@uzysjung/agent-harness 26.133.0 → 26.134.1

package/dist/index.js

@@ -712,7 +712,7 @@ var cac = (name = "") => new CAC(name);
 // package.json
 var package_default = {
   name: "@uzysjung/agent-harness",
-  version: "26.133.0",
+  version: "26.134.1",
   description: "Curate vetted AI-coding skills & plugins by your tech stack \u2014 install only what you need, across Claude Code, Codex, OpenCode & Antigravity",
   type: "module",
   publishConfig: {
@@ -753,10 +753,10 @@ var package_default = {
   devDependencies: {
     "@biomejs/biome": "^2.4.13",
     "@types/node": "^25.6.0",
-    "@vitest/coverage-v8": "^2.1.0",
+    "@vitest/coverage-v8": "^4.1.10",
     tsup: "^8.3.0",
     typescript: "^5.6.0",
-    vitest: "^2.1.0"
+    vitest: "^4.1.10"
   },
   license: "MIT",
   repository: {
@@ -914,56 +914,10 @@ import {
 } from "fs";
 import { basename as basename4, dirname as dirname6, join as join11, resolve } from "path";
 
-// src/antigravity/transform.ts
-init_esm_shims();
-import { existsSync as existsSync4, readFileSync as readFileSync4 } from "fs";
-import { basename, join as join3 } from "path";
-
-// src/codex/agents-md.ts
-init_esm_shims();
-function renameSlashes(text) {
-  return text.replaceAll("/uzys:", "/uzys-");
-}
-function renderAgentsMd(params) {
-  const body = params.claudeMd.replace(/^#\s+.*\r?\n/, "").trim();
-  const replaced = params.template.replaceAll("{PROJECT_NAME}", params.projectName).replaceAll("{PROJECT_RULES}", body).replaceAll("{PROJECT_CONTEXT}", params.projectContext);
-  return renameSlashes(replaced);
-}
-
-// src/codex/skills.ts
-init_esm_shims();
-function renderBundledSkill(source) {
-  const trimmed = source.trimEnd();
-  const lines = trimmed.split(/\r?\n/);
-  if (lines[0] !== "---") {
-    return `${portBody(trimmed)}
-`;
-  }
-  let secondDelimAt = -1;
-  for (let i = 1; i < lines.length; i++) {
-    if (lines[i] === "---") {
-      secondDelimAt = i;
-      break;
-    }
-  }
-  if (secondDelimAt < 0) {
-    return `${portBody(trimmed)}
-`;
-  }
-  const frontmatter = lines.slice(0, secondDelimAt + 1).join("\n");
-  const body = lines.slice(secondDelimAt + 1).join("\n");
-  return `${frontmatter}
-${portBody(body)}
-`;
-}
-function portBody(body) {
-  return renameSlashes(body).replace(/CLAUDE_PROJECT_DIR/g, "CODEX_PROJECT_DIR").trimEnd();
-}
-
-// src/owned-write.ts
+// src/ci-scaffold.ts
 init_esm_shims();
-import { existsSync as existsSync3, mkdirSync as mkdirSync3, readFileSync as readFileSync3, writeFileSync as writeFileSync2 } from "fs";
-import { dirname as dirname3, relative, sep } from "path";
+import { existsSync as existsSync2 } from "fs";
+import { join as join2 } from "path";
 
 // src/fs-ops.ts
 init_esm_shims();
@@ -1055,11 +1009,100 @@ function ensureProjectSkeleton(projectDir) {
   }
 }
 
+// src/ci-scaffold.ts
+var PYTHON_TRACKS = "data|csr-fastapi|full";
+var VARIANTS = [
+  {
+    source: "ci-node.yml",
+    target: "ci.yml",
+    applies: (tracks) => anyTrack(tracks, "csr-*|ssr-*|tooling|full") || !anyTrack(tracks, PYTHON_TRACKS)
+  },
+  {
+    source: "ci-python.yml",
+    target: "ci-python.yml",
+    applies: (tracks) => anyTrack(tracks, PYTHON_TRACKS)
+  },
+  {
+    source: "e2e.yml",
+    target: "e2e.yml",
+    applies: (tracks) => hasUiTrack(tracks)
+  }
+];
+function installCiScaffold(ctx) {
+  const report = { written: [], skippedExisting: [] };
+  for (const v2 of VARIANTS) {
+    if (!v2.applies(ctx.tracks)) continue;
+    const relTarget = `.github/workflows/${v2.target}`;
+    const target = join2(ctx.projectDir, relTarget);
+    if (existsSync2(target)) {
+      report.skippedExisting.push(relTarget);
+      continue;
+    }
+    copyFile(join2(ctx.harnessRoot, "templates/github-workflows", v2.source), target);
+    report.written.push(relTarget);
+  }
+  return report;
+}
+
+// src/cli-transforms.ts
+init_esm_shims();
+
+// src/antigravity/transform.ts
+init_esm_shims();
+import { existsSync as existsSync5, readFileSync as readFileSync4 } from "fs";
+import { basename, join as join4 } from "path";
+
+// src/codex/agents-md.ts
+init_esm_shims();
+function renameSlashes(text) {
+  return text.replaceAll("/uzys:", "/uzys-");
+}
+function renderAgentsMd(params) {
+  const body = params.claudeMd.replace(/^#\s+.*\r?\n/, "").trim();
+  const replaced = params.template.replaceAll("{PROJECT_NAME}", params.projectName).replaceAll("{PROJECT_RULES}", body).replaceAll("{PROJECT_CONTEXT}", params.projectContext);
+  return renameSlashes(replaced);
+}
+
+// src/codex/skills.ts
+init_esm_shims();
+function renderBundledSkill(source) {
+  const trimmed = source.trimEnd();
+  const lines = trimmed.split(/\r?\n/);
+  if (lines[0] !== "---") {
+    return `${portBody(trimmed)}
+`;
+  }
+  let secondDelimAt = -1;
+  for (let i = 1; i < lines.length; i++) {
+    if (lines[i] === "---") {
+      secondDelimAt = i;
+      break;
+    }
+  }
+  if (secondDelimAt < 0) {
+    return `${portBody(trimmed)}
+`;
+  }
+  const frontmatter = lines.slice(0, secondDelimAt + 1).join("\n");
+  const body = lines.slice(secondDelimAt + 1).join("\n");
+  return `${frontmatter}
+${portBody(body)}
+`;
+}
+function portBody(body) {
+  return renameSlashes(body).replace(/CLAUDE_PROJECT_DIR/g, "CODEX_PROJECT_DIR").trimEnd();
+}
+
+// src/owned-write.ts
+init_esm_shims();
+import { existsSync as existsSync4, mkdirSync as mkdirSync3, readFileSync as readFileSync3, writeFileSync as writeFileSync2 } from "fs";
+import { dirname as dirname3, relative, sep } from "path";
+
 // src/install-log.ts
 init_esm_shims();
 import { createHash } from "crypto";
-import { existsSync as existsSync2, mkdirSync as mkdirSync2, readFileSync as readFileSync2, writeFileSync } from "fs";
-import { dirname as dirname2, join as join2 } from "path";
+import { existsSync as existsSync3, mkdirSync as mkdirSync2, readFileSync as readFileSync2, writeFileSync } from "fs";
+import { dirname as dirname2, join as join3 } from "path";
 var INSTALL_LOG_FILENAME = ".harness-install.json";
 var INSTALL_LOG_VERSION = 1;
 var POLICY_DIRS = [
@@ -1182,41 +1225,41 @@ function isHarnessOwned(baseline, key, current) {
 function mergeExternalFiles(projectDir, previous, current) {
   const byPath = /* @__PURE__ */ new Map();
   for (const file of [...previous ?? [], ...current]) byPath.set(file.path, file);
-  return [...byPath.values()].filter((f) => existsSync2(join2(projectDir, f.path)));
+  return [...byPath.values()].filter((f) => existsSync3(join3(projectDir, f.path)));
 }
 function collectSkillHashes(projectDir) {
-  const skillsDir = join2(projectDir, ".claude/skills");
+  const skillsDir = join3(projectDir, ".claude/skills");
   return listFilesRecursive(skillsDir).map((rel) => ({
     path: rel,
-    sha256: hashContent(readFileSync2(join2(skillsDir, rel), "utf8"))
+    sha256: hashContent(readFileSync2(join3(skillsDir, rel), "utf8"))
   }));
 }
 function collectPolicyHashes(projectDir, templatesDir) {
   const out = [];
   for (const { dir, ext } of POLICY_DIRS) {
-    const targetDir = join2(projectDir, ".claude", dir);
-    const sourceDir = join2(templatesDir, dir);
+    const targetDir = join3(projectDir, ".claude", dir);
+    const sourceDir = join3(templatesDir, dir);
     for (const rel of listFilesRecursive(targetDir)) {
       if (!rel.endsWith(ext)) continue;
-      if (!existsSync2(join2(sourceDir, rel))) continue;
+      if (!existsSync3(join3(sourceDir, rel))) continue;
       out.push({
         path: `${dir}/${rel}`,
-        sha256: hashContent(readFileSync2(join2(targetDir, rel), "utf8"))
+        sha256: hashContent(readFileSync2(join3(targetDir, rel), "utf8"))
       });
     }
   }
   return out;
 }
 function writeInstallLog(projectDir, log) {
-  const path = join2(projectDir, ".claude", INSTALL_LOG_FILENAME);
+  const path = join3(projectDir, ".claude", INSTALL_LOG_FILENAME);
   mkdirSync2(dirname2(path), { recursive: true });
   writeFileSync(path, `${JSON.stringify(log, null, 2)}
 `, "utf8");
   return path;
 }
 function readInstallLog(projectDir) {
-  const path = join2(projectDir, ".claude", INSTALL_LOG_FILENAME);
-  if (!existsSync2(path)) return null;
+  const path = join3(projectDir, ".claude", INSTALL_LOG_FILENAME);
+  if (!existsSync3(path)) return null;
   try {
     const parsed = JSON.parse(readFileSync2(path, "utf8"));
     if (Array.isArray(parsed.assets)) {
@@ -1230,21 +1273,25 @@ function readInstallLog(projectDir) {
   }
 }
 function installLogPath(projectDir) {
-  return join2(projectDir, ".claude", INSTALL_LOG_FILENAME);
+  return join3(projectDir, ".claude", INSTALL_LOG_FILENAME);
 }
 
 // src/owned-write.ts
-function createOwnedWriter(projectDir, baseline, now = /* @__PURE__ */ new Date()) {
+function createOwnedWriter(projectDir, baseline, options = {}) {
+  const { now = /* @__PURE__ */ new Date(), refreshOnly = false } = options;
   const written = /* @__PURE__ */ new Map();
   const backedUp = [];
   const backupPaths = [];
+  let updated = 0;
   return {
     write(absPath, content) {
       const rel = relative(projectDir, absPath).split(sep).join("/");
       const digest = hashContent(content);
-      if (!existsSync3(absPath)) {
+      if (!existsSync4(absPath)) {
+        if (refreshOnly) return false;
         mkdirSync3(dirname3(absPath), { recursive: true });
         writeFileSync2(absPath, content);
+        updated++;
       } else {
         const current = readFileSync3(absPath, "utf8");
         if (current !== content) {
@@ -1253,15 +1300,18 @@ function createOwnedWriter(projectDir, baseline, now = /* @__PURE__ */ new Date(
             backedUp.push(rel);
           }
           writeFileSync2(absPath, content);
+          updated++;
         }
       }
       written.set(rel, digest);
+      return true;
     },
     result() {
       return {
         files: [...written].map(([path, sha256]) => ({ path, sha256 })),
         backedUp: [...backedUp],
-        backupPaths: [...backupPaths]
+        backupPaths: [...backupPaths],
+        updated
       };
     }
   };
@@ -1361,17 +1411,17 @@ function expandTracks(tracks) {
 
 // src/antigravity/transform.ts
 function runAntigravityTransform(params) {
-  const { harnessRoot, projectDir, selectedInternalSkills = [], baseline } = params;
-  const writer = createOwnedWriter(projectDir, baseline);
+  const { harnessRoot, projectDir, selectedInternalSkills = [], baseline, refreshOnly } = params;
+  const writer = createOwnedWriter(projectDir, baseline, { refreshOnly: refreshOnly ?? false });
   const rulesFile = writeRules(harnessRoot, projectDir, writer);
   const skillFiles = [];
   for (const id of selectedInternalSkills) {
-    const src = join3(harnessRoot, "templates/skills", id, "SKILL.md");
-    if (!existsSync4(src)) {
+    const src = join4(harnessRoot, "templates/skills", id, "SKILL.md");
+    if (!existsSync5(src)) {
       continue;
     }
-    const target = join3(projectDir, ".agents", "skills", id, "SKILL.md");
-    writer.write(target, renderBundledSkill(readFileSync4(src, "utf8")));
+    const target = join4(projectDir, ".agents", "skills", id, "SKILL.md");
+    if (!writer.write(target, renderBundledSkill(readFileSync4(src, "utf8")))) continue;
     skillFiles.push(target);
   }
   return {
@@ -1381,60 +1431,21 @@ function runAntigravityTransform(params) {
   };
 }
 function writeRules(harnessRoot, projectDir, writer) {
-  const claudeMdPath = join3(harnessRoot, "templates/CLAUDE.md");
-  const templatePath = join3(harnessRoot, "templates/antigravity/AGENTS.md.template");
-  if (!existsSync4(claudeMdPath) || !existsSync4(templatePath)) {
+  const claudeMdPath = join4(harnessRoot, "templates/CLAUDE.md");
+  const templatePath = join4(harnessRoot, "templates/antigravity/AGENTS.md.template");
+  if (!existsSync5(claudeMdPath) || !existsSync5(templatePath)) {
     return null;
   }
   const claudeMd = readFileSync4(claudeMdPath, "utf8");
   const template = readFileSync4(templatePath, "utf8");
-  const target = join3(projectDir, ".agents", "rules", "uzys-harness.md");
+  const target = join4(projectDir, ".agents", "rules", "uzys-harness.md");
   const rulesOut = renderAgentsMd({
     template,
     claudeMd,
     projectName: basename(projectDir),
     projectContext: renderFillScaffold()
   });
-  writer.write(target, rulesOut);
-  return target;
-}
-
-// src/ci-scaffold.ts
-init_esm_shims();
-import { existsSync as existsSync5 } from "fs";
-import { join as join4 } from "path";
-var PYTHON_TRACKS = "data|csr-fastapi|full";
-var VARIANTS = [
-  {
-    source: "ci-node.yml",
-    target: "ci.yml",
-    applies: (tracks) => anyTrack(tracks, "csr-*|ssr-*|tooling|full") || !anyTrack(tracks, PYTHON_TRACKS)
-  },
-  {
-    source: "ci-python.yml",
-    target: "ci-python.yml",
-    applies: (tracks) => anyTrack(tracks, PYTHON_TRACKS)
-  },
-  {
-    source: "e2e.yml",
-    target: "e2e.yml",
-    applies: (tracks) => hasUiTrack(tracks)
-  }
-];
-function installCiScaffold(ctx) {
-  const report = { written: [], skippedExisting: [] };
-  for (const v2 of VARIANTS) {
-    if (!v2.applies(ctx.tracks)) continue;
-    const relTarget = `.github/workflows/${v2.target}`;
-    const target = join4(ctx.projectDir, relTarget);
-    if (existsSync5(target)) {
-      report.skippedExisting.push(relTarget);
-      continue;
-    }
-    copyFile(join4(ctx.harnessRoot, "templates/github-workflows", v2.source), target);
-    report.written.push(relTarget);
-  }
-  return report;
+  return writer.write(target, rulesOut) ? target : null;
 }
 
 // src/codex/opt-in.ts
@@ -1558,8 +1569,8 @@ function quoteIfNeeded(name) {
 var HOOK_NAMES = ["session-start"];
 var ENV_VAR_RENAME = /CLAUDE_PROJECT_DIR/g;
 function runCodexTransform(params) {
-  const { harnessRoot, projectDir, selectedInternalSkills = [], baseline } = params;
-  const writer = createOwnedWriter(projectDir, baseline);
+  const { harnessRoot, projectDir, selectedInternalSkills = [], baseline, refreshOnly } = params;
+  const writer = createOwnedWriter(projectDir, baseline, { refreshOnly: refreshOnly ?? false });
   const claudeMd = readRequired(join6(harnessRoot, "templates/CLAUDE.md"));
   const agentsTemplate = readRequired(join6(harnessRoot, "templates/codex/AGENTS.md.template"));
   const configTemplate = readRequired(join6(harnessRoot, "templates/codex/config.toml.template"));
@@ -1593,7 +1604,7 @@ function runCodexTransform(params) {
     }
     const ported = readFileSync6(src, "utf8").replace(ENV_VAR_RENAME, "CODEX_PROJECT_DIR");
     const target = join6(hookDir, `${hook}.sh`);
-    writer.write(target, ported);
+    if (!writer.write(target, ported)) continue;
     chmodSync(target, 493);
     hookFiles.push(target);
   }
@@ -1604,7 +1615,7 @@ function runCodexTransform(params) {
       continue;
     }
     const target = join6(projectDir, ".agents", "skills", id, "SKILL.md");
-    writer.write(target, renderBundledSkill(readFileSync6(src, "utf8")));
+    if (!writer.write(target, renderBundledSkill(readFileSync6(src, "utf8")))) continue;
     skillFiles.push(target);
   }
   return {
@@ -1619,23 +1630,262 @@ function readRequired(path) {
   if (!existsSync7(path)) {
     throw new Error(`Codex transform: required source missing: ${path}`);
   }
-  return readFileSync6(path, "utf8");
+  return readFileSync6(path, "utf8");
+}
+function readOptionalJson(path) {
+  if (!existsSync7(path)) {
+    return null;
+  }
+  try {
+    return JSON.parse(readFileSync6(path, "utf8"));
+  } catch {
+    return null;
+  }
+}
+
+// src/opencode/transform.ts
+init_esm_shims();
+import { existsSync as existsSync8, readFileSync as readFileSync7 } from "fs";
+import { basename as basename3, join as join7 } from "path";
+
+// src/opencode/agents-md.ts
+init_esm_shims();
+function renameSlashes2(text) {
+  return text.replaceAll("/uzys:", "/uzys-");
+}
+function renderAgentsMd2(params) {
+  const body = params.claudeMd.replace(/^#\s+.*\r?\n/, "").trim();
+  const replaced = params.template.replaceAll("{PROJECT_NAME}", params.projectName).replaceAll("{PROJECT_RULES}", body).replaceAll("{PROJECT_CONTEXT}", params.projectContext);
+  return renameSlashes2(replaced);
+}
+
+// src/opencode/commands.ts
+init_esm_shims();
+function renderCommandFromSkill(source, id, opts) {
+  const { description, body } = parseSkillFrontmatter(source);
+  const finalDescription = description || `${id} (dev-method skill, OpenCode command fallback)`;
+  const escapedDesc = finalDescription.replace(/"/g, '\\"');
+  const renamedBody = renameSlashes2(body).trimEnd();
+  const agent = opts?.shellDependent ? "build" : "plan";
+  return [
+    "---",
+    `description: "${escapedDesc}"`,
+    `agent: ${agent}`,
+    "---",
+    "",
+    renamedBody,
+    ""
+  ].join("\n");
+}
+function parseSkillFrontmatter(source) {
+  const lines = source.split(/\r?\n/);
+  if (lines[0] !== "---") {
+    const firstLine = lines[0] ?? "";
+    return { description: firstLine.trim(), body: lines.slice(1).join("\n") };
+  }
+  let secondDelimAt = -1;
+  let description = "";
+  for (let i = 1; i < lines.length; i++) {
+    const line = lines[i] ?? "";
+    if (line === "---") {
+      secondDelimAt = i;
+      break;
+    }
+    const inline = line.match(/^description:\s*(.+)$/);
+    if (!inline) {
+      continue;
+    }
+    const raw = (inline[1] ?? "").trim();
+    if (raw === ">-" || raw === ">" || raw === "|" || raw === "|-") {
+      const collected = [];
+      for (let j3 = i + 1; j3 < lines.length; j3++) {
+        const next = lines[j3] ?? "";
+        if (next === "---") {
+          break;
+        }
+        if (next.trim() === "" || /^\s/.test(next)) {
+          collected.push(next.trim());
+        } else {
+          break;
+        }
+      }
+      description = collected.join(" ").replace(/\s+/g, " ").trim();
+    } else {
+      description = stripQuotes(raw);
+    }
+  }
+  const body = secondDelimAt >= 0 ? lines.slice(secondDelimAt + 1).join("\n").replace(/^\n+/, "") : source;
+  return { description, body };
+}
+function stripQuotes(raw) {
+  const trimmed = raw.trim();
+  if (trimmed.startsWith('"') && trimmed.endsWith('"')) {
+    return trimmed.slice(1, -1);
+  }
+  return trimmed;
+}
+
+// src/opencode/opencode-json.ts
+init_esm_shims();
+function renderOpencodeJson(params) {
+  const config = parseTemplate(params.template);
+  if (params.mcp) {
+    config.mcp = { ...params.mcp.mcpServers };
+  }
+  return `${JSON.stringify(config, null, 2)}
+`;
+}
+function parseTemplate(template) {
+  try {
+    return JSON.parse(template);
+  } catch (err) {
+    const message = err instanceof Error ? err.message : String(err);
+    throw new Error(`opencode.json template invalid JSON: ${message}`);
+  }
+}
+
+// src/opencode/transform.ts
+function runOpencodeTransform(params) {
+  const { harnessRoot, projectDir, selectedInternalSkills = [], baseline, refreshOnly } = params;
+  const writer = createOwnedWriter(projectDir, baseline, { refreshOnly: refreshOnly ?? false });
+  const claudeMd = readRequired2(join7(harnessRoot, "templates/CLAUDE.md"));
+  const agentsTemplate = readRequired2(join7(harnessRoot, "templates/opencode/AGENTS.md.template"));
+  const opencodeTemplate = readRequired2(
+    join7(harnessRoot, "templates/opencode/opencode.json.template")
+  );
+  const projectName = basename3(projectDir);
+  const mcp = readOptionalJson2(join7(harnessRoot, ".mcp.json"));
+  ensureDir(projectDir);
+  const agentsMdPath = join7(projectDir, "AGENTS.md");
+  const agentsMdOut = renderAgentsMd2({
+    template: agentsTemplate,
+    claudeMd,
+    projectName,
+    projectContext: renderFillScaffold()
+  });
+  writer.write(agentsMdPath, agentsMdOut);
+  const opencodeJsonPath = join7(projectDir, "opencode.json");
+  writer.write(opencodeJsonPath, renderOpencodeJson({ template: opencodeTemplate, mcp }));
+  const cmdDir = join7(projectDir, ".opencode/commands");
+  if (!refreshOnly) ensureDir(cmdDir);
+  const commandFiles = [];
+  for (const id of selectedInternalSkills) {
+    const src = join7(harnessRoot, "templates/skills", id, "SKILL.md");
+    if (!existsSync8(src)) {
+      continue;
+    }
+    const target = join7(cmdDir, `${id}.md`);
+    const shellDependent = existsSync8(join7(harnessRoot, "templates/skills", id, "scripts"));
+    const wrote = writer.write(
+      target,
+      renderCommandFromSkill(readFileSync7(src, "utf8"), id, { shellDependent })
+    );
+    if (!wrote) continue;
+    commandFiles.push(target);
+  }
+  return {
+    agentsMdPath,
+    opencodeJsonPath,
+    commandFiles,
+    ownership: writer.result()
+  };
+}
+function readRequired2(path) {
+  if (!existsSync8(path)) {
+    throw new Error(`OpenCode transform: required source missing: ${path}`);
+  }
+  return readFileSync7(path, "utf8");
 }
-function readOptionalJson(path) {
-  if (!existsSync7(path)) {
+function readOptionalJson2(path) {
+  if (!existsSync8(path)) {
     return null;
   }
   try {
-    return JSON.parse(readFileSync6(path, "utf8"));
+    return JSON.parse(readFileSync7(path, "utf8"));
   } catch {
     return null;
   }
 }
 
+// src/cli-transforms.ts
+var ALL_CLI_TARGETS = CLI_BASES;
+function runCliTransforms(params) {
+  const {
+    harnessRoot,
+    projectDir,
+    cli: cli2,
+    selectedInternalSkills,
+    previousExternal,
+    refreshOnly = false,
+    codexTrust = false
+  } = params;
+  const baseline = new Map(previousExternal.map((f) => [f.path, f.sha256]));
+  const externalFiles = [];
+  const externalBackups = [];
+  const externalBackedUp = [];
+  let externalUpdated = 0;
+  const absorb = (report) => {
+    for (const f of report.ownership.files) {
+      baseline.set(f.path, f.sha256);
+      externalFiles.push(f);
+    }
+    externalBackups.push(...report.ownership.backupPaths);
+    externalBackedUp.push(...report.ownership.backedUp);
+    externalUpdated += report.ownership.updated;
+  };
+  let codex = null;
+  let codexOptIn = null;
+  if (cli2.includes("codex")) {
+    codex = runCodexTransform({
+      harnessRoot,
+      projectDir,
+      selectedInternalSkills,
+      baseline,
+      refreshOnly
+    });
+    absorb(codex);
+    if (codexTrust) {
+      codexOptIn = runCodexOptIn({ projectDir });
+    }
+  }
+  let opencode = null;
+  if (cli2.includes("opencode")) {
+    opencode = runOpencodeTransform({
+      harnessRoot,
+      projectDir,
+      selectedInternalSkills,
+      baseline,
+      refreshOnly
+    });
+    absorb(opencode);
+  }
+  let antigravity = null;
+  if (cli2.includes("antigravity")) {
+    antigravity = runAntigravityTransform({
+      harnessRoot,
+      projectDir,
+      selectedInternalSkills,
+      baseline,
+      refreshOnly
+    });
+    absorb(antigravity);
+  }
+  return {
+    codex,
+    codexOptIn,
+    opencode,
+    antigravity,
+    externalFiles,
+    externalBackups,
+    externalUpdated,
+    externalBackedUp
+  };
+}
+
 // src/env-files.ts
 init_esm_shims();
-import { appendFileSync, existsSync as existsSync8, readFileSync as readFileSync7, writeFileSync as writeFileSync4 } from "fs";
-import { join as join7 } from "path";
+import { appendFileSync, existsSync as existsSync9, readFileSync as readFileSync8, writeFileSync as writeFileSync4 } from "fs";
+import { join as join8 } from "path";
 var ENV_EXAMPLE_BODY = `# .env.example \u2014 csr-supabase Track
 # Copy to .env (gitignored) and fill in values: cp .env.example .env
 
@@ -1672,19 +1922,19 @@ function writeEnvExample(projectDir, tracks) {
   if (!tracks.some((t) => ENV_EXAMPLE_TRACKS.includes(t))) {
     return false;
   }
-  const path = join7(projectDir, ".env.example");
-  if (existsSync8(path)) {
+  const path = join8(projectDir, ".env.example");
+  if (existsSync9(path)) {
     return false;
   }
   writeFileSync4(path, ENV_EXAMPLE_BODY);
   return true;
 }
 function addGitignoreEnv(projectDir) {
-  const path = join7(projectDir, ".gitignore");
-  if (!existsSync8(path)) {
+  const path = join8(projectDir, ".gitignore");
+  if (!existsSync9(path)) {
     return false;
   }
-  const content = readFileSync7(path, "utf8");
+  const content = readFileSync8(path, "utf8");
   if (GITIGNORE_ENV_PATTERN.test(content)) {
     return false;
   }
@@ -1698,11 +1948,11 @@ function addGitignoreEnv(projectDir) {
 var NPX_SKILLS_AGENT_DIRS = [".factory/", ".goose/"];
 var GITIGNORE_NPX_SKILLS_HEADER = "# npx skills add multi-CLI cache (auto-added by agent-harness)";
 function addGitignoreNpxSkillsAgents(projectDir) {
-  const path = join7(projectDir, ".gitignore");
-  if (!existsSync8(path)) {
+  const path = join8(projectDir, ".gitignore");
+  if (!existsSync9(path)) {
     return [];
   }
-  const content = readFileSync7(path, "utf8");
+  const content = readFileSync8(path, "utf8");
   const missing = NPX_SKILLS_AGENT_DIRS.filter((pattern) => {
     const lineRegex = new RegExp(`^${pattern.replace(/\./g, "\\.").replace(/\//g, "/")}\\s*$`, "m");
     return !lineRegex.test(content);
@@ -1718,17 +1968,17 @@ ${block}
   return [...missing];
 }
 function writeMcpAllowlist(projectDir) {
-  const allowlistPath = join7(projectDir, ".mcp-allowlist");
-  if (existsSync8(allowlistPath)) {
+  const allowlistPath = join8(projectDir, ".mcp-allowlist");
+  if (existsSync9(allowlistPath)) {
     return null;
   }
-  const mcpPath = join7(projectDir, ".mcp.json");
-  if (!existsSync8(mcpPath)) {
+  const mcpPath = join8(projectDir, ".mcp.json");
+  if (!existsSync9(mcpPath)) {
     return null;
   }
   let names = [];
   try {
-    const parsed = JSON.parse(readFileSync7(mcpPath, "utf8"));
+    const parsed = JSON.parse(readFileSync8(mcpPath, "utf8"));
     names = Object.keys(parsed.mcpServers ?? {}).sort();
   } catch {
     return null;
@@ -1751,9 +2001,9 @@ function writeMcpAllowlist(projectDir) {
 // src/external-installer.ts
 init_esm_shims();
 import { spawnSync } from "child_process";
-import { existsSync as existsSync9, readdirSync as readdirSync2, readFileSync as readFileSync8 } from "fs";
+import { existsSync as existsSync10, readdirSync as readdirSync2, readFileSync as readFileSync9 } from "fs";
 import { homedir as homedir2 } from "os";
-import { join as join8 } from "path";
+import { join as join9 } from "path";
 var DEFAULT_SPAWN_TIMEOUT_MS = 12e4;
 function selectExternalTargets(assets, ctx) {
   const conditionPassed = filterApplicableAssets(assets, ctx).filter(
@@ -1829,8 +2079,8 @@ function installOne(asset, ctx) {
         cwd
       );
     case "shell-script": {
-      const scriptPath = join8(ctx.harnessRoot, method.script);
-      if (!existsSync9(scriptPath)) {
+      const scriptPath = join9(ctx.harnessRoot, method.script);
+      if (!existsSync10(scriptPath)) {
         return {
           asset,
           ok: false,
@@ -1920,17 +2170,17 @@ function detectVersion(method, spawn) {
         if (at2 <= 0) return void 0;
         const plugin = method.pluginId.slice(0, at2);
         const marketplaceShort = method.pluginId.slice(at2 + 1);
-        const cacheBase = join8(homedir2(), ".claude/plugins/cache", marketplaceShort, plugin);
-        if (!existsSync9(cacheBase)) return void 0;
+        const cacheBase = join9(homedir2(), ".claude/plugins/cache", marketplaceShort, plugin);
+        if (!existsSync10(cacheBase)) return void 0;
         const versions = readdirSync2(cacheBase).filter((v2) => /^\d/.test(v2)).sort();
         return versions.at(-1);
       }
       case "npm": {
         const npmRoot = getNpmGlobalRoot(spawn);
         if (!npmRoot) return void 0;
-        const pkgJson = join8(npmRoot, method.pkg, "package.json");
-        if (!existsSync9(pkgJson)) return void 0;
-        const parsed = JSON.parse(readFileSync8(pkgJson, "utf8"));
+        const pkgJson = join9(npmRoot, method.pkg, "package.json");
+        if (!existsSync10(pkgJson)) return void 0;
+        const parsed = JSON.parse(readFileSync9(pkgJson, "utf8"));
         return parsed.version;
       }
       default:
@@ -1957,7 +2207,7 @@ function getNpmGlobalRoot(spawn) {
 
 // src/mcp-merge.ts
 init_esm_shims();
-import { existsSync as existsSync10, readFileSync as readFileSync9, writeFileSync as writeFileSync5 } from "fs";
+import { existsSync as existsSync11, readFileSync as readFileSync10, writeFileSync as writeFileSync5 } from "fs";
 function parseTrackMcpMap(raw) {
   const rows = [];
   for (const line of raw.split(/\r?\n/)) {
@@ -2008,15 +2258,15 @@ function mergeMcpServers(base, rows, tracks) {
   return out;
 }
 function composeMcpJson(opts) {
-  const base = JSON.parse(readFileSync9(opts.templateMcpPath, "utf8"));
-  const merged = opts.existingPath && existsSync10(opts.existingPath) ? mergeUserBase(base, opts.existingPath) : base;
-  const mapRaw = existsSync10(opts.trackMapPath) ? readFileSync9(opts.trackMapPath, "utf8") : "";
+  const base = JSON.parse(readFileSync10(opts.templateMcpPath, "utf8"));
+  const merged = opts.existingPath && existsSync11(opts.existingPath) ? mergeUserBase(base, opts.existingPath) : base;
+  const mapRaw = existsSync11(opts.trackMapPath) ? readFileSync10(opts.trackMapPath, "utf8") : "";
   const rows = parseTrackMcpMap(mapRaw);
   return mergeMcpServers(merged, rows, opts.tracks);
 }
 function mergeUserBase(base, existingPath) {
   try {
-    const existing = JSON.parse(readFileSync9(existingPath, "utf8"));
+    const existing = JSON.parse(readFileSync10(existingPath, "utf8"));
     return {
       ...base,
       mcpServers: { ...base.mcpServers, ...existing.mcpServers }
@@ -2030,166 +2280,6 @@ function writeMcpJson(path, mcp) {
 `);
 }
 
-// src/opencode/transform.ts
-init_esm_shims();
-import { existsSync as existsSync11, readFileSync as readFileSync10 } from "fs";
-import { basename as basename3, join as join9 } from "path";
-
-// src/opencode/agents-md.ts
-init_esm_shims();
-function renameSlashes2(text) {
-  return text.replaceAll("/uzys:", "/uzys-");
-}
-function renderAgentsMd2(params) {
-  const body = params.claudeMd.replace(/^#\s+.*\r?\n/, "").trim();
-  const replaced = params.template.replaceAll("{PROJECT_NAME}", params.projectName).replaceAll("{PROJECT_RULES}", body).replaceAll("{PROJECT_CONTEXT}", params.projectContext);
-  return renameSlashes2(replaced);
-}
-
-// src/opencode/commands.ts
-init_esm_shims();
-function renderCommandFromSkill(source, id, opts) {
-  const { description, body } = parseSkillFrontmatter(source);
-  const finalDescription = description || `${id} (dev-method skill, OpenCode command fallback)`;
-  const escapedDesc = finalDescription.replace(/"/g, '\\"');
-  const renamedBody = renameSlashes2(body).trimEnd();
-  const agent = opts?.shellDependent ? "build" : "plan";
-  return [
-    "---",
-    `description: "${escapedDesc}"`,
-    `agent: ${agent}`,
-    "---",
-    "",
-    renamedBody,
-    ""
-  ].join("\n");
-}
-function parseSkillFrontmatter(source) {
-  const lines = source.split(/\r?\n/);
-  if (lines[0] !== "---") {
-    const firstLine = lines[0] ?? "";
-    return { description: firstLine.trim(), body: lines.slice(1).join("\n") };
-  }
-  let secondDelimAt = -1;
-  let description = "";
-  for (let i = 1; i < lines.length; i++) {
-    const line = lines[i] ?? "";
-    if (line === "---") {
-      secondDelimAt = i;
-      break;
-    }
-    const inline = line.match(/^description:\s*(.+)$/);
-    if (!inline) {
-      continue;
-    }
-    const raw = (inline[1] ?? "").trim();
-    if (raw === ">-" || raw === ">" || raw === "|" || raw === "|-") {
-      const collected = [];
-      for (let j3 = i + 1; j3 < lines.length; j3++) {
-        const next = lines[j3] ?? "";
-        if (next === "---") {
-          break;
-        }
-        if (next.trim() === "" || /^\s/.test(next)) {
-          collected.push(next.trim());
-        } else {
-          break;
-        }
-      }
-      description = collected.join(" ").replace(/\s+/g, " ").trim();
-    } else {
-      description = stripQuotes(raw);
-    }
-  }
-  const body = secondDelimAt >= 0 ? lines.slice(secondDelimAt + 1).join("\n").replace(/^\n+/, "") : source;
-  return { description, body };
-}
-function stripQuotes(raw) {
-  const trimmed = raw.trim();
-  if (trimmed.startsWith('"') && trimmed.endsWith('"')) {
-    return trimmed.slice(1, -1);
-  }
-  return trimmed;
-}
-
-// src/opencode/opencode-json.ts
-init_esm_shims();
-function renderOpencodeJson(params) {
-  const config = parseTemplate(params.template);
-  if (params.mcp) {
-    config.mcp = { ...params.mcp.mcpServers };
-  }
-  return `${JSON.stringify(config, null, 2)}
-`;
-}
-function parseTemplate(template) {
-  try {
-    return JSON.parse(template);
-  } catch (err) {
-    const message = err instanceof Error ? err.message : String(err);
-    throw new Error(`opencode.json template invalid JSON: ${message}`);
-  }
-}
-
-// src/opencode/transform.ts
-function runOpencodeTransform(params) {
-  const { harnessRoot, projectDir, selectedInternalSkills = [], baseline } = params;
-  const writer = createOwnedWriter(projectDir, baseline);
-  const claudeMd = readRequired2(join9(harnessRoot, "templates/CLAUDE.md"));
-  const agentsTemplate = readRequired2(join9(harnessRoot, "templates/opencode/AGENTS.md.template"));
-  const opencodeTemplate = readRequired2(
-    join9(harnessRoot, "templates/opencode/opencode.json.template")
-  );
-  const projectName = basename3(projectDir);
-  const mcp = readOptionalJson2(join9(harnessRoot, ".mcp.json"));
-  ensureDir(projectDir);
-  const agentsMdPath = join9(projectDir, "AGENTS.md");
-  const agentsMdOut = renderAgentsMd2({
-    template: agentsTemplate,
-    claudeMd,
-    projectName,
-    projectContext: renderFillScaffold()
-  });
-  writer.write(agentsMdPath, agentsMdOut);
-  const opencodeJsonPath = join9(projectDir, "opencode.json");
-  writer.write(opencodeJsonPath, renderOpencodeJson({ template: opencodeTemplate, mcp }));
-  const cmdDir = join9(projectDir, ".opencode/commands");
-  ensureDir(cmdDir);
-  const commandFiles = [];
-  for (const id of selectedInternalSkills) {
-    const src = join9(harnessRoot, "templates/skills", id, "SKILL.md");
-    if (!existsSync11(src)) {
-      continue;
-    }
-    const target = join9(cmdDir, `${id}.md`);
-    const shellDependent = existsSync11(join9(harnessRoot, "templates/skills", id, "scripts"));
-    writer.write(target, renderCommandFromSkill(readFileSync10(src, "utf8"), id, { shellDependent }));
-    commandFiles.push(target);
-  }
-  return {
-    agentsMdPath,
-    opencodeJsonPath,
-    commandFiles,
-    ownership: writer.result()
-  };
-}
-function readRequired2(path) {
-  if (!existsSync11(path)) {
-    throw new Error(`OpenCode transform: required source missing: ${path}`);
-  }
-  return readFileSync10(path, "utf8");
-}
-function readOptionalJson2(path) {
-  if (!existsSync11(path)) {
-    return null;
-  }
-  try {
-    return JSON.parse(readFileSync10(path, "utf8"));
-  } catch {
-    return null;
-  }
-}
-
 // src/settings-merge.ts
 init_esm_shims();
 function addPreToolUseHook(settings, matcher, command) {
@@ -2234,7 +2324,7 @@ function buildUpdateSpec(projectDir, tracks) {
     projectDir
   };
 }
-function runUpdateMode(projectDir, templatesDir) {
+function runUpdateMode(projectDir, templatesDir, harnessRoot) {
   const claudeDir = join10(projectDir, ".claude");
   const report = {
     updated: {},
@@ -2242,7 +2332,9 @@ function runUpdateMode(projectDir, templatesDir) {
     staleHookRefs: [],
     claudeMdUpdated: false,
     skillsBackedUp: [],
-    policyBackedUp: []
+    policyBackedUp: [],
+    externalUpdated: 0,
+    externalBackedUp: []
   };
   const policyBase = policyBaseline(projectDir);
   for (const { dir, ext } of POLICY_DIRS) {
@@ -2274,11 +2366,38 @@ function runUpdateMode(projectDir, templatesDir) {
   if (existsSync12(settingsPath)) {
     report.staleHookRefs = cleanStaleHookRefs(settingsPath, join10(claudeDir, "hooks"));
   }
+  const external = refreshExternalCli(projectDir, harnessRoot);
+  report.externalUpdated = external.externalUpdated;
+  report.externalBackedUp = external.externalBackedUp;
   return report;
 }
+function refreshExternalCli(projectDir, harnessRoot) {
+  const log = readInstallLog(projectDir);
+  const result = runCliTransforms({
+    harnessRoot,
+    projectDir,
+    cli: ALL_CLI_TARGETS,
+    selectedInternalSkills: INTERNAL_BUNDLED_SKILL_IDS,
+    previousExternal: log?.externalFiles ?? [],
+    refreshOnly: true
+  });
+  if (log) {
+    const merged = mergeExternalFiles(projectDir, log.externalFiles, result.externalFiles);
+    const next = { ...log };
+    if (merged.length > 0) next.externalFiles = merged;
+    else delete next.externalFiles;
+    try {
+      writeInstallLog(projectDir, next);
+    } catch {
+    }
+  }
+  return {
+    externalUpdated: result.externalUpdated,
+    externalBackedUp: result.externalBackedUp
+  };
+}
 function isHarnessOwned2(ctx, rel, current) {
-  const recorded = ctx.baseline.get(`${ctx.prefix}/${rel}`);
-  return recorded !== void 0 && recorded === hashContent(current);
+  return isHarnessOwned(ctx.baseline, `${ctx.prefix}/${rel}`, current);
 }
 function updateDir(target, source, ext, ctx, now = /* @__PURE__ */ new Date()) {
   if (!existsSync12(target) || !existsSync12(source)) return { updated: 0, backedUp: [] };
@@ -2448,13 +2567,20 @@ function runInstall(ctx) {
     options: spec.options,
     ...spec.userOverride ? { userOverride: spec.userOverride } : {}
   }) ? installCiScaffold({ harnessRoot, projectDir, tracks: spec.tracks }) : null;
-  const { externalFiles, externalBackups, ...cliTransforms } = runCliTransforms(
-    spec,
+  const {
+    externalFiles,
+    externalBackups,
+    externalUpdated: _externalUpdated,
+    externalBackedUp: _externalBackedUp,
+    ...cliTransforms
+  } = runCliTransforms({
     harnessRoot,
     projectDir,
-    manifestSpec.selectedInternalSkills,
-    previousLog?.externalFiles ?? []
-  );
+    cli: spec.cli,
+    selectedInternalSkills: manifestSpec.selectedInternalSkills,
+    previousExternal: previousLog?.externalFiles ?? [],
+    codexTrust: (spec.scope ?? "project") === "global" && spec.options.withCodexTrust
+  });
   const baseline = {
     filesCopied: base.filesCopied,
     dirsCopied: base.dirsCopied,
@@ -2493,7 +2619,7 @@ function resolveBackupPath(ctx, mode, claudeDir) {
   return mode === "update" ? copyBackupDir(claudeDir) : backupDir(claudeDir);
 }
 function runUpdateInstall(ctx, templatesDir, backupPath) {
-  const updateReport = runUpdateMode(ctx.projectDir, templatesDir);
+  const updateReport = runUpdateMode(ctx.projectDir, templatesDir, ctx.harnessRoot);
   const baseline = {
     filesCopied: 0,
     dirsCopied: 0,
@@ -2621,49 +2747,6 @@ function writeEnvironmentFiles(projectDir, tracks) {
     gitignoreNpxSkillsAdded: addGitignoreNpxSkillsAgents(projectDir)
   };
 }
-function runCliTransforms(spec, harnessRoot, projectDir, selectedInternalSkills, previousExternal) {
-  const baseline = new Map(previousExternal.map((f) => [f.path, f.sha256]));
-  const externalFiles = [];
-  const externalBackups = [];
-  const absorb = (report) => {
-    for (const f of report.ownership.files) {
-      baseline.set(f.path, f.sha256);
-      externalFiles.push(f);
-    }
-    externalBackups.push(...report.ownership.backupPaths);
-  };
-  let codex = null;
-  let codexOptIn = null;
-  if (spec.cli.includes("codex")) {
-    codex = runCodexTransform({
-      harnessRoot,
-      projectDir,
-      selectedInternalSkills,
-      baseline
-    });
-    absorb(codex);
-    const installScope = spec.scope ?? "project";
-    if (installScope === "global" && spec.options.withCodexTrust) {
-      codexOptIn = runCodexOptIn({ projectDir });
-    }
-  }
-  let opencode = null;
-  if (spec.cli.includes("opencode")) {
-    opencode = runOpencodeTransform({ harnessRoot, projectDir, selectedInternalSkills, baseline });
-    absorb(opencode);
-  }
-  let antigravity = null;
-  if (spec.cli.includes("antigravity")) {
-    antigravity = runAntigravityTransform({
-      harnessRoot,
-      projectDir,
-      selectedInternalSkills,
-      baseline
-    });
-    absorb(antigravity);
-  }
-  return { codex, codexOptIn, opencode, antigravity, externalFiles, externalBackups };
-}
 function runExternalPhase(ctx) {
   if (ctx.runExternal === null) {
     return null;
@@ -3190,6 +3273,24 @@ function renderPhase1Rows(log, baseline, verbose = false, withEcc = false, claud
         )
       );
     }
+    if (baseline.updateMode.externalUpdated > 0) {
+      log(
+        assetRow(
+          "success",
+          "external CLI artifacts",
+          `${baseline.updateMode.externalUpdated} files updated`
+        )
+      );
+    }
+    if (baseline.updateMode.externalBackedUp.length > 0) {
+      log(
+        assetRow(
+          "skip",
+          "edited external CLI files",
+          `${baseline.updateMode.externalBackedUp.length} backed up as *.backup-<time>`
+        )
+      );
+    }
     return;
   }
   if (baseline.backups) {