAC,EAAE,CAAC;YAClB,MAAM,GAAG,GAAG,QAAQ,CAAC,QAAQ,CAAC,IAAI,CAAC,CAAC,CAAC,CAAC,IAAI,CAAC,CAAC,CAAC,MAAM,CAAC;YACpD,UAAU,GAAG,QAAQ,GAAG,GAAG,GAAG,SAAS,CAAC;YACxC,OAAO,GAAG,iCAAiC,IAAI,iCAAiC,CAAC;QACnF,CAAC;aAAM,CAAC;YACN,MAAM,KAAK,GAAG,MAAM,GAAG,oBAAoB,CAAC,MAAM,CAAC;YACnD,MAAM,eAAe,GAAG,QAAQ,CAAC,KAAK,CAAC,KAAK,IAAI,CAAC,CAAC,CAAC,CAAC,CAAC,CAAC,CAAC,CAAC,CAAC;YACzD,UAAU;gBACR,QAAQ,CAAC,KAAK,CAAC,CAAC,EAAE,QAAQ,CAAC;oBAC3B,SAAS,CAAC,OAAO,EAAE;oBACnB,IAAI;oBACJ,QAAQ,CAAC,KAAK,CAAC,KAAK,GAAG,eAAe,CAAC,CAAC;YAC1C,OAAO,GAAG,kCAAkC,IAAI,KAAK,CAAC;QACxD,CAAC;IACH,CAAC;IAED,wEAAwE;IACxE,IAAI,UAAU,KAAK,QAAQ;QAAE,OAAO;IAEpC,aAAa,CAAC,IAAI,EAAE,UAAU,CAAC,CAAC;IAChC,EAAE,CAAC,GAAG,CAAC,OAAO,CAAC,CAAC;AAClB,CAAC"}
+{"version":3,"file":"agents.js","sourceRoot":"","sources":["../../../src/cli/connect/agents.ts"],"names":[],"mappings":"AAAA;;;;;;;;;;;;;;;;;;;;;;;;;;;GA2BG;AAEH,OAAO,EAAE,UAAU,EAAE,SAAS,EAAE,YAAY,EAAE,aAAa,EAAE,MAAM,SAAS,CAAC;AAC7E,OAAO,EAAE,OAAO,EAAE,MAAM,SAAS,CAAC;AAClC,OAAO,EAAE,OAAO,EAAE,IAAI,EAAE,OAAO,EAAE,MAAM,WAAW,CAAC;AACnD,OAAO,EACL,sBAAsB,EACtB,oBAAoB,EACpB,cAAc,EACd,uBAAuB,GAExB,MAAM,8BAA8B,CAAC;AACtC,OAAO,EAAE,uBAAuB,EAAE,MAAM,uBAAuB,CAAC;AAChE,OAAO,EAAE,aAAa,EAAE,cAAc,EAAE,MAAM,sBAAsB,CAAC;AAGrE;;;;GAIG;AACH,MAAM,UAAU,kBAAkB;IAChC,MAAM,SAAS,GAAG,OAAO,CAAC,GAAG,CAAC,UAAU,IAAI,IAAI,CAAC,OAAO,EAAE,EAAE,QAAQ,CAAC,CAAC;IACtE,OAAO,IAAI,CAAC,SAAS,EAAE,WAAW,CAAC,CAAC;AACtC,CAAC;AAED;;;;;;;;;;;GAWG;AACH,SAAS,yBAAyB,CAAC,IAAY,EAAE,SAAiB,EAAE,EAAa;IAC/E,IAAI,CAAC,UAAU,CAAC,IAAI,CAAC,EAAE,CAAC;QACtB,SAAS,CAAC,OAAO,CAAC,IAAI,CAAC,EAAE,EAAE,SAAS,EAAE,IAAI,EAAE,CAAC,CAAC;QAC9C,aAAa,CAAC,IAAI,EAAE,SAAS,CAAC,CAAC;QAC/B,EAAE,CAAC,GAAG,CAAC,SAAS,IAAI,KAAK,CAAC,CAAC;QAC3B,OAAO;IACT,CAAC;IAED,MAAM,QAAQ,GAAG,YAAY,CAAC,IAAI,EAAE,OAAO,CAAC,CAAC;IAC7C,MAAM,QAAQ,GAAG,QAAQ,CAAC,OAAO,CAAC,sBAAsB,CAAC,CAAC;IAE1D,IAAI,UAAkB,CAAC;IACvB,IAAI,OAAe,CAAC;IACpB,IAAI,QAAQ,KAAK,CAAC,CAAC,EAAE,CAAC;QACpB,MAAM,GAAG,GAAG,QAAQ,CAAC,QAAQ,CAAC,IAAI,CAAC,CAAC,CAAC,CAAC,IAAI,CAAC,CAAC,CAAC,MAAM,CAAC;QACpD,UAAU,GAAG,QAAQ,GAAG,GAAG,GAAG,SAAS,CAAC;QACxC,OAAO,GAAG,iCAAiC,IAAI,KAAK,CAAC;IACvD,CAAC;SAAM,CAAC;QACN,MAAM,MAAM,GAAG,QAAQ,CAAC,OAAO,CAAC,oBAAoB,EAAE,QAAQ,CAAC,CAAC;QAChE,IAAI,MAAM,KAAK,CAAC,CAAC,EAAE,CAAC;YAClB,MAAM,GAAG,GAAG,QAAQ,CAAC,QAAQ,CAAC,IAAI,CAAC,CAAC,CAAC,CAAC,IAAI,CAAC,CAAC,CAAC,MAAM,CAAC;YACpD,UAAU,GAAG,QAAQ,GAAG,GAAG,GAAG,SAAS,CAAC;YACxC,OAAO,GAAG,iCAAiC,IAAI,iCAAiC,CAAC;QACnF,CAAC;aAAM,CAAC;YACN,MAAM,KAAK,GAAG,MAAM,GAAG,oBAAoB,CAAC,MAAM,CAAC;YACnD,MAAM,eAAe,GAAG,QAAQ,CAAC,KAAK,CAAC,KAAK,IAAI,CAAC,CAAC,CAAC,CAAC,CAAC,CAAC,CAAC,CAAC,CAAC;YACzD,UAAU;gBACR,QAAQ,CAAC,KAAK,CAAC,CAAC,EAAE,QAAQ,CAAC;oBAC3B,SAAS,CAAC,OAAO,EAAE;oBACnB,IAAI;oBACJ,QAAQ,CAAC,KAAK,CAAC,KAAK,GAAG,eAAe,CAAC,CAAC;YAC1C,OAAO,GAAG,kCAAkC,IAAI,KAAK,CAAC;QACxD,CAAC;IACH,CAAC;IAED,wEAAwE;IACxE,IAAI,UAAU,KAAK,QAAQ;QAAE,OAAO;IAEpC,aAAa,CAAC,IAAI,EAAE,UAAU,CAAC,CAAC;IAChC,EAAE,CAAC,GAAG,CAAC,OAAO,CAAC,CAAC;AAClB,CAAC;AAED;;;;;;GAMG;AACH,MAAM,UAAU,yBAAyB,CAAC,GAAgC,EAAE,EAAa;IACvF,MAAM,IAAI,GAAG,OAAO,CAAC,uBAAuB,CAAC,GAAG,CAAC,SAAS,CAAC,EAAE,WAAW,CAAC,CAAC;IAC1E,yBAAyB,CAAC,IAAI,EAAE,cAAc,CAAC,GAAG,CAAC,EAAE,EAAE,CAAC,CAAC;AAC3D,CAAC;AAED;;;;;;;;;GASG;AACH,MAAM,UAAU,0BAA0B,CAAC,EAAa;IACtD,yBAAyB,CAAC,kBAAkB,EAAE,EAAE,uBAAuB,EAAE,EAAE,EAAE,CAAC,CAAC;AACjF,CAAC;AAED;;;;;;;;GAQG;AACH,MAAM,UAAU,oBAAoB,CAClC,QAAgB,EAChB,GAAgC,EAChC,EAAa;IAEb,MAAM,IAAI,GAAG,OAAO,CAAC,QAAQ,EAAE,WAAW,CAAC,CAAC;IAC5C,IAAI,UAAU,CAAC,IAAI,CAAC,IAAI,aAAa,CAAC,QAAQ,EAAE,WAAW,CAAC,EAAE,CAAC;QAC7D,EAAE,CAAC,GAAG,CACJ,gBAAgB,IAAI,gDAAgD;YAClE,+CAA+C,CAClD,CAAC;QACF,OAAO;IACT,CAAC;IACD,yBAAyB,CAAC,IAAI,EAAE,cAAc,CAAC,GAAG,CAAC,EAAE,EAAE,CAAC,CAAC;AAC3D,CAAC;AAED;;;;;;GAMG;AACH,MAAM,UAAU,kBAAkB,CAAC,QAAgB,EAAE,EAAa;IAChE,cAAc,CAAC,QAAQ,EAAE,WAAW,EAAE,sBAAsB,EAAE,oBAAoB,EAAE,EAAE,CAAC,CAAC;AAC1F,CAAC"}

package/dist/cli/connect/claude.d.ts

@@ -5,27 +5,30 @@
  */
 import type { ConnectIO } from './shared.js';
 /**
- * Write or merge a seeded `CLAUDE.md` at the repo root.
+ * Retire the connector-written `CLAUDE.md` seed block at the repo root.
  *
- * - Fresh repo: writes the seeded block straight in.
- * - Existing CLAUDE.md without the Telora delimiters: appends a delimited
- *   Telora block at the end. The user's content is untouched.
- * - Existing CLAUDE.md WITH the delimiters: replaces only the delimited
- *   block. Re-runs are byte-identical (no churn, no duplication).
- *
- * Idempotent at the filesystem level: when the computed content equals what
- * is already on disk, NO write occurs (no spurious mtime bump, no git churn).
- * The daemon re-invokes this on every boot to self-heal the seed block, so
- * the unchanged-common-case must not touch the file.
+ * The Claude workstation seed is now workstation-scoped context delivered by the
+ * SessionStart hook (`telora-daemon session-state`), not a file the connector
+ * writes to the repo root -- so the connector stops owning `<repo>/CLAUDE.md`.
+ * This pass removes the delimited block it once wrote, honoring the ownership
+ * asymmetry (connector-created file -> removed; repo-tracked file -> reported,
+ * never rewritten). See `retireSeedFile` for the three on-disk states handled.
  */
-export declare function writeOrMergeClaudeMd(repoPath: string, productName: string | null, io: ConnectIO): void;
+export declare function retireClaudeMdSeed(repoPath: string, io: ConnectIO): void;
 /**
  * Write or deep-merge `<repo>/.claude/settings.json`.
  *
- * Fresh: writes the template directly.
- * Existing: deep-merges our `permissions.allow` entries into the user's
- * settings, deduplicating. All other top-level keys are untouched.
- * Re-runs produce no diff.
+ * Fresh: writes the template directly (creating `.claude/`).
+ * Existing: deep-merges our `permissions.allow` + the SessionStart seed hook
+ * into the user's settings, deduplicating. All other top-level keys are
+ * untouched. Re-runs produce no diff.
+ *
+ * Idempotent at the filesystem level: when the merged content equals what is
+ * already on disk, NO write occurs (no spurious mtime bump, no git churn). This
+ * matters because the daemon now re-invokes this on every boot
+ * (`refreshClaudeSettingsForProducts`) to migrate the SessionStart seed hook
+ * into already-connected repos -- the unchanged-common-case must not touch the
+ * file.
  */
 export declare function writeOrMergeClaudeSettings(repoPath: string, io: ConnectIO): void;
 //# sourceMappingURL=claude.d.ts.map

package/dist/cli/connect/claude.d.ts.map

@@ -1 +1 @@
-{"version":3,"file":"claude.d.ts","sourceRoot":"","sources":["../../../src/cli/connect/claude.ts"],"names":[],"mappings":"AAAA;;;;GAIG;AAaH,OAAO,KAAK,EAAE,SAAS,EAAE,MAAM,aAAa,CAAC;AAE7C;;;;;;;;;;;;;GAaG;AACH,wBAAgB,oBAAoB,CAClC,QAAQ,EAAE,MAAM,EAChB,WAAW,EAAE,MAAM,GAAG,IAAI,EAC1B,EAAE,EAAE,SAAS,GACZ,IAAI,CAiDN;AAED;;;;;;;GAOG;AACH,wBAAgB,0BAA0B,CAAC,QAAQ,EAAE,MAAM,EAAE,EAAE,EAAE,SAAS,GAAG,IAAI,CA0BhF"}
+{"version":3,"file":"claude.d.ts","sourceRoot":"","sources":["../../../src/cli/connect/claude.ts"],"names":[],"mappings":"AAAA;;;;GAIG;AAaH,OAAO,KAAK,EAAE,SAAS,EAAE,MAAM,aAAa,CAAC;AAE7C;;;;;;;;;GASG;AACH,wBAAgB,kBAAkB,CAAC,QAAQ,EAAE,MAAM,EAAE,EAAE,EAAE,SAAS,GAAG,IAAI,CAExE;AAED;;;;;;;;;;;;;;GAcG;AACH,wBAAgB,0BAA0B,CAAC,QAAQ,EAAE,MAAM,EAAE,EAAE,EAAE,SAAS,GAAG,IAAI,CAiChF"}

package/dist/cli/connect/claude.js

@@ -5,88 +5,47 @@
  */
 import { existsSync, mkdirSync, readFileSync, writeFileSync } from 'node:fs';
 import { resolve } from 'node:path';
-import { TELORA_CLAUDE_MD_BEGIN, TELORA_CLAUDE_MD_END, renderClaudeMd, } from '../../templates/claude-md.js';
+import { TELORA_CLAUDE_MD_BEGIN, TELORA_CLAUDE_MD_END, } from '../../templates/claude-md.js';
 import { buildClaudeSettings, mergeClaudeSettings, } from '../../templates/claude-settings.js';
+import { retireSeedFile } from './seed-retirement.js';
 /**
- * Write or merge a seeded `CLAUDE.md` at the repo root.
+ * Retire the connector-written `CLAUDE.md` seed block at the repo root.
  *
- * - Fresh repo: writes the seeded block straight in.
- * - Existing CLAUDE.md without the Telora delimiters: appends a delimited
- *   Telora block at the end. The user's content is untouched.
- * - Existing CLAUDE.md WITH the delimiters: replaces only the delimited
- *   block. Re-runs are byte-identical (no churn, no duplication).
- *
- * Idempotent at the filesystem level: when the computed content equals what
- * is already on disk, NO write occurs (no spurious mtime bump, no git churn).
- * The daemon re-invokes this on every boot to self-heal the seed block, so
- * the unchanged-common-case must not touch the file.
+ * The Claude workstation seed is now workstation-scoped context delivered by the
+ * SessionStart hook (`telora-daemon session-state`), not a file the connector
+ * writes to the repo root -- so the connector stops owning `<repo>/CLAUDE.md`.
+ * This pass removes the delimited block it once wrote, honoring the ownership
+ * asymmetry (connector-created file -> removed; repo-tracked file -> reported,
+ * never rewritten). See `retireSeedFile` for the three on-disk states handled.
  */
-export function writeOrMergeClaudeMd(repoPath, productName, io) {
-    const path = resolve(repoPath, 'CLAUDE.md');
-    const seedBlock = renderClaudeMd(productName);
-    if (!existsSync(path)) {
-        writeFileSync(path, seedBlock);
-        io.out(`Wrote ${path}.\n`);
-        return;
-    }
-    const existing = readFileSync(path, 'utf-8');
-    const beginIdx = existing.indexOf(TELORA_CLAUDE_MD_BEGIN);
-    let newContent;
-    let message;
-    if (beginIdx === -1) {
-        // No prior Telora block -- append, preserving user content.
-        const sep = existing.endsWith('\n') ? '\n' : '\n\n';
-        newContent = existing + sep + seedBlock;
-        message = `Appended Telora seed block to ${path}.\n`;
-    }
-    else {
-        const endIdx = existing.indexOf(TELORA_CLAUDE_MD_END, beginIdx);
-        if (endIdx === -1) {
-            // Begin marker without end -- treat as malformed. Append a fresh block
-            // rather than risk corrupting whatever's there.
-            const sep = existing.endsWith('\n') ? '\n' : '\n\n';
-            newContent = existing + sep + seedBlock;
-            message = `Appended Telora seed block to ${path} (prior block was malformed).\n`;
-        }
-        else {
-            // Replace the existing Telora block in place.
-            const after = endIdx + TELORA_CLAUDE_MD_END.length;
-            // Trim a trailing newline after the end marker so we don't accumulate
-            // blank lines on each re-run.
-            const trailingNewline = existing[after] === '\n' ? 1 : 0;
-            newContent =
-                existing.slice(0, beginIdx) +
-                    seedBlock.trimEnd() +
-                    '\n' +
-                    existing.slice(after + trailingNewline);
-            message = `Refreshed Telora seed block in ${path}.\n`;
-        }
-    }
-    // Idempotency guard: skip the write entirely when nothing would change.
-    // This keeps the boot-time self-heal a no-op for already-current repos.
-    if (newContent === existing)
-        return;
-    writeFileSync(path, newContent);
-    io.out(message);
+export function retireClaudeMdSeed(repoPath, io) {
+    retireSeedFile(repoPath, 'CLAUDE.md', TELORA_CLAUDE_MD_BEGIN, TELORA_CLAUDE_MD_END, io);
 }
 /**
  * Write or deep-merge `<repo>/.claude/settings.json`.
  *
- * Fresh: writes the template directly.
- * Existing: deep-merges our `permissions.allow` entries into the user's
- * settings, deduplicating. All other top-level keys are untouched.
- * Re-runs produce no diff.
+ * Fresh: writes the template directly (creating `.claude/`).
+ * Existing: deep-merges our `permissions.allow` + the SessionStart seed hook
+ * into the user's settings, deduplicating. All other top-level keys are
+ * untouched. Re-runs produce no diff.
+ *
+ * Idempotent at the filesystem level: when the merged content equals what is
+ * already on disk, NO write occurs (no spurious mtime bump, no git churn). This
+ * matters because the daemon now re-invokes this on every boot
+ * (`refreshClaudeSettingsForProducts`) to migrate the SessionStart seed hook
+ * into already-connected repos -- the unchanged-common-case must not touch the
+ * file.
  */
 export function writeOrMergeClaudeSettings(repoPath, io) {
     const dir = resolve(repoPath, '.claude');
     const path = resolve(dir, 'settings.json');
     const seed = buildClaudeSettings();
-    if (!existsSync(dir))
-        mkdirSync(dir, { recursive: true });
     let existing = null;
+    let existingRaw = null;
     if (existsSync(path)) {
         try {
-            const parsed = JSON.parse(readFileSync(path, 'utf-8'));
+            existingRaw = readFileSync(path, 'utf-8');
+            const parsed = JSON.parse(existingRaw);
             if (parsed && typeof parsed === 'object' && !Array.isArray(parsed)) {
                 existing = parsed;
             }
@@ -98,7 +57,14 @@ export function writeOrMergeClaudeSettings(repoPath, io) {
         }
     }
     const merged = mergeClaudeSettings(existing, seed);
-    writeFileSync(path, JSON.stringify(merged, null, 2) + '\n');
-    io.out(existing ? `Merged Telora entries into ${path}.\n` : `Wrote ${path}.\n`);
+    const nextRaw = JSON.stringify(merged, null, 2) + '\n';
+    // Idempotency guard: skip the write (and the dir mkdir) entirely when nothing
+    // would change, so the boot-cadence refresh is a pure no-op for current repos.
+    if (existingRaw !== null && nextRaw === existingRaw)
+        return;
+    if (!existsSync(dir))
+        mkdirSync(dir, { recursive: true });
+    writeFileSync(path, nextRaw);
+    io.out(existingRaw !== null ? `Merged Telora entries into ${path}.\n` : `Wrote ${path}.\n`);
 }
 //# sourceMappingURL=claude.js.map

package/dist/cli/connect/claude.js.map

@@ -1 +1 @@
-{"version":3,"file":"claude.js","sourceRoot":"","sources":["../../../src/cli/connect/claude.ts"],"names":[],"mappings":"AAAA;;;;GAIG;AAEH,OAAO,EAAE,UAAU,EAAE,SAAS,EAAE,YAAY,EAAE,aAAa,EAAE,MAAM,SAAS,CAAC;AAC7E,OAAO,EAAE,OAAO,EAAE,MAAM,WAAW,CAAC;AACpC,OAAO,EACL,sBAAsB,EACtB,oBAAoB,EACpB,cAAc,GACf,MAAM,8BAA8B,CAAC;AACtC,OAAO,EACL,mBAAmB,EACnB,mBAAmB,GACpB,MAAM,oCAAoC,CAAC;AAG5C;;;;;;;;;;;;;GAaG;AACH,MAAM,UAAU,oBAAoB,CAClC,QAAgB,EAChB,WAA0B,EAC1B,EAAa;IAEb,MAAM,IAAI,GAAG,OAAO,CAAC,QAAQ,EAAE,WAAW,CAAC,CAAC;IAC5C,MAAM,SAAS,GAAG,cAAc,CAAC,WAAW,CAAC,CAAC;IAE9C,IAAI,CAAC,UAAU,CAAC,IAAI,CAAC,EAAE,CAAC;QACtB,aAAa,CAAC,IAAI,EAAE,SAAS,CAAC,CAAC;QAC/B,EAAE,CAAC,GAAG,CAAC,SAAS,IAAI,KAAK,CAAC,CAAC;QAC3B,OAAO;IACT,CAAC;IAED,MAAM,QAAQ,GAAG,YAAY,CAAC,IAAI,EAAE,OAAO,CAAC,CAAC;IAC7C,MAAM,QAAQ,GAAG,QAAQ,CAAC,OAAO,CAAC,sBAAsB,CAAC,CAAC;IAE1D,IAAI,UAAkB,CAAC;IACvB,IAAI,OAAe,CAAC;IACpB,IAAI,QAAQ,KAAK,CAAC,CAAC,EAAE,CAAC;QACpB,4DAA4D;QAC5D,MAAM,GAAG,GAAG,QAAQ,CAAC,QAAQ,CAAC,IAAI,CAAC,CAAC,CAAC,CAAC,IAAI,CAAC,CAAC,CAAC,MAAM,CAAC;QACpD,UAAU,GAAG,QAAQ,GAAG,GAAG,GAAG,SAAS,CAAC;QACxC,OAAO,GAAG,iCAAiC,IAAI,KAAK,CAAC;IACvD,CAAC;SAAM,CAAC;QACN,MAAM,MAAM,GAAG,QAAQ,CAAC,OAAO,CAAC,oBAAoB,EAAE,QAAQ,CAAC,CAAC;QAChE,IAAI,MAAM,KAAK,CAAC,CAAC,EAAE,CAAC;YAClB,uEAAuE;YACvE,gDAAgD;YAChD,MAAM,GAAG,GAAG,QAAQ,CAAC,QAAQ,CAAC,IAAI,CAAC,CAAC,CAAC,CAAC,IAAI,CAAC,CAAC,CAAC,MAAM,CAAC;YACpD,UAAU,GAAG,QAAQ,GAAG,GAAG,GAAG,SAAS,CAAC;YACxC,OAAO,GAAG,iCAAiC,IAAI,iCAAiC,CAAC;QACnF,CAAC;aAAM,CAAC;YACN,8CAA8C;YAC9C,MAAM,KAAK,GAAG,MAAM,GAAG,oBAAoB,CAAC,MAAM,CAAC;YACnD,sEAAsE;YACtE,8BAA8B;YAC9B,MAAM,eAAe,GAAG,QAAQ,CAAC,KAAK,CAAC,KAAK,IAAI,CAAC,CAAC,CAAC,CAAC,CAAC,CAAC,CAAC,CAAC,CAAC;YACzD,UAAU;gBACR,QAAQ,CAAC,KAAK,CAAC,CAAC,EAAE,QAAQ,CAAC;oBAC3B,SAAS,CAAC,OAAO,EAAE;oBACnB,IAAI;oBACJ,QAAQ,CAAC,KAAK,CAAC,KAAK,GAAG,eAAe,CAAC,CAAC;YAC1C,OAAO,GAAG,kCAAkC,IAAI,KAAK,CAAC;QACxD,CAAC;IACH,CAAC;IAED,wEAAwE;IACxE,wEAAwE;IACxE,IAAI,UAAU,KAAK,QAAQ;QAAE,OAAO;IAEpC,aAAa,CAAC,IAAI,EAAE,UAAU,CAAC,CAAC;IAChC,EAAE,CAAC,GAAG,CAAC,OAAO,CAAC,CAAC;AAClB,CAAC;AAED;;;;;;;GAOG;AACH,MAAM,UAAU,0BAA0B,CAAC,QAAgB,EAAE,EAAa;IACxE,MAAM,GAAG,GAAG,OAAO,CAAC,QAAQ,EAAE,SAAS,CAAC,CAAC;IACzC,MAAM,IAAI,GAAG,OAAO,CAAC,GAAG,EAAE,eAAe,CAAC,CAAC;IAC3C,MAAM,IAAI,GAAG,mBAAmB,EAAE,CAAC;IAEnC,IAAI,CAAC,UAAU,CAAC,GAAG,CAAC;QAAE,SAAS,CAAC,GAAG,EAAE,EAAE,SAAS,EAAE,IAAI,EAAE,CAAC,CAAC;IAE1D,IAAI,QAAQ,GAAmC,IAAI,CAAC;IACpD,IAAI,UAAU,CAAC,IAAI,CAAC,EAAE,CAAC;QACrB,IAAI,CAAC;YACH,MAAM,MAAM,GAAG,IAAI,CAAC,KAAK,CAAC,YAAY,CAAC,IAAI,EAAE,OAAO,CAAC,CAAC,CAAC;YACvD,IAAI,MAAM,IAAI,OAAO,MAAM,KAAK,QAAQ,IAAI,CAAC,KAAK,CAAC,OAAO,CAAC,MAAM,CAAC,EAAE,CAAC;gBACnE,QAAQ,GAAG,MAAiC,CAAC;YAC/C,CAAC;QACH,CAAC;QAAC,OAAO,GAAG,EAAE,CAAC;YACb,EAAE,CAAC,GAAG,CACJ,qBAAqB,IAAI,wCAAwC;gBAC/D,GAAG,GAAG,YAAY,KAAK,CAAC,CAAC,CAAC,GAAG,CAAC,OAAO,CAAC,CAAC,CAAC,MAAM,CAAC,GAAG,CAAC,IAAI,CAC1D,CAAC;YACF,OAAO;QACT,CAAC;IACH,CAAC;IAED,MAAM,MAAM,GAAG,mBAAmB,CAAC,QAAQ,EAAE,IAAI,CAAC,CAAC;IACnD,aAAa,CAAC,IAAI,EAAE,IAAI,CAAC,SAAS,CAAC,MAAM,EAAE,IAAI,EAAE,CAAC,CAAC,GAAG,IAAI,CAAC,CAAC;IAC5D,EAAE,CAAC,GAAG,CAAC,QAAQ,CAAC,CAAC,CAAC,8BAA8B,IAAI,KAAK,CAAC,CAAC,CAAC,SAAS,IAAI,KAAK,CAAC,CAAC;AAClF,CAAC"}
+{"version":3,"file":"claude.js","sourceRoot":"","sources":["../../../src/cli/connect/claude.ts"],"names":[],"mappings":"AAAA;;;;GAIG;AAEH,OAAO,EAAE,UAAU,EAAE,SAAS,EAAE,YAAY,EAAE,aAAa,EAAE,MAAM,SAAS,CAAC;AAC7E,OAAO,EAAE,OAAO,EAAE,MAAM,WAAW,CAAC;AACpC,OAAO,EACL,sBAAsB,EACtB,oBAAoB,GACrB,MAAM,8BAA8B,CAAC;AACtC,OAAO,EACL,mBAAmB,EACnB,mBAAmB,GACpB,MAAM,oCAAoC,CAAC;AAC5C,OAAO,EAAE,cAAc,EAAE,MAAM,sBAAsB,CAAC;AAGtD;;;;;;;;;GASG;AACH,MAAM,UAAU,kBAAkB,CAAC,QAAgB,EAAE,EAAa;IAChE,cAAc,CAAC,QAAQ,EAAE,WAAW,EAAE,sBAAsB,EAAE,oBAAoB,EAAE,EAAE,CAAC,CAAC;AAC1F,CAAC;AAED;;;;;;;;;;;;;;GAcG;AACH,MAAM,UAAU,0BAA0B,CAAC,QAAgB,EAAE,EAAa;IACxE,MAAM,GAAG,GAAG,OAAO,CAAC,QAAQ,EAAE,SAAS,CAAC,CAAC;IACzC,MAAM,IAAI,GAAG,OAAO,CAAC,GAAG,EAAE,eAAe,CAAC,CAAC;IAC3C,MAAM,IAAI,GAAG,mBAAmB,EAAE,CAAC;IAEnC,IAAI,QAAQ,GAAmC,IAAI,CAAC;IACpD,IAAI,WAAW,GAAkB,IAAI,CAAC;IACtC,IAAI,UAAU,CAAC,IAAI,CAAC,EAAE,CAAC;QACrB,IAAI,CAAC;YACH,WAAW,GAAG,YAAY,CAAC,IAAI,EAAE,OAAO,CAAC,CAAC;YAC1C,MAAM,MAAM,GAAG,IAAI,CAAC,KAAK,CAAC,WAAW,CAAC,CAAC;YACvC,IAAI,MAAM,IAAI,OAAO,MAAM,KAAK,QAAQ,IAAI,CAAC,KAAK,CAAC,OAAO,CAAC,MAAM,CAAC,EAAE,CAAC;gBACnE,QAAQ,GAAG,MAAiC,CAAC;YAC/C,CAAC;QACH,CAAC;QAAC,OAAO,GAAG,EAAE,CAAC;YACb,EAAE,CAAC,GAAG,CACJ,qBAAqB,IAAI,wCAAwC;gBAC/D,GAAG,GAAG,YAAY,KAAK,CAAC,CAAC,CAAC,GAAG,CAAC,OAAO,CAAC,CAAC,CAAC,MAAM,CAAC,GAAG,CAAC,IAAI,CAC1D,CAAC;YACF,OAAO;QACT,CAAC;IACH,CAAC;IAED,MAAM,MAAM,GAAG,mBAAmB,CAAC,QAAQ,EAAE,IAAI,CAAC,CAAC;IACnD,MAAM,OAAO,GAAG,IAAI,CAAC,SAAS,CAAC,MAAM,EAAE,IAAI,EAAE,CAAC,CAAC,GAAG,IAAI,CAAC;IAEvD,8EAA8E;IAC9E,+EAA+E;IAC/E,IAAI,WAAW,KAAK,IAAI,IAAI,OAAO,KAAK,WAAW;QAAE,OAAO;IAE5D,IAAI,CAAC,UAAU,CAAC,GAAG,CAAC;QAAE,SAAS,CAAC,GAAG,EAAE,EAAE,SAAS,EAAE,IAAI,EAAE,CAAC,CAAC;IAC1D,aAAa,CAAC,IAAI,EAAE,OAAO,CAAC,CAAC;IAC7B,EAAE,CAAC,GAAG,CAAC,WAAW,KAAK,IAAI,CAAC,CAAC,CAAC,8BAA8B,IAAI,KAAK,CAAC,CAAC,CAAC,SAAS,IAAI,KAAK,CAAC,CAAC;AAC9F,CAAC"}

package/dist/cli/connect/scaffolding.d.ts

@@ -18,8 +18,9 @@ export declare function harnessGitignoreEntries(harness: OperatorHarness): strin
  * `connect --harness <h>` and the token-free `harness add <h>` verb produce
  * byte-identical output for a given identity.
  *
- *  - claude: CLAUDE.md + .claude/settings.json
- *  - codex:  AGENTS.md + Telora MCP in ~/.codex/config.toml
+ *  - claude: .claude/settings.json (SessionStart seed hook) + retire any repo CLAUDE.md
+ *  - codex:  global $CODEX_HOME/AGENTS.md + Telora MCP in ~/.codex/config.toml
+ *            (repo-root AGENTS.md seed retired)
  *  - cline:  .cline/rules/telora.md + Telora MCP in ~/.cline settings
  *  - cursor: AGENTS.md + .cursor/mcp.json (preload env)
  *  - vscode: AGENTS.md + .vscode/mcp.json (preload env)

package/dist/cli/connect/scaffolding.d.ts.map

@@ -1 +1 @@
-{"version":3,"file":"scaffolding.d.ts","sourceRoot":"","sources":["../../../src/cli/connect/scaffolding.ts"],"names":[],"mappings":"AAAA;;;;;GAKG;AAEH,OAAO,KAAK,EAAE,2BAA2B,EAAE,MAAM,8BAA8B,CAAC;AAChF,OAAO,KAAK,EAAE,SAAS,EAAE,eAAe,EAAE,MAAM,aAAa,CAAC;AAO9D;;;;GAIG;AACH,wBAAgB,uBAAuB,CAAC,OAAO,EAAE,eAAe,GAAG,MAAM,EAAE,CAE1E;AAED;;;;;;;;;;;;;;GAcG;AACH,wBAAgB,uBAAuB,CACrC,QAAQ,EAAE,MAAM,EAChB,OAAO,EAAE,eAAe,EACxB,GAAG,EAAE,2BAA2B,EAChC,EAAE,EAAE,SAAS,GACZ,IAAI,CAaN"}
+{"version":3,"file":"scaffolding.d.ts","sourceRoot":"","sources":["../../../src/cli/connect/scaffolding.ts"],"names":[],"mappings":"AAAA;;;;;GAKG;AAEH,OAAO,KAAK,EAAE,2BAA2B,EAAE,MAAM,8BAA8B,CAAC;AAChF,OAAO,KAAK,EAAE,SAAS,EAAE,eAAe,EAAE,MAAM,aAAa,CAAC;AAU9D;;;;GAIG;AACH,wBAAgB,uBAAuB,CAAC,OAAO,EAAE,eAAe,GAAG,MAAM,EAAE,CAE1E;AAED;;;;;;;;;;;;;;;GAeG;AACH,wBAAgB,uBAAuB,CACrC,QAAQ,EAAE,MAAM,EAChB,OAAO,EAAE,eAAe,EACxB,GAAG,EAAE,2BAA2B,EAChC,EAAE,EAAE,SAAS,GACZ,IAAI,CAuBN"}

package/dist/cli/connect/scaffolding.js

@@ -4,8 +4,8 @@
  * Extracted verbatim from `../connect.ts` and re-exported from there for import
  * stability.
  */
-import { writeOrMergeClaudeMd, writeOrMergeClaudeSettings } from './claude.js';
-import { writeOrMergeAgentsMd } from './agents.js';
+import { retireClaudeMdSeed, writeOrMergeClaudeSettings } from './claude.js';
+import { writeOrMergeGlobalAgentsMd, retireAgentsMdSeed, } from './agents.js';
 import { writeOrMergeCodexMcpToml } from './codex.js';
 import { writeClineProjectRules, writeOrMergeClineMcpSettings } from './cline.js';
 import { IDE_MCP_CONFIG_PATH, writeIdeHarnessScaffolding } from './ide.js';
@@ -23,8 +23,9 @@ export function harnessGitignoreEntries(harness) {
  * `connect --harness <h>` and the token-free `harness add <h>` verb produce
  * byte-identical output for a given identity.
  *
- *  - claude: CLAUDE.md + .claude/settings.json
- *  - codex:  AGENTS.md + Telora MCP in ~/.codex/config.toml
+ *  - claude: .claude/settings.json (SessionStart seed hook) + retire any repo CLAUDE.md
+ *  - codex:  global $CODEX_HOME/AGENTS.md + Telora MCP in ~/.codex/config.toml
+ *            (repo-root AGENTS.md seed retired)
  *  - cline:  .cline/rules/telora.md + Telora MCP in ~/.cline settings
  *  - cursor: AGENTS.md + .cursor/mcp.json (preload env)
  *  - vscode: AGENTS.md + .vscode/mcp.json (preload env)
@@ -34,7 +35,14 @@ export function harnessGitignoreEntries(harness) {
  */
 export function writeHarnessScaffolding(repoPath, harness, inv, io) {
     if (harness === 'codex') {
-        writeOrMergeAgentsMd(repoPath, inv, io);
+        // The Codex seed is a FILE carrier off the repo root (Codex has no
+        // SessionStart hook). Write the workstation-shared operator carrier
+        // (~/.codex/AGENTS.md, header-less) here; the per-product isolated-home
+        // carrier is written in the connect flow where the local-model home is
+        // provisioned. Retire any repo-root block the connector previously wrote --
+        // the connector no longer owns <repo>/AGENTS.md.
+        writeOrMergeGlobalAgentsMd(io);
+        retireAgentsMdSeed(repoPath, io);
         writeOrMergeCodexMcpToml(io);
     }
     else if (harness === 'cline') {
@@ -45,8 +53,11 @@ export function writeHarnessScaffolding(repoPath, harness, inv, io) {
         writeIdeHarnessScaffolding(repoPath, harness, inv, io);
     }
     else {
-        writeOrMergeClaudeMd(repoPath, inv.productName ?? null, io);
+        // The Claude workstation seed is carried by the SessionStart hook (installed
+        // by writeOrMergeClaudeSettings), not a repo-root CLAUDE.md. Retire any seed
+        // block the connector previously wrote; the connector no longer owns the file.
         writeOrMergeClaudeSettings(repoPath, io);
+        retireClaudeMdSeed(repoPath, io);
     }
 }
 //# sourceMappingURL=scaffolding.js.map

package/dist/cli/connect/scaffolding.js.map

@@ -1 +1 @@
-{"version":3,"file":"scaffolding.js","sourceRoot":"","sources":["../../../src/cli/connect/scaffolding.ts"],"names":[],"mappings":"AAAA;;;;;GAKG;AAIH,OAAO,EAAE,oBAAoB,EAAE,0BAA0B,EAAE,MAAM,aAAa,CAAC;AAC/E,OAAO,EAAE,oBAAoB,EAAE,MAAM,aAAa,CAAC;AACnD,OAAO,EAAE,wBAAwB,EAAE,MAAM,YAAY,CAAC;AACtD,OAAO,EAAE,sBAAsB,EAAE,4BAA4B,EAAE,MAAM,YAAY,CAAC;AAClF,OAAO,EAAE,mBAAmB,EAAE,0BAA0B,EAAE,MAAM,UAAU,CAAC;AAE3E;;;;GAIG;AACH,MAAM,UAAU,uBAAuB,CAAC,OAAwB;IAC9D,OAAO,OAAO,KAAK,QAAQ,IAAI,OAAO,KAAK,QAAQ,CAAC,CAAC,CAAC,CAAC,mBAAmB,CAAC,OAAO,CAAC,CAAC,CAAC,CAAC,CAAC,EAAE,CAAC;AAC5F,CAAC;AAED;;;;;;;;;;;;;;GAcG;AACH,MAAM,UAAU,uBAAuB,CACrC,QAAgB,EAChB,OAAwB,EACxB,GAAgC,EAChC,EAAa;IAEb,IAAI,OAAO,KAAK,OAAO,EAAE,CAAC;QACxB,oBAAoB,CAAC,QAAQ,EAAE,GAAG,EAAE,EAAE,CAAC,CAAC;QACxC,wBAAwB,CAAC,EAAE,CAAC,CAAC;IAC/B,CAAC;SAAM,IAAI,OAAO,KAAK,OAAO,EAAE,CAAC;QAC/B,sBAAsB,CAAC,QAAQ,EAAE,GAAG,EAAE,EAAE,CAAC,CAAC;QAC1C,4BAA4B,CAAC,EAAE,CAAC,CAAC;IACnC,CAAC;SAAM,IAAI,OAAO,KAAK,QAAQ,IAAI,OAAO,KAAK,QAAQ,EAAE,CAAC;QACxD,0BAA0B,CAAC,QAAQ,EAAE,OAAO,EAAE,GAAG,EAAE,EAAE,CAAC,CAAC;IACzD,CAAC;SAAM,CAAC;QACN,oBAAoB,CAAC,QAAQ,EAAE,GAAG,CAAC,WAAW,IAAI,IAAI,EAAE,EAAE,CAAC,CAAC;QAC5D,0BAA0B,CAAC,QAAQ,EAAE,EAAE,CAAC,CAAC;IAC3C,CAAC;AACH,CAAC"}
+{"version":3,"file":"scaffolding.js","sourceRoot":"","sources":["../../../src/cli/connect/scaffolding.ts"],"names":[],"mappings":"AAAA;;;;;GAKG;AAIH,OAAO,EAAE,kBAAkB,EAAE,0BAA0B,EAAE,MAAM,aAAa,CAAC;AAC7E,OAAO,EACL,0BAA0B,EAC1B,kBAAkB,GACnB,MAAM,aAAa,CAAC;AACrB,OAAO,EAAE,wBAAwB,EAAE,MAAM,YAAY,CAAC;AACtD,OAAO,EAAE,sBAAsB,EAAE,4BAA4B,EAAE,MAAM,YAAY,CAAC;AAClF,OAAO,EAAE,mBAAmB,EAAE,0BAA0B,EAAE,MAAM,UAAU,CAAC;AAE3E;;;;GAIG;AACH,MAAM,UAAU,uBAAuB,CAAC,OAAwB;IAC9D,OAAO,OAAO,KAAK,QAAQ,IAAI,OAAO,KAAK,QAAQ,CAAC,CAAC,CAAC,CAAC,mBAAmB,CAAC,OAAO,CAAC,CAAC,CAAC,CAAC,CAAC,EAAE,CAAC;AAC5F,CAAC;AAED;;;;;;;;;;;;;;;GAeG;AACH,MAAM,UAAU,uBAAuB,CACrC,QAAgB,EAChB,OAAwB,EACxB,GAAgC,EAChC,EAAa;IAEb,IAAI,OAAO,KAAK,OAAO,EAAE,CAAC;QACxB,mEAAmE;QACnE,oEAAoE;QACpE,wEAAwE;QACxE,uEAAuE;QACvE,4EAA4E;QAC5E,iDAAiD;QACjD,0BAA0B,CAAC,EAAE,CAAC,CAAC;QAC/B,kBAAkB,CAAC,QAAQ,EAAE,EAAE,CAAC,CAAC;QACjC,wBAAwB,CAAC,EAAE,CAAC,CAAC;IAC/B,CAAC;SAAM,IAAI,OAAO,KAAK,OAAO,EAAE,CAAC;QAC/B,sBAAsB,CAAC,QAAQ,EAAE,GAAG,EAAE,EAAE,CAAC,CAAC;QAC1C,4BAA4B,CAAC,EAAE,CAAC,CAAC;IACnC,CAAC;SAAM,IAAI,OAAO,KAAK,QAAQ,IAAI,OAAO,KAAK,QAAQ,EAAE,CAAC;QACxD,0BAA0B,CAAC,QAAQ,EAAE,OAAO,EAAE,GAAG,EAAE,EAAE,CAAC,CAAC;IACzD,CAAC;SAAM,CAAC;QACN,6EAA6E;QAC7E,6EAA6E;QAC7E,+EAA+E;QAC/E,0BAA0B,CAAC,QAAQ,EAAE,EAAE,CAAC,CAAC;QACzC,kBAAkB,CAAC,QAAQ,EAAE,EAAE,CAAC,CAAC;IACnC,CAAC;AACH,CAAC"}

package/dist/cli/connect/seed-retirement.d.ts

@@ -0,0 +1,39 @@
+/**
+ * Seed-file retirement: remove the delimited Telora seed block from a repo-root
+ * harness file the connector once wrote (CLAUDE.md / AGENTS.md).
+ *
+ * The seed is workstation-scoped context now, carried by the harness at session
+ * open (the Claude SessionStart hook / the global Codex AGENTS.md), not a file
+ * the connector writes to the repo root. This pass cleans up the files the file-
+ * writer era left behind, honoring the ownership asymmetry:
+ *
+ *   - a file the CONNECTOR created is the connector's to remove;
+ *   - a file the REPO tracks is the repo's, and is only ever reported on.
+ *
+ * Three on-disk states are met (all keyed on the stable BEGIN/END delimiters):
+ *   1. UNTRACKED + seed-only (the file is nothing but the delimited block) ->
+ *      delete the file.
+ *   2. UNTRACKED + block inside user-authored content -> strip only the block,
+ *      keep the file and the user's content.
+ *   3. TRACKED file containing the block -> REPORT ONLY, never rewrite. A
+ *      connector that rewrites tracked content reintroduces the very ownership
+ *      conflict being retired.
+ * A file with no Telora delimiters is a clean no-op.
+ *
+ * Idempotent and degrade-safe: any error is swallowed with a note so a boot /
+ * connect flow is never blocked by one repo's unreadable file.
+ */
+import type { ConnectIO } from './shared.js';
+/** True when `relPath` is a git-tracked file in `repoPath`. */
+export declare function isPathTracked(repoPath: string, relPath: string): boolean;
+/**
+ * Retire the connector-written Telora seed block from `<repoPath>/<filename>`.
+ *
+ * @param repoPath   Repo root.
+ * @param filename   Seed file name (e.g. 'CLAUDE.md', 'AGENTS.md').
+ * @param beginMarker Stable BEGIN delimiter.
+ * @param endMarker   Stable END delimiter.
+ * @param io          Output sink (notes routed to io.out).
+ */
+export declare function retireSeedFile(repoPath: string, filename: string, beginMarker: string, endMarker: string, io: ConnectIO): void;
+//# sourceMappingURL=seed-retirement.d.ts.map

package/dist/cli/connect/seed-retirement.d.ts.map

@@ -0,0 +1 @@
+{"version":3,"file":"seed-retirement.d.ts","sourceRoot":"","sources":["../../../src/cli/connect/seed-retirement.ts"],"names":[],"mappings":"AAAA;;;;;;;;;;;;;;;;;;;;;;;;GAwBG;AAKH,OAAO,KAAK,EAAE,SAAS,EAAE,MAAM,aAAa,CAAC;AAE7C,+DAA+D;AAC/D,wBAAgB,aAAa,CAAC,QAAQ,EAAE,MAAM,EAAE,OAAO,EAAE,MAAM,GAAG,OAAO,CAWxE;AAED;;;;;;;;GAQG;AACH,wBAAgB,cAAc,CAC5B,QAAQ,EAAE,MAAM,EAChB,QAAQ,EAAE,MAAM,EAChB,WAAW,EAAE,MAAM,EACnB,SAAS,EAAE,MAAM,EACjB,EAAE,EAAE,SAAS,GACZ,IAAI,CA8CN"}