@uzysjung/agent-harness 26.107.0 → 26.108.0

package/dist/index.js

@@ -24,7 +24,7 @@ import {
   isInstallScope,
   isTrack,
   resolveScope
-} from "./chunk-HINGFZ65.js";
+} from "./chunk-ZEV3DL6G.js";
 
 // node_modules/sisteransi/src/index.js
 var require_src = __commonJS({
@@ -709,7 +709,7 @@ var cac = (name = "") => new CAC(name);
 // package.json
 var package_default = {
   name: "@uzysjung/agent-harness",
-  version: "26.107.0",
+  version: "26.108.0",
   description: "Curate vetted AI-coding skills & plugins by your tech stack \u2014 install only what you need, across Claude Code, Codex, OpenCode & Antigravity",
   type: "module",
   publishConfig: {
@@ -902,13 +902,13 @@ function padDisplay(s, width) {
 init_esm_shims();
 import {
   chmodSync as chmodSync2,
-  existsSync as existsSync11,
+  existsSync as existsSync12,
   mkdirSync as mkdirSync4,
   readdirSync as readdirSync3,
   readFileSync as readFileSync11,
   writeFileSync as writeFileSync9
 } from "fs";
-import { basename as basename4, dirname as dirname4, join as join10, resolve } from "path";
+import { basename as basename4, dirname as dirname4, join as join11, resolve } from "path";
 
 // src/antigravity/transform.ts
 init_esm_shims();
@@ -1154,21 +1154,59 @@ function writeRules(harnessRoot, projectDir) {
   return target;
 }
 
+// src/ci-scaffold.ts
+init_esm_shims();
+import { existsSync as existsSync3 } from "fs";
+import { join as join3 } from "path";
+var PYTHON_TRACKS = "data|csr-fastapi|full";
+var VARIANTS = [
+  {
+    source: "ci-node.yml",
+    target: "ci.yml",
+    applies: (tracks) => anyTrack(tracks, "csr-*|ssr-*|tooling|full") || !anyTrack(tracks, PYTHON_TRACKS)
+  },
+  {
+    source: "ci-python.yml",
+    target: "ci-python.yml",
+    applies: (tracks) => anyTrack(tracks, PYTHON_TRACKS)
+  },
+  {
+    source: "e2e.yml",
+    target: "e2e.yml",
+    applies: (tracks) => hasUiTrack(tracks)
+  }
+];
+function installCiScaffold(ctx) {
+  const report = { written: [], skippedExisting: [] };
+  for (const v2 of VARIANTS) {
+    if (!v2.applies(ctx.tracks)) continue;
+    const relTarget = `.github/workflows/${v2.target}`;
+    const target = join3(ctx.projectDir, relTarget);
+    if (existsSync3(target)) {
+      report.skippedExisting.push(relTarget);
+      continue;
+    }
+    copyFile(join3(ctx.harnessRoot, "templates/github-workflows", v2.source), target);
+    report.written.push(relTarget);
+  }
+  return report;
+}
+
 // src/codex/opt-in.ts
 init_esm_shims();
 import { homedir } from "os";
-import { join as join3 } from "path";
+import { join as join4 } from "path";
 
 // src/codex/trust-entry.ts
 init_esm_shims();
-import { existsSync as existsSync3, mkdirSync as mkdirSync2, readFileSync as readFileSync3, writeFileSync as writeFileSync2 } from "fs";
+import { existsSync as existsSync4, mkdirSync as mkdirSync2, readFileSync as readFileSync3, writeFileSync as writeFileSync2 } from "fs";
 import { dirname as dirname2 } from "path";
 var TRUST_BLOCK_REGEX = /\[projects\."([^"]+)"\]/g;
 function registerTrustEntry(opts) {
   const { configPath, projectDir } = opts;
   try {
     mkdirSync2(dirname2(configPath), { recursive: true });
-    const existing = existsSync3(configPath) ? readFileSync3(configPath, "utf8") : "";
+    const existing = existsSync4(configPath) ? readFileSync3(configPath, "utf8") : "";
     if (hasTrustEntry(existing, projectDir)) {
       return { status: "already-present" };
     }
@@ -1192,8 +1230,8 @@ function hasTrustEntry(configContent, projectDir) {
 
 // src/codex/opt-in.ts
 function runCodexOptIn(ctx) {
-  const codexHome = ctx.codexHome ?? join3(homedir(), ".codex");
-  const configPath = join3(codexHome, "config.toml");
+  const codexHome = ctx.codexHome ?? join4(homedir(), ".codex");
+  const configPath = join4(codexHome, "config.toml");
   const result = registerTrustEntry({ configPath, projectDir: ctx.projectDir });
   return {
     trustEntry: {
@@ -1206,8 +1244,8 @@ function runCodexOptIn(ctx) {
 
 // src/codex/transform.ts
 init_esm_shims();
-import { chmodSync, existsSync as existsSync4, readFileSync as readFileSync4, writeFileSync as writeFileSync3 } from "fs";
-import { basename as basename2, join as join4 } from "path";
+import { chmodSync, existsSync as existsSync5, readFileSync as readFileSync4, writeFileSync as writeFileSync3 } from "fs";
+import { basename as basename2, join as join5 } from "path";
 
 // src/codex/config-toml.ts
 init_esm_shims();
@@ -1276,12 +1314,12 @@ var HOOK_NAMES = ["session-start", "hito-counter"];
 var ENV_VAR_RENAME = /CLAUDE_PROJECT_DIR/g;
 function runCodexTransform(params) {
   const { harnessRoot, projectDir, selectedInternalSkills = [] } = params;
-  const claudeMd = readRequired(join4(harnessRoot, "templates/CLAUDE.md"));
-  const agentsTemplate = readRequired(join4(harnessRoot, "templates/codex/AGENTS.md.template"));
-  const configTemplate = readRequired(join4(harnessRoot, "templates/codex/config.toml.template"));
+  const claudeMd = readRequired(join5(harnessRoot, "templates/CLAUDE.md"));
+  const agentsTemplate = readRequired(join5(harnessRoot, "templates/codex/AGENTS.md.template"));
+  const configTemplate = readRequired(join5(harnessRoot, "templates/codex/config.toml.template"));
   const projectName = basename2(projectDir);
-  const mcp = readOptionalJson(join4(harnessRoot, ".mcp.json"));
-  const agentsMdPath = join4(projectDir, "AGENTS.md");
+  const mcp = readOptionalJson(join5(harnessRoot, ".mcp.json"));
+  const agentsMdPath = join5(projectDir, "AGENTS.md");
   ensureDir(projectDir);
   const agentsMdOut = renderAgentsMd({
     template: agentsTemplate,
@@ -1291,8 +1329,8 @@ function runCodexTransform(params) {
   });
   backupFileIfChanged(agentsMdPath, agentsMdOut);
   writeFileSync3(agentsMdPath, agentsMdOut);
-  const configTomlPath = join4(projectDir, ".codex/config.toml");
-  ensureDir(join4(projectDir, ".codex"));
+  const configTomlPath = join5(projectDir, ".codex/config.toml");
+  ensureDir(join5(projectDir, ".codex"));
   writeFileSync3(
     configTomlPath,
     renderConfigToml({
@@ -1302,42 +1340,42 @@ function runCodexTransform(params) {
       mcp
     })
   );
-  const hookDir = join4(projectDir, ".codex/hooks");
+  const hookDir = join5(projectDir, ".codex/hooks");
   ensureDir(hookDir);
   const hookFiles = [];
   for (const hook of HOOK_NAMES) {
-    const src = join4(harnessRoot, "templates/hooks", `${hook}.sh`);
-    if (!existsSync4(src)) {
+    const src = join5(harnessRoot, "templates/hooks", `${hook}.sh`);
+    if (!existsSync5(src)) {
       continue;
     }
     const ported = readFileSync4(src, "utf8").replace(ENV_VAR_RENAME, "CODEX_PROJECT_DIR");
-    const target = join4(hookDir, `${hook}.sh`);
+    const target = join5(hookDir, `${hook}.sh`);
     writeFileSync3(target, ported);
     chmodSync(target, 493);
     hookFiles.push(target);
   }
   const skillFiles = [];
   for (const id of selectedInternalSkills) {
-    const src = join4(harnessRoot, "templates/skills", id, "SKILL.md");
-    if (!existsSync4(src)) {
+    const src = join5(harnessRoot, "templates/skills", id, "SKILL.md");
+    if (!existsSync5(src)) {
       continue;
     }
-    const skillDir = join4(projectDir, ".agents", "skills", id);
+    const skillDir = join5(projectDir, ".agents", "skills", id);
     ensureDir(skillDir);
-    const target = join4(skillDir, "SKILL.md");
+    const target = join5(skillDir, "SKILL.md");
     writeFileSync3(target, renderBundledSkill(readFileSync4(src, "utf8")));
     skillFiles.push(target);
   }
   return { agentsMdPath, configTomlPath, hookFiles, skillFiles };
 }
 function readRequired(path) {
-  if (!existsSync4(path)) {
+  if (!existsSync5(path)) {
     throw new Error(`Codex transform: required source missing: ${path}`);
   }
   return readFileSync4(path, "utf8");
 }
 function readOptionalJson(path) {
-  if (!existsSync4(path)) {
+  if (!existsSync5(path)) {
     return null;
   }
   try {
@@ -1349,8 +1387,8 @@ function readOptionalJson(path) {
 
 // src/env-files.ts
 init_esm_shims();
-import { appendFileSync, existsSync as existsSync5, readFileSync as readFileSync5, writeFileSync as writeFileSync4 } from "fs";
-import { join as join5 } from "path";
+import { appendFileSync, existsSync as existsSync6, readFileSync as readFileSync5, writeFileSync as writeFileSync4 } from "fs";
+import { join as join6 } from "path";
 var ENV_EXAMPLE_BODY = `# .env.example \u2014 csr-supabase Track
 # Copy to .env (gitignored) and fill in values: cp .env.example .env
 
@@ -1387,16 +1425,16 @@ function writeEnvExample(projectDir, tracks) {
   if (!tracks.some((t) => ENV_EXAMPLE_TRACKS.includes(t))) {
     return false;
   }
-  const path = join5(projectDir, ".env.example");
-  if (existsSync5(path)) {
+  const path = join6(projectDir, ".env.example");
+  if (existsSync6(path)) {
     return false;
   }
   writeFileSync4(path, ENV_EXAMPLE_BODY);
   return true;
 }
 function addGitignoreEnv(projectDir) {
-  const path = join5(projectDir, ".gitignore");
-  if (!existsSync5(path)) {
+  const path = join6(projectDir, ".gitignore");
+  if (!existsSync6(path)) {
     return false;
   }
   const content = readFileSync5(path, "utf8");
@@ -1413,8 +1451,8 @@ function addGitignoreEnv(projectDir) {
 var NPX_SKILLS_AGENT_DIRS = [".factory/", ".goose/"];
 var GITIGNORE_NPX_SKILLS_HEADER = "# npx skills add multi-CLI cache (auto-added by agent-harness)";
 function addGitignoreNpxSkillsAgents(projectDir) {
-  const path = join5(projectDir, ".gitignore");
-  if (!existsSync5(path)) {
+  const path = join6(projectDir, ".gitignore");
+  if (!existsSync6(path)) {
     return [];
   }
   const content = readFileSync5(path, "utf8");
@@ -1433,12 +1471,12 @@ ${block}
   return [...missing];
 }
 function writeMcpAllowlist(projectDir) {
-  const allowlistPath = join5(projectDir, ".mcp-allowlist");
-  if (existsSync5(allowlistPath)) {
+  const allowlistPath = join6(projectDir, ".mcp-allowlist");
+  if (existsSync6(allowlistPath)) {
     return null;
   }
-  const mcpPath = join5(projectDir, ".mcp.json");
-  if (!existsSync5(mcpPath)) {
+  const mcpPath = join6(projectDir, ".mcp.json");
+  if (!existsSync6(mcpPath)) {
     return null;
   }
   let names = [];
@@ -1466,9 +1504,9 @@ function writeMcpAllowlist(projectDir) {
 // src/external-installer.ts
 init_esm_shims();
 import { spawnSync } from "child_process";
-import { existsSync as existsSync6, readdirSync, readFileSync as readFileSync6 } from "fs";
+import { existsSync as existsSync7, readdirSync, readFileSync as readFileSync6 } from "fs";
 import { homedir as homedir2 } from "os";
-import { join as join6 } from "path";
+import { join as join7 } from "path";
 var DEFAULT_SPAWN_TIMEOUT_MS = 12e4;
 function selectExternalTargets(assets, ctx) {
   const conditionPassed = filterApplicableAssets(assets, ctx).filter(
@@ -1544,8 +1582,8 @@ function installOne(asset, ctx) {
         cwd
       );
     case "shell-script": {
-      const scriptPath = join6(ctx.harnessRoot, method.script);
-      if (!existsSync6(scriptPath)) {
+      const scriptPath = join7(ctx.harnessRoot, method.script);
+      if (!existsSync7(scriptPath)) {
         return {
           asset,
           ok: false,
@@ -1635,16 +1673,16 @@ function detectVersion(method, spawn) {
         if (at2 <= 0) return void 0;
         const plugin = method.pluginId.slice(0, at2);
         const marketplaceShort = method.pluginId.slice(at2 + 1);
-        const cacheBase = join6(homedir2(), ".claude/plugins/cache", marketplaceShort, plugin);
-        if (!existsSync6(cacheBase)) return void 0;
+        const cacheBase = join7(homedir2(), ".claude/plugins/cache", marketplaceShort, plugin);
+        if (!existsSync7(cacheBase)) return void 0;
         const versions = readdirSync(cacheBase).filter((v2) => /^\d/.test(v2)).sort();
         return versions.at(-1);
       }
       case "npm": {
         const npmRoot = getNpmGlobalRoot(spawn);
         if (!npmRoot) return void 0;
-        const pkgJson = join6(npmRoot, method.pkg, "package.json");
-        if (!existsSync6(pkgJson)) return void 0;
+        const pkgJson = join7(npmRoot, method.pkg, "package.json");
+        if (!existsSync7(pkgJson)) return void 0;
         const parsed = JSON.parse(readFileSync6(pkgJson, "utf8"));
         return parsed.version;
       }
@@ -1673,8 +1711,8 @@ function getNpmGlobalRoot(spawn) {
 // src/install-log.ts
 init_esm_shims();
 import { createHash } from "crypto";
-import { existsSync as existsSync7, mkdirSync as mkdirSync3, readFileSync as readFileSync7, writeFileSync as writeFileSync5 } from "fs";
-import { dirname as dirname3, join as join7 } from "path";
+import { existsSync as existsSync8, mkdirSync as mkdirSync3, readFileSync as readFileSync7, writeFileSync as writeFileSync5 } from "fs";
+import { dirname as dirname3, join as join8 } from "path";
 var INSTALL_LOG_FILENAME = ".harness-install.json";
 var INSTALL_LOG_VERSION = 1;
 function buildAssetEntries(report, scope) {
@@ -1732,15 +1770,15 @@ function hashContent(content) {
   return createHash("sha256").update(content, "utf8").digest("hex");
 }
 function writeInstallLog(projectDir, log) {
-  const path = join7(projectDir, ".claude", INSTALL_LOG_FILENAME);
+  const path = join8(projectDir, ".claude", INSTALL_LOG_FILENAME);
   mkdirSync3(dirname3(path), { recursive: true });
   writeFileSync5(path, `${JSON.stringify(log, null, 2)}
 `, "utf8");
   return path;
 }
 function readInstallLog(projectDir) {
-  const path = join7(projectDir, ".claude", INSTALL_LOG_FILENAME);
-  if (!existsSync7(path)) return null;
+  const path = join8(projectDir, ".claude", INSTALL_LOG_FILENAME);
+  if (!existsSync8(path)) return null;
   try {
     const parsed = JSON.parse(readFileSync7(path, "utf8"));
     if (Array.isArray(parsed.assets)) {
@@ -1754,7 +1792,7 @@ function readInstallLog(projectDir) {
   }
 }
 function installLogPath(projectDir) {
-  return join7(projectDir, ".claude", INSTALL_LOG_FILENAME);
+  return join8(projectDir, ".claude", INSTALL_LOG_FILENAME);
 }
 
 // src/manifest.ts
@@ -2002,7 +2040,7 @@ function buildManifest(spec) {
 
 // src/mcp-merge.ts
 init_esm_shims();
-import { existsSync as existsSync8, readFileSync as readFileSync8, writeFileSync as writeFileSync6 } from "fs";
+import { existsSync as existsSync9, readFileSync as readFileSync8, writeFileSync as writeFileSync6 } from "fs";
 function parseTrackMcpMap(raw) {
   const rows = [];
   for (const line of raw.split(/\r?\n/)) {
@@ -2054,8 +2092,8 @@ function mergeMcpServers(base, rows, tracks) {
 }
 function composeMcpJson(opts) {
   const base = JSON.parse(readFileSync8(opts.templateMcpPath, "utf8"));
-  const merged = opts.existingPath && existsSync8(opts.existingPath) ? mergeUserBase(base, opts.existingPath) : base;
-  const mapRaw = existsSync8(opts.trackMapPath) ? readFileSync8(opts.trackMapPath, "utf8") : "";
+  const merged = opts.existingPath && existsSync9(opts.existingPath) ? mergeUserBase(base, opts.existingPath) : base;
+  const mapRaw = existsSync9(opts.trackMapPath) ? readFileSync8(opts.trackMapPath, "utf8") : "";
   const rows = parseTrackMcpMap(mapRaw);
   return mergeMcpServers(merged, rows, opts.tracks);
 }
@@ -2077,8 +2115,8 @@ function writeMcpJson(path, mcp) {
 
 // src/opencode/transform.ts
 init_esm_shims();
-import { existsSync as existsSync9, readFileSync as readFileSync9, writeFileSync as writeFileSync7 } from "fs";
-import { basename as basename3, join as join8 } from "path";
+import { existsSync as existsSync10, readFileSync as readFileSync9, writeFileSync as writeFileSync7 } from "fs";
+import { basename as basename3, join as join9 } from "path";
 
 // src/opencode/agents-md.ts
 init_esm_shims();
@@ -2179,15 +2217,15 @@ function parseTemplate(template) {
 // src/opencode/transform.ts
 function runOpencodeTransform(params) {
   const { harnessRoot, projectDir, selectedInternalSkills = [] } = params;
-  const claudeMd = readRequired2(join8(harnessRoot, "templates/CLAUDE.md"));
-  const agentsTemplate = readRequired2(join8(harnessRoot, "templates/opencode/AGENTS.md.template"));
+  const claudeMd = readRequired2(join9(harnessRoot, "templates/CLAUDE.md"));
+  const agentsTemplate = readRequired2(join9(harnessRoot, "templates/opencode/AGENTS.md.template"));
   const opencodeTemplate = readRequired2(
-    join8(harnessRoot, "templates/opencode/opencode.json.template")
+    join9(harnessRoot, "templates/opencode/opencode.json.template")
   );
   const projectName = basename3(projectDir);
-  const mcp = readOptionalJson2(join8(harnessRoot, ".mcp.json"));
+  const mcp = readOptionalJson2(join9(harnessRoot, ".mcp.json"));
   ensureDir(projectDir);
-  const agentsMdPath = join8(projectDir, "AGENTS.md");
+  const agentsMdPath = join9(projectDir, "AGENTS.md");
   const agentsMdOut = renderAgentsMd2({
     template: agentsTemplate,
     claudeMd,
@@ -2196,18 +2234,18 @@ function runOpencodeTransform(params) {
   });
   backupFileIfChanged(agentsMdPath, agentsMdOut);
   writeFileSync7(agentsMdPath, agentsMdOut);
-  const opencodeJsonPath = join8(projectDir, "opencode.json");
+  const opencodeJsonPath = join9(projectDir, "opencode.json");
   writeFileSync7(opencodeJsonPath, renderOpencodeJson({ template: opencodeTemplate, mcp }));
-  const cmdDir = join8(projectDir, ".opencode/commands");
+  const cmdDir = join9(projectDir, ".opencode/commands");
   ensureDir(cmdDir);
   const commandFiles = [];
   for (const id of selectedInternalSkills) {
-    const src = join8(harnessRoot, "templates/skills", id, "SKILL.md");
-    if (!existsSync9(src)) {
+    const src = join9(harnessRoot, "templates/skills", id, "SKILL.md");
+    if (!existsSync10(src)) {
       continue;
     }
-    const target = join8(cmdDir, `${id}.md`);
-    const shellDependent = existsSync9(join8(harnessRoot, "templates/skills", id, "scripts"));
+    const target = join9(cmdDir, `${id}.md`);
+    const shellDependent = existsSync10(join9(harnessRoot, "templates/skills", id, "scripts"));
     writeFileSync7(
       target,
       renderCommandFromSkill(readFileSync9(src, "utf8"), id, { shellDependent })
@@ -2217,13 +2255,13 @@ function runOpencodeTransform(params) {
   return { agentsMdPath, opencodeJsonPath, commandFiles };
 }
 function readRequired2(path) {
-  if (!existsSync9(path)) {
+  if (!existsSync10(path)) {
     throw new Error(`OpenCode transform: required source missing: ${path}`);
   }
   return readFileSync9(path, "utf8");
 }
 function readOptionalJson2(path) {
-  if (!existsSync9(path)) {
+  if (!existsSync10(path)) {
     return null;
   }
   try {
@@ -2261,15 +2299,15 @@ function addPreToolUseHook(settings, matcher, command) {
 init_esm_shims();
 import {
   copyFileSync as copyFileSync2,
-  existsSync as existsSync10,
+  existsSync as existsSync11,
   readdirSync as readdirSync2,
   readFileSync as readFileSync10,
   unlinkSync,
   writeFileSync as writeFileSync8
 } from "fs";
-import { join as join9 } from "path";
+import { join as join10 } from "path";
 function runUpdateMode(projectDir, templatesDir) {
-  const claudeDir = join9(projectDir, ".claude");
+  const claudeDir = join10(projectDir, ".claude");
   const report = {
     updated: {},
     pruned: {},
@@ -2278,26 +2316,26 @@ function runUpdateMode(projectDir, templatesDir) {
   };
   const targets = [
     {
-      target: join9(claudeDir, "rules"),
-      source: join9(templatesDir, "rules"),
+      target: join10(claudeDir, "rules"),
+      source: join10(templatesDir, "rules"),
       pattern: ".md",
       label: ".claude/rules"
     },
     {
-      target: join9(claudeDir, "agents"),
-      source: join9(templatesDir, "agents"),
+      target: join10(claudeDir, "agents"),
+      source: join10(templatesDir, "agents"),
       pattern: ".md",
       label: ".claude/agents"
     },
     {
-      target: join9(claudeDir, "commands/uzys"),
-      source: join9(templatesDir, "commands/uzys"),
+      target: join10(claudeDir, "commands/uzys"),
+      source: join10(templatesDir, "commands/uzys"),
       pattern: ".md",
       label: ".claude/commands/uzys"
     },
     {
-      target: join9(claudeDir, "hooks"),
-      source: join9(templatesDir, "hooks"),
+      target: join10(claudeDir, "hooks"),
+      source: join10(templatesDir, "hooks"),
       pattern: ".sh",
       label: ".claude/hooks"
     }
@@ -2306,26 +2344,26 @@ function runUpdateMode(projectDir, templatesDir) {
     report.updated[t.label] = updateDir(t.target, t.source, t.pattern);
     report.pruned[t.label] = pruneOrphans(t.target, t.source, t.pattern);
   }
-  const claudeMd = join9(claudeDir, "CLAUDE.md");
-  const templateMd = join9(templatesDir, "CLAUDE.md");
-  if (existsSync10(claudeMd) && existsSync10(templateMd)) {
+  const claudeMd = join10(claudeDir, "CLAUDE.md");
+  const templateMd = join10(templatesDir, "CLAUDE.md");
+  if (existsSync11(claudeMd) && existsSync11(templateMd)) {
     copyFileSync2(templateMd, claudeMd);
     report.claudeMdUpdated = true;
   }
-  const settingsPath = join9(claudeDir, "settings.json");
-  if (existsSync10(settingsPath)) {
-    report.staleHookRefs = cleanStaleHookRefs(settingsPath, join9(claudeDir, "hooks"));
+  const settingsPath = join10(claudeDir, "settings.json");
+  if (existsSync11(settingsPath)) {
+    report.staleHookRefs = cleanStaleHookRefs(settingsPath, join10(claudeDir, "hooks"));
   }
   return report;
 }
 function updateDir(target, source, ext) {
-  if (!existsSync10(target) || !existsSync10(source)) return 0;
+  if (!existsSync11(target) || !existsSync11(source)) return 0;
   let count = 0;
   for (const file of readdirSync2(target)) {
     if (!file.endsWith(ext)) continue;
-    const targetFile = join9(target, file);
-    const sourceFile = join9(source, file);
-    if (existsSync10(sourceFile)) {
+    const targetFile = join10(target, file);
+    const sourceFile = join10(source, file);
+    if (existsSync11(sourceFile)) {
       copyFileSync2(sourceFile, targetFile);
       count++;
     }
@@ -2333,13 +2371,13 @@ function updateDir(target, source, ext) {
   return count;
 }
 function pruneOrphans(target, source, ext) {
-  if (!existsSync10(target) || !existsSync10(source)) return [];
+  if (!existsSync11(target) || !existsSync11(source)) return [];
   const removed = [];
   for (const file of readdirSync2(target)) {
     if (!file.endsWith(ext)) continue;
-    const sourceFile = join9(source, file);
-    if (!existsSync10(sourceFile)) {
-      const targetFile = join9(target, file);
+    const sourceFile = join10(source, file);
+    if (!existsSync11(sourceFile)) {
+      const targetFile = join10(target, file);
       try {
         unlinkSync(targetFile);
         removed.push(file);
@@ -2380,7 +2418,7 @@ function keepHookRef(hook, hooksDir, removed) {
   const refMatch = (hook?.command ?? "").match(/\/\.claude\/hooks\/([^"\s/]+\.sh)/);
   if (!refMatch?.[1]) return true;
   const fname = refMatch[1];
-  const exists = existsSync10(join9(hooksDir, fname));
+  const exists = existsSync11(join10(hooksDir, fname));
   if (!exists && !removed.includes(fname)) removed.push(fname);
   return exists;
 }
@@ -2391,12 +2429,12 @@ var KARPATHY_ASSET_ID = "karpathy-coder";
 function runInstall(ctx) {
   const { harnessRoot, projectDir, spec } = ctx;
   const mode = ctx.mode ?? "fresh";
-  const templatesDir = join10(harnessRoot, "templates");
-  if (!existsSync11(templatesDir)) {
+  const templatesDir = join11(harnessRoot, "templates");
+  if (!existsSync12(templatesDir)) {
     throw new Error(`Templates dir not found: ${templatesDir}`);
   }
-  const claudeDir = join10(projectDir, ".claude");
-  if (mode === "update" && !existsSync11(claudeDir)) {
+  const claudeDir = join11(projectDir, ".claude");
+  if (mode === "update" && !existsSync12(claudeDir)) {
     throw new Error(`Update mode requires existing .claude/ at ${claudeDir}`);
   }
   const backupPath = resolveBackupPath(ctx, mode, claudeDir);
@@ -2406,6 +2444,11 @@ function runInstall(ctx) {
   const manifestSpec = buildManifestSpec(spec);
   const base = spec.cli.includes("claude") ? installClaudeBaseline(manifestSpec, projectDir, templatesDir) : emptyClaudeBaseline();
   const mcpResult = composeAndWriteMcp(harnessRoot, projectDir, spec);
+  const ciScaffold = isAssetSelected("ci-scaffold", {
+    tracks: spec.tracks,
+    options: spec.options,
+    ...spec.userOverride ? { userOverride: spec.userOverride } : {}
+  }) ? installCiScaffold({ harnessRoot, projectDir, tracks: spec.tracks }) : null;
   const baseline = {
     filesCopied: base.filesCopied,
     dirsCopied: base.dirsCopied,
@@ -2414,6 +2457,7 @@ function runInstall(ctx) {
     installedTracks: [...spec.tracks].sort(),
     mcpServers: Object.keys(mcpResult.mcpServers).sort(),
     ...runCliTransforms(spec, harnessRoot, projectDir, manifestSpec.selectedInternalSkills),
+    ciScaffold,
     updateMode: null,
     mode,
     envFiles: writeEnvironmentFiles(projectDir, spec.tracks),
@@ -2445,6 +2489,7 @@ function runUpdateInstall(ctx, templatesDir, backupPath) {
     codexOptIn: null,
     opencode: null,
     antigravity: null,
+    ciScaffold: null,
     updateMode: updateReport,
     mode: "update",
     envFiles: {
@@ -2498,9 +2543,9 @@ function installClaudeBaseline(manifestSpec, projectDir, templatesDir) {
     if (!entry.applies(manifestSpec)) {
       continue;
     }
-    const source = join10(templatesDir, entry.source);
-    const target = join10(projectDir, entry.target);
-    if (!existsSync11(source)) {
+    const source = join11(templatesDir, entry.source);
+    const target = join11(projectDir, entry.target);
+    if (!existsSync12(source)) {
       result.skipped += 1;
       continue;
     }
@@ -2519,8 +2564,8 @@ function installClaudeBaseline(manifestSpec, projectDir, templatesDir) {
     }
     accumulateCategory(result.categories, entry);
   }
-  const hookDir = join10(projectDir, ".claude/hooks");
-  if (existsSync11(hookDir)) {
+  const hookDir = join11(projectDir, ".claude/hooks");
+  if (existsSync12(hookDir)) {
     chmodHooksSync(hookDir);
   }
   writeInstalledTracks(projectDir, manifestSpec.tracks);
@@ -2630,10 +2675,10 @@ function wireKarpathyHook(spec, external, harnessRoot, projectDir) {
   if (!karpathyResult?.ok) {
     return { wired: false, reason: "plugin-install-failed" };
   }
-  const sourceHook = join10(harnessRoot, "templates/hooks/karpathy-gate.sh");
-  const targetHook = join10(projectDir, ".claude/hooks/karpathy-gate.sh");
+  const sourceHook = join11(harnessRoot, "templates/hooks/karpathy-gate.sh");
+  const targetHook = join11(projectDir, ".claude/hooks/karpathy-gate.sh");
   let hookScriptCopied = false;
-  if (existsSync11(sourceHook)) {
+  if (existsSync12(sourceHook)) {
     copyFile(sourceHook, targetHook);
     try {
       chmodSync2(targetHook, 493);
@@ -2641,9 +2686,9 @@ function wireKarpathyHook(spec, external, harnessRoot, projectDir) {
     }
     hookScriptCopied = true;
   }
-  const settingsPath = join10(projectDir, ".claude/settings.json");
+  const settingsPath = join11(projectDir, ".claude/settings.json");
   let settingsUpdated = false;
-  if (existsSync11(settingsPath)) {
+  if (existsSync12(settingsPath)) {
     const raw = readFileSync11(settingsPath, "utf8");
     let before;
     try {
@@ -2663,10 +2708,10 @@ function wireKarpathyHook(spec, external, harnessRoot, projectDir) {
   return { wired: true, settingsUpdated, hookScriptCopied };
 }
 function composeAndWriteMcp(harnessRoot, projectDir, spec) {
-  const mcpPath = join10(projectDir, ".mcp.json");
+  const mcpPath = join11(projectDir, ".mcp.json");
   const composed = composeMcpJson({
-    templateMcpPath: join10(harnessRoot, "templates/mcp.json"),
-    trackMapPath: join10(harnessRoot, "templates/track-mcp-map.tsv"),
+    templateMcpPath: join11(harnessRoot, "templates/mcp.json"),
+    trackMapPath: join11(harnessRoot, "templates/track-mcp-map.tsv"),
     existingPath: mcpPath,
     tracks: spec.tracks
   });
@@ -2692,7 +2737,7 @@ function accumulateCategory(cats, entry) {
   }
 }
 function writeInstalledTracks(projectDir, tracks) {
-  const path = join10(projectDir, ".claude/.installed-tracks");
+  const path = join11(projectDir, ".claude/.installed-tracks");
   mkdirSync4(dirname4(path), { recursive: true });
   const sorted = [...new Set(tracks)].sort().join("\n");
   writeFileSync9(path, `${sorted}
@@ -2700,7 +2745,7 @@ function writeInstalledTracks(projectDir, tracks) {
 }
 function writeRootClaudeMd(projectDir, tracks) {
   const content = mergeProjectClaude(tracks, { projectName: basename4(projectDir) });
-  const target = join10(projectDir, "CLAUDE.md");
+  const target = join11(projectDir, "CLAUDE.md");
   const backup = backupFileIfChanged(target, content);
   writeFileSync9(target, content);
   return { content, backup };
@@ -2722,8 +2767,8 @@ init_esm_shims();
 
 // src/context-cost.ts
 init_esm_shims();
-import { existsSync as existsSync12, readFileSync as readFileSync12 } from "fs";
-import { join as join11, resolve as resolve2 } from "path";
+import { existsSync as existsSync13, readFileSync as readFileSync12 } from "fs";
+import { join as join12, resolve as resolve2 } from "path";
 import { fileURLToPath } from "url";
 var CHARS_PER_TOKEN = 4;
 function estimateTokens(chars) {
@@ -2739,8 +2784,8 @@ function extractFrontmatter(content) {
 function assetDescriptorTokens(assetId, root = resolveBundleRoot()) {
   const asset = EXTERNAL_ASSETS.find((a) => a.id === assetId);
   if (!asset || asset.method.kind !== "internal") return null;
-  const skillMd = join11(root, "templates", "skills", asset.method.key, "SKILL.md");
-  if (!existsSync12(skillMd)) return null;
+  const skillMd = join12(root, "templates", "skills", asset.method.key, "SKILL.md");
+  if (!existsSync13(skillMd)) return null;
   const fm = extractFrontmatter(readFileSync12(skillMd, "utf8"));
   return fm === null ? null : estimateTokens(fm.length);
 }
@@ -3139,6 +3184,14 @@ function renderPhase1Rows(log, baseline, verbose = false, withEcc = false, claud
       )
     );
   }
+  if (baseline.ciScaffold) {
+    for (const f of baseline.ciScaffold.written) {
+      log(assetRow("success", f, "CI scaffold (fill-in template)", TEMPLATES_COL));
+    }
+    for (const f of baseline.ciScaffold.skippedExisting) {
+      log(assetRow("skip", f, "exists \u2014 preserved (no overwrite)", TEMPLATES_COL));
+    }
+  }
   if (baseline.skipped > 0) {
     log(
       assetRow(
@@ -3403,8 +3456,8 @@ function registerInstallCommand(cli2) {
 // src/commands/uninstall.ts
 init_esm_shims();
 import { spawnSync as spawnSync2 } from "child_process";
-import { existsSync as existsSync13, readFileSync as readFileSync13, rmSync } from "fs";
-import { join as join12, resolve as resolve4 } from "path";
+import { existsSync as existsSync14, readFileSync as readFileSync13, rmSync } from "fs";
+import { join as join13, resolve as resolve4 } from "path";
 function uninstallAction(options, deps = {}) {
   const log = deps.log ?? console.log;
   const err = deps.err ?? console.error;
@@ -3576,21 +3629,21 @@ function buildGlobalAdvisoryCmd(asset) {
   }
 }
 function removeTemplates(log, projectDir, rm) {
-  rm(join12(projectDir, log.templates.claudeDir));
-  if (log.templates.codexDir) rm(join12(projectDir, log.templates.codexDir));
-  if (log.templates.opencodeDir) rm(join12(projectDir, log.templates.opencodeDir));
+  rm(join13(projectDir, log.templates.claudeDir));
+  if (log.templates.codexDir) rm(join13(projectDir, log.templates.codexDir));
+  if (log.templates.opencodeDir) rm(join13(projectDir, log.templates.opencodeDir));
   const rootMd = log.templates.rootClaudeMd;
   if (rootMd) {
     if (rootClaudeMdModified(log, projectDir)) return { rootClaudeMdKept: true };
-    rm(join12(projectDir, rootMd.path));
+    rm(join13(projectDir, rootMd.path));
   }
   return { rootClaudeMdKept: false };
 }
 function rootClaudeMdModified(log, projectDir) {
   const rootMd = log.templates.rootClaudeMd;
   if (!rootMd) return false;
-  const path = join12(projectDir, rootMd.path);
-  if (!existsSync13(path)) return false;
+  const path = join13(projectDir, rootMd.path);
+  if (!existsSync14(path)) return false;
   return hashContent(readFileSync13(path, "utf8")) !== rootMd.sha256;
 }
 function formatTemplateList(log) {
@@ -3603,7 +3656,7 @@ function defaultSpawn2(cmd, args) {
   return spawnSync2(cmd, [...args], { encoding: "utf8", stdio: "pipe", timeout: 12e4 });
 }
 function defaultRm(path) {
-  if (existsSync13(path)) {
+  if (existsSync14(path)) {
     rmSync(path, { recursive: true, force: true });
   }
 }
@@ -4897,8 +4950,8 @@ Proceed?`,
 
 // src/state.ts
 init_esm_shims();
-import { existsSync as existsSync14, readFileSync as readFileSync14 } from "fs";
-import { join as join13 } from "path";
+import { existsSync as existsSync15, readFileSync as readFileSync14 } from "fs";
+import { join as join14 } from "path";
 var META_FILE = ".claude/.installed-tracks";
 var LEGACY_SIGNATURES = [
   { rule: "htmx.md", track: "ssr-htmx" },
@@ -4908,13 +4961,13 @@ var LEGACY_SIGNATURES = [
   { rule: "cli-development.md", track: "tooling" }
 ];
 function detectInstallState(projectDir) {
-  const claudeDir = join13(projectDir, ".claude");
-  const hasClaudeDir = existsSync14(claudeDir);
+  const claudeDir = join14(projectDir, ".claude");
+  const hasClaudeDir = existsSync15(claudeDir);
   if (!hasClaudeDir) {
     return { state: "new", tracks: [], source: "none", hasClaudeDir: false };
   }
-  const metaPath = join13(projectDir, META_FILE);
-  if (existsSync14(metaPath)) {
+  const metaPath = join14(projectDir, META_FILE);
+  if (existsSync15(metaPath)) {
     const tracks2 = readMetafile(metaPath);
     return { state: "existing", tracks: tracks2, source: "metafile", hasClaudeDir: true };
   }
@@ -4933,13 +4986,13 @@ function readMetafile(path) {
   return [...seen].sort();
 }
 function inferFromLegacySignatures(projectDir) {
-  const rulesDir = join13(projectDir, ".claude/rules");
-  if (!existsSync14(rulesDir)) {
+  const rulesDir = join14(projectDir, ".claude/rules");
+  if (!existsSync15(rulesDir)) {
     return [];
   }
   const found = /* @__PURE__ */ new Set();
   for (const sig of LEGACY_SIGNATURES) {
-    if (existsSync14(join13(rulesDir, sig.rule))) {
+    if (existsSync15(join14(rulesDir, sig.rule))) {
       found.add(sig.track);
     }
   }