@uzysjung/agent-harness 26.148.0 → 26.149.0

package/dist/index.js

@@ -56,7 +56,7 @@ import {
   summarizeContextCost,
   upsertHarnessImport,
   writeInstallLog
-} from "./chunk-PTUM2NI3.js";
+} from "./chunk-YSW3OLH4.js";
 
 // node_modules/sisteransi/src/index.js
 var require_src = __commonJS({
@@ -741,7 +741,7 @@ var cac = (name = "") => new CAC(name);
 // package.json
 var package_default = {
   name: "@uzysjung/agent-harness",
-  version: "26.148.0",
+  version: "26.149.0",
   description: "Curate vetted AI-coding skills & plugins by your tech stack \u2014 install only what you need, across Claude Code, Codex, OpenCode & Antigravity",
   type: "module",
   publishConfig: {
@@ -776,6 +776,7 @@ var package_default = {
     "cost:report": "npm run build && node scripts/context-cost-report.mjs",
     "cost:baseline": "npm run build && node scripts/context-cost-baseline.mjs",
     "assets:history": "bash scripts/asset-history.sh",
+    "release:audit": "node scripts/release-audit.mjs",
     security: "npm audit --omit=dev --audit-level=high && npx --yes ecc-agentshield@1.4.0 scan --baseline security-baseline.json --gate",
     "security:baseline": "npx --yes ecc-agentshield@1.4.0 scan --save-baseline security-baseline.json"
   },
@@ -981,9 +982,9 @@ import {
   chmodSync as chmodSync2,
   existsSync as existsSync13,
   mkdirSync as mkdirSync4,
-  readdirSync as readdirSync3,
+  readdirSync as readdirSync4,
   readFileSync as readFileSync12,
-  unlinkSync as unlinkSync2,
+  unlinkSync as unlinkSync3,
   writeFileSync as writeFileSync6
 } from "fs";
 import { basename as basename5, dirname as dirname4, join as join12, resolve } from "path";
@@ -1230,7 +1231,7 @@ function writeRules(harnessRoot, projectDir, writer) {
     template,
     claudeMd,
     projectName: basename(projectDir),
-    projectContext: renderFillScaffold()
+    projectContext: renderFillScaffold("antigravity-rule")
   });
   return writer.write(target, rulesOut) ? target : null;
 }
@@ -1376,7 +1377,7 @@ function runCodexTransform(params) {
     template: agentsTemplate,
     claudeMd,
     projectName,
-    projectContext: renderFillScaffold(),
+    projectContext: renderFillScaffold("agents-md"),
     // Codex 는 룰 디렉터리가 없다 — 룰이 AGENTS.md 본문에 들어가야 도달한다(§Harness Rules).
     harnessRules: renderRulesBlock(portRules(harnessRoot, rules))
   });
@@ -1441,7 +1442,7 @@ function readOptionalJson(path) {
 
 // src/opencode/transform.ts
 init_esm_shims();
-import { existsSync as existsSync7, readFileSync as readFileSync6 } from "fs";
+import { existsSync as existsSync7, readdirSync, readFileSync as readFileSync6, unlinkSync } from "fs";
 import { basename as basename3, join as join7 } from "path";
 
 // src/opencode/agents-md.ts
@@ -1455,72 +1456,6 @@ function renderAgentsMd2(params) {
   return renameSlashes2(replaced);
 }
 
-// src/opencode/commands.ts
-init_esm_shims();
-function renderCommandFromSkill(source, id, opts) {
-  const { description, body } = parseSkillFrontmatter(source);
-  const finalDescription = description || `${id} (dev-method skill, OpenCode command fallback)`;
-  const escapedDesc = finalDescription.replace(/"/g, '\\"');
-  const renamedBody = renameSlashes2(body).trimEnd();
-  const agent = opts?.shellDependent ? "build" : "plan";
-  return [
-    "---",
-    `description: "${escapedDesc}"`,
-    `agent: ${agent}`,
-    "---",
-    "",
-    renamedBody,
-    ""
-  ].join("\n");
-}
-function parseSkillFrontmatter(source) {
-  const lines = source.split(/\r?\n/);
-  if (lines[0] !== "---") {
-    const firstLine = lines[0] ?? "";
-    return { description: firstLine.trim(), body: lines.slice(1).join("\n") };
-  }
-  let secondDelimAt = -1;
-  let description = "";
-  for (let i = 1; i < lines.length; i++) {
-    const line = lines[i] ?? "";
-    if (line === "---") {
-      secondDelimAt = i;
-      break;
-    }
-    const inline = line.match(/^description:\s*(.+)$/);
-    if (!inline) {
-      continue;
-    }
-    const raw = (inline[1] ?? "").trim();
-    if (raw === ">-" || raw === ">" || raw === "|" || raw === "|-") {
-      const collected = [];
-      for (let j3 = i + 1; j3 < lines.length; j3++) {
-        const next = lines[j3] ?? "";
-        if (next === "---") {
-          break;
-        }
-        if (next.trim() === "" || /^\s/.test(next)) {
-          collected.push(next.trim());
-        } else {
-          break;
-        }
-      }
-      description = collected.join(" ").replace(/\s+/g, " ").trim();
-    } else {
-      description = stripQuotes(raw);
-    }
-  }
-  const body = secondDelimAt >= 0 ? lines.slice(secondDelimAt + 1).join("\n").replace(/^\n+/, "") : source;
-  return { description, body };
-}
-function stripQuotes(raw) {
-  const trimmed = raw.trim();
-  if (trimmed.startsWith('"') && trimmed.endsWith('"')) {
-    return trimmed.slice(1, -1);
-  }
-  return trimmed;
-}
-
 // src/opencode/opencode-json.ts
 init_esm_shims();
 function renderOpencodeJson(params) {
@@ -1564,7 +1499,7 @@ function runOpencodeTransform(params) {
     template: agentsTemplate,
     claudeMd,
     projectName,
-    projectContext: renderFillScaffold(),
+    projectContext: renderFillScaffold("agents-md"),
     // codex 와 **같은 파일**(프로젝트 루트 `AGENTS.md`)이다. 두 transform 이 서로 다른 본문을
     // 쓰면 나중에 도는 쪽이 앞선 쪽을 덮어써, codex+opencode 조합에서 룰이 통째로 사라진다
     // (독립 검증 C-1 실측). 같은 내용을 쓰면 순서가 결과를 바꾸지 않는다.
@@ -1573,27 +1508,37 @@ function runOpencodeTransform(params) {
   writer.write(agentsMdPath, agentsMdOut);
   const opencodeJsonPath = join7(projectDir, "opencode.json");
   writer.write(opencodeJsonPath, renderOpencodeJson({ template: opencodeTemplate, mcp }));
-  const cmdDir = join7(projectDir, ".opencode/commands");
-  if (!refreshOnly) ensureDir(cmdDir);
-  const commandFiles = [];
+  const skillFiles = [];
   for (const id of selectedInternalSkills) {
     const src = join7(harnessRoot, "templates/skills", id, "SKILL.md");
     if (!existsSync7(src)) {
       continue;
     }
-    const target = join7(cmdDir, `${id}.md`);
-    const shellDependent = existsSync7(join7(harnessRoot, "templates/skills", id, "scripts"));
-    const wrote = writer.write(
-      target,
-      renderCommandFromSkill(readFileSync6(src, "utf8"), id, { shellDependent })
-    );
-    if (!wrote) continue;
-    commandFiles.push(target);
+    const target = join7(projectDir, ".agents", "skills", id, "SKILL.md");
+    if (!writer.write(target, renderBundledSkill(readFileSync6(src, "utf8")))) continue;
+    skillFiles.push(target);
+  }
+  const retiredCommands = [];
+  const cmdDir = join7(projectDir, ".opencode/commands");
+  if (existsSync7(cmdDir)) {
+    for (const entry of readdirSync(cmdDir)) {
+      if (!entry.endsWith(".md")) continue;
+      const id = entry.slice(0, -3);
+      if (!existsSync7(join7(harnessRoot, "templates/skills", id, "SKILL.md"))) continue;
+      const victim = join7(cmdDir, entry);
+      try {
+        backupFile(victim);
+        unlinkSync(victim);
+        retiredCommands.push(victim);
+      } catch {
+      }
+    }
   }
   return {
     agentsMdPath,
     opencodeJsonPath,
-    commandFiles,
+    skillFiles,
+    retiredCommands,
     ownership: writer.result()
   };
 }
@@ -1754,8 +1699,8 @@ function addGitignoreEnv(projectDir) {
   if (GITIGNORE_ENV_PATTERN.test(content)) {
     return false;
   }
-  const sep2 = content.endsWith("\n") ? "" : "\n";
-  appendFileSync(path, `${sep2}
+  const sep3 = content.endsWith("\n") ? "" : "\n";
+  appendFileSync(path, `${sep3}
 # Secret env (auto-added by agent-harness install)
 .env
 `);
@@ -1776,9 +1721,9 @@ function addGitignoreAgentArtifacts(projectDir) {
   if (missing.length === 0) {
     return [];
   }
-  const sep2 = content.endsWith("\n") ? "" : "\n";
+  const sep3 = content.endsWith("\n") ? "" : "\n";
   const block = [GITIGNORE_AGENT_ARTIFACT_HEADER, ...missing].join("\n");
-  appendFileSync(path, `${sep2}
+  appendFileSync(path, `${sep3}
 ${block}
 `);
   return [...missing];
@@ -1787,7 +1732,7 @@ ${block}
 // src/external-installer.ts
 init_esm_shims();
 import { spawnSync } from "child_process";
-import { existsSync as existsSync9, readdirSync, readFileSync as readFileSync8 } from "fs";
+import { existsSync as existsSync9, readdirSync as readdirSync2, readFileSync as readFileSync8 } from "fs";
 import { homedir as homedir2 } from "os";
 import { join as join9 } from "path";
 var DEFAULT_SPAWN_TIMEOUT_MS = 12e4;
@@ -1890,6 +1835,45 @@ var SKILLS_CLI_VERSION = "1.5.11";
 function skillsCliSpec() {
   return `skills@${SKILLS_CLI_VERSION}`;
 }
+function refreshExternalSkills(projectDir, deps = {}) {
+  const none = { attempted: 0, refreshed: 0, failed: [], notInCatalog: [] };
+  const log = (deps.readLog ?? readInstallLog)(projectDir);
+  if (!log) {
+    return { ...none, unknown: true };
+  }
+  const installedIds = new Set(log.assets.filter((a) => a.method === "skill").map((a) => a.id));
+  const catalog = deps.assets ?? EXTERNAL_ASSETS;
+  const targets = catalog.filter((a) => a.method.kind === "skill" && installedIds.has(a.id));
+  const inCatalog = new Set(targets.map((a) => a.id));
+  const notInCatalog = [...installedIds].filter((id) => !inCatalog.has(id));
+  if (targets.length === 0) {
+    return { ...none, notInCatalog, unknown: false };
+  }
+  const report = (deps.run ?? runExternalInstall)(
+    {
+      tracks: log.spec.tracks,
+      // `forceInclude` 가 조건 판정을 앞지르므로 옵션 값은 결과에 영향을 주지 않는다.
+      options: DEFAULT_OPTIONS,
+      cli: log.spec.cli,
+      userOverride: { forceInclude: [...installedIds], forceExclude: [] },
+      scope: log.scope,
+      projectDir
+    },
+    {
+      assets: targets,
+      ...deps.spawn ? { spawn: deps.spawn } : {},
+      ...deps.log ? { log: deps.log } : {},
+      ...deps.warn ? { warn: deps.warn } : {}
+    }
+  );
+  return {
+    attempted: report.attempted.length,
+    refreshed: report.succeeded,
+    failed: report.attempted.filter((r) => !r.ok).map((r) => ({ id: r.asset.id, message: r.message ?? "failed" })),
+    notInCatalog,
+    unknown: false
+  };
+}
 function buildSkillArgs(method, cli2, scope) {
   const args = [skillsCliSpec(), "add", method.source];
   if (method.skill) {
@@ -1899,6 +1883,7 @@ function buildSkillArgs(method, cli2, scope) {
     for (const c3 of cli2) {
       args.push("--agent", SKILLS_CLI_AGENT_MAP[c3] ?? c3);
     }
+    args.push("--copy");
   }
   if (scope === "global") {
     args.push("-g");
@@ -1958,7 +1943,7 @@ function detectVersion(method, spawn) {
         const marketplaceShort = method.pluginId.slice(at2 + 1);
         const cacheBase = join9(homedir2(), ".claude/plugins/cache", marketplaceShort, plugin);
         if (!existsSync9(cacheBase)) return void 0;
-        const versions = readdirSync(cacheBase).filter((v2) => /^\d/.test(v2)).sort();
+        const versions = readdirSync2(cacheBase).filter((v2) => /^\d/.test(v2)).sort();
         return versions.at(-1);
       }
       case "npm": {
@@ -2107,9 +2092,9 @@ import {
   copyFileSync,
   existsSync as existsSync12,
   mkdirSync as mkdirSync3,
-  readdirSync as readdirSync2,
+  readdirSync as readdirSync3,
   readFileSync as readFileSync11,
-  unlinkSync,
+  unlinkSync as unlinkSync2,
   writeFileSync as writeFileSync5
 } from "fs";
 import { basename as basename4, dirname as dirname3, join as join11 } from "path";
@@ -2119,10 +2104,11 @@ function buildUpdateSpec(projectDir, tracks) {
     tracks: [...tracks],
     options: DEFAULT_OPTIONS,
     cli: ["claude"],
-    projectDir
+    projectDir,
+    scope: readInstallLog(projectDir)?.scope ?? "project"
   };
 }
-function runUpdateMode(projectDir, templatesDir, harnessRoot) {
+function runUpdateMode(projectDir, templatesDir, harnessRoot, deps = {}) {
   const claudeDir = join11(projectDir, ".claude");
   const report = {
     updated: {},
@@ -2137,6 +2123,10 @@ function runUpdateMode(projectDir, templatesDir, harnessRoot) {
     policyBackedUp: [],
     externalUpdated: 0,
     externalBackedUp: [],
+    externalSkillsRefreshed: 0,
+    externalSkillsFailed: [],
+    externalSkillsNotInCatalog: [],
+    externalSkillsUnknown: false,
     foreignOwned: [],
     installedNew: [],
     restored: [],
@@ -2192,6 +2182,11 @@ function runUpdateMode(projectDir, templatesDir, harnessRoot) {
     if (!saidBySlotRow.has(f) && !merged.includes(f)) merged.push(f);
   }
   report.foreignOwned = merged;
+  const skillRefresh = (deps.refreshSkills ?? refreshExternalSkills)(projectDir);
+  report.externalSkillsRefreshed = skillRefresh.refreshed;
+  report.externalSkillsFailed = skillRefresh.failed;
+  report.externalSkillsNotInCatalog = skillRefresh.notInCatalog;
+  report.externalSkillsUnknown = skillRefresh.unknown;
   return report;
 }
 function installNewAssets(projectDir, templatesDir) {
@@ -2324,7 +2319,7 @@ function updateDir(target, source, ext, ctx, now = /* @__PURE__ */ new Date()) {
   if (!existsSync12(target) || !existsSync12(source)) return { updated: 0, backedUp: [] };
   let updated = 0;
   const backedUp = [];
-  for (const file of readdirSync2(target)) {
+  for (const file of readdirSync3(target)) {
     if (!file.endsWith(ext)) continue;
     const targetFile = join11(target, file);
     const sourceFile = join11(source, file);
@@ -2348,7 +2343,7 @@ function syncSkills(targetDir, sourceDir, baseline, now = /* @__PURE__ */ new Da
   const backedUp = [];
   const skippedLinks = [];
   const foreignOwned = [];
-  for (const skill of readdirSync2(sourceDir, { withFileTypes: true })) {
+  for (const skill of readdirSync3(sourceDir, { withFileTypes: true })) {
     if (!skill.isDirectory()) continue;
     const targetSkill = join11(targetDir, skill.name);
     if (occupiedByNonDirectory(targetSkill)) {
@@ -2418,7 +2413,7 @@ function refreshSkillBaseline(projectDir) {
 function pruneOrphans(target, source, ext, ctx, now = /* @__PURE__ */ new Date()) {
   if (!existsSync12(target) || !existsSync12(source)) return [];
   const removed = [];
-  for (const file of readdirSync2(target)) {
+  for (const file of readdirSync3(target)) {
     if (!file.endsWith(ext)) continue;
     const sourceFile = join11(source, file);
     if (!existsSync12(sourceFile)) {
@@ -2427,7 +2422,7 @@ function pruneOrphans(target, source, ext, ctx, now = /* @__PURE__ */ new Date()
       try {
         const current = readFileSync11(targetFile, "utf8");
         if (!isHarnessOwned2(ctx, file, current)) backupFile(targetFile, now);
-        unlinkSync(targetFile);
+        unlinkSync2(targetFile);
         removed.push(file);
       } catch {
       }
@@ -2440,7 +2435,7 @@ function retireMcpAllowlist(projectDir, now = /* @__PURE__ */ new Date()) {
   if (!existsSync12(target)) return null;
   try {
     const backup = backupFile(target, now);
-    unlinkSync(target);
+    unlinkSync2(target);
     return backup;
   } catch {
     return null;
@@ -2604,7 +2599,7 @@ function applySupersededCleanup(spec, projectDir, found) {
   const kept = [];
   for (const asset of found) {
     try {
-      unlinkSync2(join12(projectDir, asset.target));
+      unlinkSync3(join12(projectDir, asset.target));
       removed.push(asset.target);
     } catch {
       kept.push(asset.target);
@@ -2942,7 +2937,7 @@ function chmodHooksSync(hookDir) {
   }
 }
 function listHookFiles(hookDir) {
-  return readdirSync3(hookDir, { withFileTypes: true }).filter((e2) => e2.isFile() && e2.name.endsWith(".sh")).map((e2) => resolve(hookDir, e2.name));
+  return readdirSync4(hookDir, { withFileTypes: true }).filter((e2) => e2.isFile() && e2.name.endsWith(".sh")).map((e2) => resolve(hookDir, e2.name));
 }
 
 // src/commands/install-render.ts
@@ -3116,7 +3111,24 @@ function renderCliArtifacts(log, spec, report) {
   }
   if (report.opencode) {
     log(assetRow("success", "opencode.json", "$schema + 5 keys"));
-    log(assetRow("success", ".opencode/commands/", `${report.opencode.commandFiles.length} files`));
+    if (report.opencode.skillFiles.length > 0) {
+      log(
+        assetRow(
+          "success",
+          ".agents/skills/",
+          `${report.opencode.skillFiles.length} dev-method skills (codex\xB7antigravity \uC640 \uAC19\uC740 \uC790\uB9AC)`
+        )
+      );
+    }
+    if (report.opencode.retiredCommands.length > 0) {
+      log(
+        assetRow(
+          "skip",
+          ".opencode/commands/",
+          `${report.opencode.retiredCommands.length} retired \xB7 \uAC19\uC740 \uC2A4\uD0AC\uC774 .agents/skills/ \uB85C \uC62E\uACA8\uC84C\uB2E4 (\uBC31\uC5C5 \uB0A8\uAE40)`
+        )
+      );
+    }
   }
   if (report.antigravity) {
     if (report.antigravity.rulesFile) {
@@ -3350,6 +3362,39 @@ function renderPhase1Rows(log, baseline, verbose = false, withEcc = false, claud
         )
       );
     }
+    if (baseline.updateMode.externalSkillsRefreshed > 0) {
+      log(
+        assetRow(
+          "success",
+          "external skills",
+          `${baseline.updateMode.externalSkillsRefreshed} refreshed from upstream`
+        )
+      );
+    }
+    if (baseline.updateMode.externalSkillsFailed.length > 0) {
+      const failed = baseline.updateMode.externalSkillsFailed;
+      const head = failed[0];
+      const meta = failed.length === 1 ? `${head.id}: ${head.message}` : `${failed.map((f) => f.id).join(", ")} (${failed.length}\uAC74) \xB7 \uC608: ${head.message}`;
+      log(assetRow("skip", "external skills", `${meta} \xB7 \uB2E4\uC74C update \uC5D0\uC11C \uB2E4\uC2DC \uC2DC\uB3C4\uD55C\uB2E4`));
+    }
+    if (baseline.updateMode.externalSkillsNotInCatalog.length > 0) {
+      log(
+        assetRow(
+          "skip",
+          "external skills",
+          `${baseline.updateMode.externalSkillsNotInCatalog.join(", ")} \xB7 \uCE74\uD0C8\uB85C\uADF8\uC5D0 \uC5C6\uC5B4 \uAC31\uC2E0 \uB300\uC0C1\uC774 \uC544\uB2C8\uB2E4`
+        )
+      );
+    }
+    if (baseline.updateMode.externalSkillsUnknown) {
+      log(
+        assetRow(
+          "skip",
+          "external skills",
+          "\uC124\uCE58 \uAE30\uB85D\uC774 \uC5C6\uC5B4 \uAC31\uC2E0 \uB300\uC0C1\uC744 \uD310\uC815\uD560 \uC218 \uC5C6\uB2E4 \xB7 `agent-harness install` \uB85C \uB2E4\uC2DC \uAE54\uBA74 \uAE30\uB85D\uB41C\uB2E4"
+        )
+      );
+    }
     return;
   }
   if (baseline.backups) {
@@ -3816,8 +3861,16 @@ function registerListCommand(cli2) {
 // src/commands/uninstall.ts
 init_esm_shims();
 import { spawnSync as spawnSync2 } from "child_process";
-import { existsSync as existsSync15, readFileSync as readFileSync14, rmSync, writeFileSync as writeFileSync7 } from "fs";
-import { join as join14, resolve as resolve4 } from "path";
+import {
+  existsSync as existsSync15,
+  lstatSync as lstatSync2,
+  readdirSync as readdirSync5,
+  readFileSync as readFileSync14,
+  rmdirSync,
+  rmSync,
+  writeFileSync as writeFileSync7
+} from "fs";
+import { dirname as dirname5, join as join14, relative as relative2, resolve as resolve4, sep as sep2 } from "path";
 
 // src/uninstall-interactive.ts
 init_esm_shims();
@@ -4953,8 +5006,13 @@ function uninstallAction(options, deps = {}) {
   const logSurvives = selectedIds !== null;
   const { succeeded, failed, removedIds } = executeReverse(plan, log, logSurvives);
   if (!keepTemplates) {
-    const { rootClaudeMdKept, importStripped } = removeTemplates(installLog, projectDir, rm);
+    const { rootClaudeMdKept, importStripped, external } = removeTemplates(
+      installLog,
+      projectDir,
+      rm
+    );
     log(`  ${status.success(`templates removed: ${formatTemplateList(installLog)}`)}`);
+    for (const line of externalRemovalLines(external)) log(line);
     if (importStripped) {
       log(`  ${status.success("CLAUDE.md \u2014 harness @import removed (\uBCF8\uBB38 \uBCF4\uC874)")}`);
     }
@@ -5080,6 +5138,7 @@ function dryRunLines(plan, installLog, projectDir, keepTemplates, rootFiles) {
     if (hasRootImport(projectDir)) {
       lines.push("  \u25CB strip harness @import from CLAUDE.md (\uBCF8\uBB38 \uBCF4\uC874)");
     }
+    lines.push(...previewExternalLines(installLog, projectDir));
   }
   lines.push(...advisoryLines(plan, projectDir, rootFiles), "");
   return lines;
@@ -5205,13 +5264,46 @@ function removeTemplates(log, projectDir, rm) {
   rm(join14(projectDir, log.templates.claudeDir));
   if (log.templates.codexDir) rm(join14(projectDir, log.templates.codexDir));
   if (log.templates.opencodeDir) rm(join14(projectDir, log.templates.opencodeDir));
+  const external = removeExternalFiles(log, projectDir, rm);
   const importStripped = stripRootImport(projectDir);
   const rootMd = log.templates.rootClaudeMd;
   if (rootMd) {
-    if (rootClaudeMdModified(log, projectDir)) return { rootClaudeMdKept: true, importStripped };
+    if (rootClaudeMdModified(log, projectDir))
+      return { rootClaudeMdKept: true, importStripped, external };
     rm(join14(projectDir, rootMd.path));
   }
-  return { rootClaudeMdKept: false, importStripped };
+  return { rootClaudeMdKept: false, importStripped, external };
+}
+function removeExternalFiles(log, projectDir, rm) {
+  const removed = [];
+  const kept = [];
+  for (const { path, sha256 } of log.externalFiles ?? []) {
+    const abs = join14(projectDir, path);
+    if (!existsSync15(abs)) continue;
+    if (!lstatSync2(abs).isFile()) continue;
+    if (hashContent(readFileSync14(abs, "utf8")) !== sha256) {
+      kept.push(path);
+      continue;
+    }
+    rm(abs);
+    removed.push(path);
+  }
+  for (const path of removed) pruneEmptyDirsUpward(projectDir, dirname5(join14(projectDir, path)));
+  return { removed, kept };
+}
+function pruneEmptyDirsUpward(projectDir, startDir) {
+  let cursor = startDir;
+  while (true) {
+    const rel = relative2(projectDir, cursor);
+    if (rel === "" || rel.startsWith(`..${sep2}`) || rel === "..") return;
+    try {
+      if (readdirSync5(cursor).length > 0) return;
+      rmdirSync(cursor);
+    } catch {
+      return;
+    }
+    cursor = dirname5(cursor);
+  }
 }
 function stripRootImport(projectDir) {
   const current = readRootClaudeMd(projectDir);
@@ -5224,6 +5316,33 @@ function stripRootImport(projectDir) {
     return false;
   }
 }
+function previewExternalLines(installLog, projectDir) {
+  const lines = [];
+  let removable = 0;
+  for (const { path, sha256 } of installLog.externalFiles ?? []) {
+    const abs = join14(projectDir, path);
+    if (!existsSync15(abs)) continue;
+    if (hashContent(readFileSync14(abs, "utf8")) !== sha256) {
+      lines.push(`  \u25CB keep ${path} (modified since install \u2014 preserved)`);
+      continue;
+    }
+    removable += 1;
+  }
+  if (removable > 0) lines.unshift(`  \u25CB remove ${removable} CLI output file(s)`);
+  return lines;
+}
+function externalRemovalLines(external) {
+  const lines = [];
+  if (external.removed.length > 0) {
+    lines.push(`  ${status.success(`CLI outputs removed: ${external.removed.length} file(s)`)}`);
+  }
+  for (const path of external.kept) {
+    lines.push(
+      `  ${c.yellow("\u2298")} ${path} kept \u2014 modified since install. Remove manually if intended.`
+    );
+  }
+  return lines;
+}
 function hasRootImport(projectDir) {
   const current = readRootClaudeMd(projectDir);
   return current !== null && stripHarnessImport(current) !== null;