@uzysjung/agent-harness 26.170.0 → 26.171.0

package/dist/index.js

@@ -48,10 +48,7 @@ import {
   claimBackupDir,
   claudeRecorded,
   claudeTargets,
-  collectPolicyHashes,
-  collectSkillHashes,
   continuousNoteEnd,
-  copyDir,
   copyFile,
   corruptedInstallLogMessage,
   createOutsideGuard,
@@ -71,7 +68,6 @@ import {
   isAssetSelected,
   isCliBase,
   isCliNeutralTarget,
-  isHarnessOwned,
   isInstallScope,
   isKeyId,
   isOutsideProject,
@@ -105,7 +101,7 @@ import {
   targetsInclude,
   upsertHarnessImport,
   writeInstallLog
-} from "./chunk-MGFWOWF4.js";
+} from "./chunk-U4X4Z333.js";
 
 // node_modules/sisteransi/src/index.js
 var require_src = __commonJS({
@@ -1200,6 +1196,13 @@ var FILES = `
 .claude/skills/verification-loop/SKILL.md 1744f867f7868b83b480341c2e8d08bff3848c2408255871d3aba0c2f7eff2f2
 .claude/skills/verification-loop/agents/openai.yaml 1907fd04fea5c83d15faf14acfc978de90076d4351341cf9259639aa0c3b7bd3
 .claude/skills/verification-loop/references/tracks.md de11792d447c2e8ea67e8367c6655bd94646b1ba3f29184c4521cae01facc6ec
+.uzys-agent-harness/check-absence.sh b9bbc7bbdc69d51eac2a4e4748ee7c137dd585b4f3ca1d9bd2404eab9694c9b4
+.uzys-agent-harness/check-absence.sh c08d3a1df4188e5f37ddf7f7b53901184d87bdbed63c5c99afbddd0ef6a0442d
+.uzys-agent-harness/check-absence.sh 3655faf030e319e26a6386b316df004f4e2fee963fe0ebacb661030e85cda92e
+.uzys-agent-harness/protect-branch.sh 3356c4941ef1d5c174b10fd8858887f00b3b06c851788064e0e3cc6a6c8c56fd
+.uzys-agent-harness/protect-branch.sh ecd46450beae58c085a0d407c34441ae470092d9963bd4a37f09416a22cfad35
+.uzys-agent-harness/spec-drift-check.sh f35a64dd9954a776c3eabf356c0cda017db30e129d08022341a07c5a9d2b6f9a
+.uzys-agent-harness/spec-drift-check.sh 3c6925b03775454ec3a81e63dda400511824a9ac6e3f8f30b302ce1edf39d062
 `;
 var LEGACY_HARNESS_FILES = (() => {
   const m = /* @__PURE__ */ new Map();
@@ -1535,13 +1538,14 @@ function planUpsert(args) {
 }
 function planStrip(args) {
   const alwaysStrip2 = args.alwaysStrip ?? (() => false);
-  const plan = { remove: [], kept: [], portions: /* @__PURE__ */ new Map() };
+  const plan = { remove: [], removedEdited: [], kept: [], portions: /* @__PURE__ */ new Map() };
   for (const [key, sha] of args.recorded) {
     if (args.excluded.has(key)) continue;
     const now = args.present.get(key);
     if (now === void 0) continue;
     if (now === sha || alwaysStrip2(key)) {
       plan.remove.push(key);
+      if (now !== sha) plan.removedEdited.push(key);
     } else {
       plan.kept.push(key);
       plan.portions.set(key, sha);
@@ -1827,6 +1831,7 @@ var jsonKeys = {
       text: changed ? serialize(root) : existing,
       changed,
       removed: plan.remove,
+      removedEdited: plan.removedEdited,
       kept: plan.kept,
       portions: plan.portions,
       empty: Object.keys(root).length === 0
@@ -2018,6 +2023,7 @@ var lines = {
       text,
       changed: text !== existing,
       removed: plan.remove,
+      removedEdited: plan.removedEdited,
       kept: plan.kept,
       portions: plan.portions,
       empty: text.trim() === ""
@@ -2472,6 +2478,7 @@ var markerMd = {
       text,
       changed: text !== existing,
       removed: plan.remove,
+      removedEdited: plan.removedEdited,
       kept: plan.kept,
       portions: plan.portions,
       empty: text.trim() === ""
@@ -3508,6 +3515,7 @@ var tomlRegion = {
       text,
       changed: text !== existing,
       removed: plan.remove,
+      removedEdited: plan.removedEdited,
       kept: plan.kept,
       portions: plan.portions,
       empty: text.trim() === ""
@@ -3840,7 +3848,7 @@ function harnessWrite(input) {
   const update = input.run === "update";
   if (input.excluded) return j("leave", "", "keep");
   if (disk === null) {
-    if (rec.state === "none") return j("create", update ? LINES.newInRelease : LINES.wrote, "sha");
+    if (rec.state !== "sha") return j("create", update ? LINES.newInRelease : LINES.wrote, "sha");
     return j("create", update ? LINES.restored : LINES.wrote, "sha");
   }
   if (rec.state === "none") {
@@ -4260,7 +4268,11 @@ function scanFieldOf(log, path) {
     ({ dir, ext }) => path.startsWith(`${CLAUDE_DIR}${dir}/`) && path.endsWith(ext)
   );
   if (policy === void 0) return "outside";
-  return present2((log.policyFiles ?? []).some((f) => f.path.startsWith(`${policy.dir}/`)));
+  return present2(
+    (log.policyFiles ?? []).some(
+      (f) => f.path.startsWith(`${policy.dir}/`) && !RETIRED_PATHS.includes(f.path)
+    )
+  );
 }
 function isExternalOnly(path) {
   const owners = ownersOf(path);
@@ -4296,6 +4308,7 @@ function createInstallWriter(args) {
   const portionPaths = [];
   const backups = [];
   const judged = [];
+  const writes = [];
   const shared2 = [];
   const outside = createOutsideGuard(projectDir);
   const rel = (abs) => relative(projectDir, abs).split(sep).join("/");
@@ -4310,12 +4323,15 @@ function createInstallWriter(args) {
     if (outside.skip(abs)) return null;
     const next = "source" in from ? readFileSync4(from.source, "utf8") : from.content;
     const disk = existsSync6(abs) ? readFileSync4(abs, "utf8") : null;
+    const rec = recorded(previousLog, path, opts);
+    const diskSha = rec.state === "no-sha" && disk !== null ? hashContent(disk) : null;
     const j4 = judge({
       op: "write",
       kind: "harness",
-      rec: recorded(previousLog, path, opts),
+      rec: diskSha !== null && isLegacyHarnessFile(path, diskSha) ? { state: "sha", sha256: diskSha } : rec,
       disk,
-      next
+      next,
+      ...args.run === void 0 ? {} : { run: args.run }
     });
     let backupAbs;
     const write = () => {
@@ -4357,13 +4373,11 @@ function createInstallWriter(args) {
       default:
         throw new Error(`install: '${j4.record}' is not a write record (${path})`);
     }
+    const line = backup === void 0 ? j4.line : j4.line.replace(BACKUP_PLACEHOLDER, backup);
+    const backupPair = backup === void 0 || backupAbs === void 0 ? {} : { backup, backupAbs };
+    writes.push({ path, verdict: j4.verdict, record: j4.record, line, ...backupPair });
     if (j4.line === "" || j4.verdict === "create" || j4.verdict === "overwrite") return null;
-    const out = {
-      path,
-      verdict: j4.verdict,
-      line: backup === void 0 ? j4.line : j4.line.replace(BACKUP_PLACEHOLDER, backup),
-      ...backup === void 0 || backupAbs === void 0 ? {} : { backup, backupAbs }
-    };
+    const out = { path, verdict: j4.verdict, line, ...backupPair };
     judged.push(out);
     return out;
   }
@@ -4424,7 +4438,12 @@ function createInstallWriter(args) {
     if (disk === null && ![...res.portions.keys()].some((k2) => !isContainerKey(k2))) {
       return result("leave", "");
     }
+    let backupAbs;
     if (res.changed) {
+      if (disk !== null && res.removedEdited.length > 0) {
+        backupAbs = backupFile(abs, now);
+        backups.push(backupAbs);
+      }
       mkdirSync(dirname(abs), { recursive: true });
       writeFileSync3(abs, res.text);
     }
@@ -4446,7 +4465,7 @@ function createInstallWriter(args) {
     const ids = (keys) => [...keys].flatMap((k2) => keyId(path, k2) ?? []);
     const out = excludedKeys(path, excluded);
     const removedOut = res.removed.filter((k2) => out.has(k2));
-    const removedEdited = res.removedEdited.filter((k2) => out.has(k2));
+    const removedEdited = res.removedEdited;
     const keptOut = res.kept.filter((k2) => out.has(k2));
     const onlyRemoved = disk !== null && res.removed.length > 0 && res.replaced.length === 0 && addedKeys.length === 0 && restoredKeys.size === 0;
     const wrote = onlyRemoved ? "removed the harness part" : j4.line;
@@ -4454,6 +4473,7 @@ function createInstallWriter(args) {
     const retired = names(res.removed.filter((k2) => !out.has(k2) && !render.has(k2)));
     const replaced = names(res.replaced);
     return result(j4.verdict, line, {
+      ...backupAbs === void 0 ? {} : { backup: rel(backupAbs), backupAbs },
       ...retired.length > 0 ? { retired } : {},
       ...replaced.length > 0 ? { replaced } : {},
       changed: res.changed,
@@ -4481,6 +4501,7 @@ function createInstallWriter(args) {
       portionPaths: [...portionPaths],
       backups: [...backups],
       judged: [...judged],
+      writes: [...writes],
       shared: [...shared2],
       outside: outside.list()
     })
@@ -4770,7 +4791,7 @@ function legacyGitignoreSeed(text, render, previous) {
 // src/installer.ts
 init_esm_shims();
 import { chmodSync as chmodSync3, existsSync as existsSync22, readdirSync as readdirSync5, readFileSync as readFileSync22, writeFileSync as writeFileSync8 } from "fs";
-import { basename as basename4, join as join31, relative as relative4, resolve, sep as sep5 } from "path";
+import { basename as basename4, join as join31, relative as relative5, resolve, sep as sep6 } from "path";
 
 // src/anchor-seed.ts
 init_esm_shims();
@@ -5049,41 +5070,34 @@ function createOwnedWriter(projectDir, baseline, options = {}) {
         return false;
       }
       if (outside.skip(absPath)) return false;
-      const digest = hashContent(content);
-      if (!existsSync9(absPath)) {
-        const recordedPath = baseline.has(rel);
-        if (refreshOnly && !opts?.createInRefresh && !recordedPath) return false;
+      const recordedSha = baseline.get(rel);
+      const rec = recordedSha !== void 0 ? { state: "sha", sha256: recordedSha } : { state: owned(rel) ? "no-sha" : "none" };
+      const disk = existsSync9(absPath) ? readFileSync6(absPath, "utf8") : null;
+      if (disk === null && refreshOnly && !opts?.createInRefresh && rec.state !== "sha")
+        return false;
+      const { verdict, record } = judge({ op: "write", kind: "harness", rec, disk, next: content });
+      let backupRel = null;
+      if (verdict === "backup+overwrite" || verdict === "overwrite" && opts?.backupFirst === true) {
+        const backup = backupFile(absPath, now);
+        backupPaths.push(backup);
+        journal?.backup(backup);
+        backupRel = relative2(projectDir, backup).split(sep3).join("/");
+        if (verdict === "backup+overwrite" && rec.state !== "none") backedUp.push(rel);
+      }
+      if (record === "displaced" || record === "displaced+sha") {
+        displace({ path: rel, change: "displaced", notes: backupRel === null ? [] : [backupRel] });
+      }
+      if (verdict !== "leave") {
         mkdirSync2(dirname2(absPath), { recursive: true });
         writeFileSync4(absPath, content);
         updated++;
-        if (refreshOnly && recordedPath) restored.push(rel);
-      } else {
-        const current = readFileSync6(absPath, "utf8");
-        const firstContact = !baseline.has(rel) && !owned(rel);
-        if (current === content && firstContact) {
-          displace({ path: rel, change: "displaced", notes: [] });
-          return true;
-        }
-        if (current !== content) {
-          if (!isHarnessOwned(baseline, rel, current)) {
-            const backup = backupFile(absPath, now);
-            backupPaths.push(backup);
-            journal?.backup(backup);
-            if (firstContact) {
-              const backupRel = relative2(projectDir, backup).split(sep3).join("/");
-              displace({ path: rel, change: "displaced", notes: [backupRel] });
-            } else backedUp.push(rel);
-          } else if (opts?.backupFirst === true) {
-            const backup = backupFile(absPath, now);
-            backupPaths.push(backup);
-            journal?.backup(backup);
-          }
-          writeFileSync4(absPath, content);
-          updated++;
-        }
+        if (refreshOnly && verdict === "create" && rec.state === "sha") restored.push(rel);
+      }
+      if (record === "sha" || record === "displaced+sha") {
+        const digest = hashContent(content);
+        written.set(rel, digest);
+        journal?.file({ path: rel, sha256: digest });
       }
-      written.set(rel, digest);
-      journal?.file({ path: rel, sha256: digest });
       return true;
     },
     ...journal === void 0 ? {} : { journal },
@@ -5158,7 +5172,7 @@ function renderRulesBlock(rules) {
 // src/shared-write.ts
 init_esm_shims();
 import { existsSync as existsSync11, mkdirSync as mkdirSync3, readFileSync as readFileSync8, rmSync, statSync as statSync3, writeFileSync as writeFileSync5 } from "fs";
-import { dirname as dirname3, join as join13 } from "path";
+import { dirname as dirname3, join as join13, relative as relative3, sep as sep4 } from "path";
 function toPortions(path, portions) {
   const adapter = adapterFor(path);
   if (adapter === null) throw new Error(`shared-write: ${path} is not a shared file`);
@@ -5396,6 +5410,10 @@ function stripShared(params) {
     });
   }
   const fileRemoved = params.removeIfEmpty === true && res.removed.length > 0 && res.empty;
+  const edited = res.removedEdited.length === 0 ? void 0 : {
+    keys: res.removedEdited,
+    backup: params.write ? relative3(projectDir, backupFile(abs)).split(sep4).join("/") : `${path}.backup-<time>`
+  };
   if (params.write && fileRemoved) rmSync(abs);
   else if (params.write && res.changed) writeFileSync5(abs, res.text);
   const action = res.removed.length > 0 ? "removed" : res.kept.length > 0 ? "left" : "none";
@@ -5403,6 +5421,7 @@ function stripShared(params) {
     removed: res.removed,
     kept: res.kept,
     portions: toPortions(path, res.portions),
+    ...edited === void 0 ? {} : { edited },
     ...fileRemoved ? { fileRemoved } : {}
   });
 }
@@ -6453,7 +6472,7 @@ import {
   rmSync as rmSync3
 } from "fs";
 import { homedir as homedir2 } from "os";
-import { dirname as dirname6, join as join25, relative as relative3, sep as sep4 } from "path";
+import { dirname as dirname6, join as join25, relative as relative4, sep as sep5 } from "path";
 var SKILL_ROOTS = [".claude/skills", ".agents/skills"];
 function skillRootOf(cli) {
   return cli === "claude" ? ".claude/skills" : ".agents/skills";
@@ -6815,7 +6834,7 @@ function pruneEmptyDirs(dir) {
   }
 }
 function toProjectRel(projectDir, abs) {
-  return relative3(projectDir, abs).split(sep4).join("/");
+  return relative4(projectDir, abs).split(sep5).join("/");
 }
 function recordRefreshedFiles(projectDir, log, report, displaced, writeLog) {
   const next = new Map(
@@ -7200,8 +7219,6 @@ init_esm_shims();
 import {
   copyFileSync,
   existsSync as existsSync21,
-  lstatSync as lstatSync5,
-  mkdirSync as mkdirSync7,
   readdirSync as readdirSync4,
   readFileSync as readFileSync21,
   rmdirSync as rmdirSync2,
@@ -7268,91 +7285,12 @@ function runUpdateMode(projectDir, templatesDir, harnessRoot, deps = {}, only) {
     demotedAgents: [],
     mcpAllowlistRetired: null
   };
-  const fresh = installNewAssets(projectDir, templatesDir, wants, outside);
-  report.installedNew = fresh.installed;
-  report.restored = fresh.restored;
   const logAtStart = readInstallLog(projectDir);
   const claudeManaged = logAtStart === null || installedClis(logAtStart).includes("claude");
-  const recordOf = recordedStateOf(logAtStart);
-  const claudeDisplaced = [];
   report.claudeUnrecorded = !claudeManaged && logAtStart !== null && existsSync21(claudeDir) ? recordClaudeCommand(logAtStart, installedTracks(projectDir)) : null;
-  const policyBase = policyBaseline(projectDir);
-  const prunedPaths = /* @__PURE__ */ new Set();
-  for (const { dir, ext } of POLICY_DIRS) {
-    if (!claudeManaged || !wants(dir === "hooks" ? "hooks" : "rules")) continue;
-    const target = join30(claudeDir, dir);
-    const source = join30(templatesDir, dir);
-    const label = `.claude/${dir}`;
-    const ctx = {
-      prefix: dir,
-      baseline: policyBase,
-      outside,
-      excluded: excludedIds(logAtStart),
-      // 0단계가 방금 깐 파일은 기록 전이지만 하네스 것이다 — 첫 접촉으로 읽지 않는다
-      justWritten: new Set(fresh.installed),
-      ...recordOf === void 0 ? {} : { recordOf }
-    };
-    const synced = updateDir(target, source, ext, ctx);
-    report.updated[label] = synced.updated;
-    report.policyBackedUp.push(...synced.backedUp);
-    claudeDisplaced.push(...synced.displaced);
-    report.pruned[label] = pruneOrphans(target, source, ext, ctx);
-    for (const f of report.pruned[label]) prunedPaths.add(`${label}/${f}`);
-  }
-  const syncedDirs = POLICY_DIRS.filter((d2) => wants(d2.dir === "hooks" ? "hooks" : "rules")).map(
-    (d2) => d2.dir
-  );
-  if (claudeManaged && syncedDirs.length > 0)
-    refreshPolicyBaseline(
-      projectDir,
-      templatesDir,
-      syncedDirs,
-      outsidePaths(outside, ".claude/"),
-      notOursUnder(claudeDisplaced, ".claude/")
-    );
-  const prunedRestored = logAtStart === null || prunedPaths.size === 0 ? [] : restoreDisplaced(logAtStart, projectDir, { has: (p2) => prunedPaths.has(p2), write: true });
-  const skillTargets = logAtStart === null ? void 0 : recordedSkillIds(projectDir, logAtStart);
-  const skillSync = claudeManaged && wants("skills") ? syncSkills(
-    join30(claudeDir, "skills"),
-    join30(templatesDir, "skills"),
-    skillBaseline(projectDir),
-    /* @__PURE__ */ new Date(),
-    (relInSkills) => foreignOwnedTarget(projectDir, `.claude/skills/${relInSkills}`),
-    outside,
-    excludedSkillOf(logAtStart),
-    {
-      ...recordOf === void 0 ? {} : { recordOf },
-      ...skillTargets === void 0 ? {} : { targets: skillTargets }
-    }
-  ) : {
-    updated: 0,
-    backedUp: [],
-    skippedLinks: [],
-    foreignOwned: [],
-    pruned: [],
-    displaced: []
-  };
-  claudeDisplaced.push(...skillSync.displaced);
-  if (wants("skills")) report.updated[".claude/skills"] = skillSync.updated;
-  report.skillsBackedUp = skillSync.backedUp;
-  report.skillsSkippedLinks = skillSync.skippedLinks;
-  report.skillsPruned = skillSync.pruned;
-  const newSkills = claudeManaged && wants("new-skills") ? installNewSkillDirs(projectDir, templatesDir, installedTracks(projectDir), outside) : { installed: [], restored: [], foreignOwned: [] };
-  report.installedNew.push(...newSkills.installed);
-  report.restored.push(...newSkills.restored);
-  const copiedSkills = [...newSkills.installed, ...newSkills.restored];
-  if (claudeManaged && wants("skills"))
-    refreshSkillBaseline(
-      projectDir,
-      templatesDir,
-      outsidePaths(outside, ".claude/skills/"),
-      skillTargets,
-      notOursUnder(claudeDisplaced, ".claude/skills/")
-    );
-  else if (claudeManaged && copiedSkills.length > 0)
-    recordNewSkillBaseline(projectDir, templatesDir, copiedSkills);
-  if (claudeDisplaced.length > 0 || prunedRestored.length > 0)
-    recordDisplaced(projectDir, claudeDisplaced, prunedRestored);
+  const harness = logAtStart === null ? { displaced: [], restored: [], foreignOwned: [], outside: [] } : updateHarnessFiles({ projectDir, templatesDir, log: logAtStart, wants, outside, report });
+  const claudeDisplaced = harness.displaced;
+  const prunedRestored = harness.restored;
   if (existsSync21(claudeDir) && claudeManaged) {
     if (wants("anchor")) syncHarnessAnchor(projectDir, templatesDir, report, outside);
   }
@@ -7388,8 +7326,6 @@ function runUpdateMode(projectDir, templatesDir, harnessRoot, deps = {}, only) {
   if (wants("hooks")) report.mcpAllowlistRetired = retireMcpAllowlist(projectDir);
   report.retiredAgents = staleAgentFiles(claudeDir);
   report.demotedAgents = demotedAgentFiles(claudeDir, installedTracks(projectDir));
-  if (logAtStart !== null && wants("rules"))
-    refreshNeutralHelpers(projectDir, templatesDir, report);
   const external = wants("external") ? refreshExternalCli(projectDir, harnessRoot, legacyDroppedKeys(logAtStart), harnessMcp) : {
     externalUpdated: 0,
     externalBackedUp: [],
@@ -7461,12 +7397,7 @@ function runUpdateMode(projectDir, templatesDir, harnessRoot, deps = {}, only) {
   report.restoredWithout = restoredWithoutArgs(report.restored, installedTracks(projectDir));
   const saidBySlotRow = new Set(report.skillsSkippedLinks.map((id) => `.claude/skills/${id}`));
   const merged = [];
-  for (const f of [
-    ...skillSync.foreignOwned,
-    ...fresh.foreignOwned,
-    ...newSkills.foreignOwned,
-    ...external.externalForeignOwned
-  ]) {
+  for (const f of [...harness.foreignOwned, ...external.externalForeignOwned]) {
     if (!saidBySlotRow.has(f) && !merged.includes(f)) merged.push(f);
   }
   report.foreignOwned = merged;
@@ -7496,7 +7427,12 @@ function runUpdateMode(projectDir, templatesDir, harnessRoot, deps = {}, only) {
     ).filter((id) => !skillRefresh.notInCatalog.includes(id))
   ].filter((id) => !saidAsRemoved.has(id));
   report.externalSkillsUnknown = skillRefresh.unknown;
-  const outsideLinks = mergeOutside(outside.list(), sharedWrites.outside, external.externalOutside);
+  const outsideLinks = mergeOutside(
+    harness.outside,
+    outside.list(),
+    sharedWrites.outside,
+    external.externalOutside
+  );
   if (outsideLinks.length > 0) report.outsideLinks = outsideLinks;
   const displacedAll = [...claudeDisplaced, ...external.displaced];
   const displacedMoved = displacedAll.filter((f) => f.notes.length > 0).map((f) => f.path);
@@ -7590,7 +7526,9 @@ function checksumOnRecord(log) {
     ...(log.policyFiles ?? []).map((f) => `.claude/${f.path}`),
     ...(log.skillFiles ?? []).map((f) => `.claude/skills/${f.path}`),
     ...(log.externalFiles ?? []).map((f) => f.path),
-    ...log.assets.flatMap((a) => a.files ?? []).map((f) => f.path)
+    ...log.assets.flatMap((a) => a.files ?? []).map((f) => f.path),
+    // #800 — 함께 쓰는 파일은 몫마다 sha 가 있다 — 그 백업은 설치자 편집이 확실하다
+    ...(log.portions ?? []).map((p2) => p2.path)
   ]);
   const anchor = log.templates.rootClaudeMd;
   if (anchor !== void 0) paths.add(anchor.path);
@@ -7729,44 +7667,197 @@ function demotedAgentFiles(claudeDir, tracks) {
   );
   return readdirSync4(dir, { withFileTypes: true }).filter((e2) => e2.isFile() && e2.name.endsWith(".md")).map((e2) => basename3(e2.name, ".md")).filter((id) => demoted.includes(id));
 }
-function installNewAssets(projectDir, templatesDir, wants, outside) {
-  const installed = [];
-  const restored = [];
+function updateHarnessTargets(projectDir, templatesDir, log, wants, report, foreignOwned) {
+  const files = [];
+  const claude = installedClis(log).includes("claude");
+  const excluded = excludedIds(log);
+  for (const e2 of trackOnlyFileAssets(installedTracks(projectDir))) {
+    if (e2.target === HARNESS_ANCHOR_FILE || e2.target === SETTINGS_TARGET) continue;
+    if (!wants(e2.target.startsWith(".claude/hooks/") ? "hooks" : "rules")) continue;
+    if (e2.target.startsWith(".claude/") && !claude) continue;
+    if (isBaselineExcluded(e2.target, excluded)) continue;
+    const source = join30(templatesDir, e2.source);
+    if (!existsSync21(source)) continue;
+    const policy = POLICY_DIRS.find((d2) => e2.target.startsWith(`.claude/${d2.dir}/`));
+    files.push({
+      path: e2.target,
+      source,
+      unit: e2.target,
+      unitExisted: existsSync21(join30(projectDir, e2.target)),
+      label: policy === void 0 ? e2.target : `.claude/${policy.dir}`
+    });
+  }
+  const refreshedSkills = [];
+  const skillsSource = join30(templatesDir, "skills");
+  if (!claude || !(wants("skills") || wants("new-skills")) || !existsSync21(skillsSource)) {
+    return { files, refreshedSkills };
+  }
+  const ids = recordedSkillIds(projectDir, log);
+  const creatable = claudeSkillIds(projectDir, log);
+  const excludedSkill = excludedSkillOf(log);
+  for (const d2 of readdirSync4(skillsSource, { withFileTypes: true })) {
+    if (!d2.isDirectory()) continue;
+    const unit = `.claude/skills/${d2.name}`;
+    if (occupiedByNonDirectory(join30(projectDir, unit))) {
+      report.skillsSkippedLinks.push(d2.name);
+      continue;
+    }
+    if (!ids.has(d2.name) || excludedSkill(d2.name)) continue;
+    const existed = existsSync21(join30(projectDir, unit));
+    if (existed ? !wants("skills") : !wants("new-skills") || !creatable.has(d2.name)) continue;
+    for (const rel of listFilesRecursive(join30(skillsSource, d2.name))) {
+      const foreign = foreignOwnedTarget(projectDir, `${unit}/${rel}`);
+      if (foreign !== null) {
+        if (!foreignOwned.includes(foreign)) foreignOwned.push(foreign);
+        continue;
+      }
+      const source = join30(skillsSource, d2.name, rel);
+      files.push({
+        path: `${unit}/${rel}`,
+        source,
+        unit,
+        unitExisted: existed,
+        label: ".claude/skills"
+      });
+    }
+    if (existed) refreshedSkills.push(d2.name);
+  }
+  return { files, refreshedSkills };
+}
+function updateHarnessFiles(args) {
+  const { projectDir, templatesDir, log, wants, outside, report } = args;
+  const now = /* @__PURE__ */ new Date();
+  const claude = installedClis(log).includes("claude");
+  const claims = retiredClaims(log, projectDir, log.policyFiles ?? []);
+  const isTarget = recordedTrackTargets(log);
+  const recordOf = (path) => recorded(log, path, { isTarget });
+  const writer = createInstallWriter({
+    projectDir,
+    previousLog: log,
+    excluded: excludedIds(log),
+    now,
+    run: "update"
+  });
   const foreignOwned = [];
-  const log = readInstallLog(projectDir);
-  const claudeSelected = installedClis(log).includes("claude");
-  const baselineExcluded = excludedIds(log);
-  const priorBaseline = policyBaseline(projectDir);
-  const wiredBefore = new Set(
-    (log?.portions ?? []).filter((p2) => p2.path === SETTINGS_TARGET).flatMap((p2) => p2.key.split("#")[1]?.replace(/\{\}$/, "") ?? [])
+  const targets = updateHarnessTargets(projectDir, templatesDir, log, wants, report, foreignOwned);
+  for (const t of targets.files) writer.harness(t.path, { source: t.source }, { isTarget });
+  const prunedPolicy = /* @__PURE__ */ new Set();
+  for (const { dir, ext } of POLICY_DIRS) {
+    if (!claude || !wants(dir === "hooks" ? "hooks" : "rules")) continue;
+    const label = `.claude/${dir}`;
+    report.updated[label] = 0;
+    const ctx = { prefix: dir, outside, recordOf };
+    report.pruned[label] = pruneOrphans(
+      join30(projectDir, label),
+      join30(templatesDir, dir),
+      ext,
+      ctx,
+      now
+    );
+    for (const f of report.pruned[label]) prunedPolicy.add(`${dir}/${f}`);
+  }
+  if (claude && wants("skills")) report.updated[".claude/skills"] = 0;
+  const skillPrune = pruneSkillExtras(
+    projectDir,
+    templatesDir,
+    targets.refreshedSkills,
+    outside,
+    recordOf,
+    now
   );
-  for (const entry of trackOnlyFileAssets(installedTracks(projectDir))) {
-    const group = entry.target.startsWith(".claude/hooks/") || entry.target === ".claude/settings.json" ? "hooks" : "rules";
-    if (!wants(group)) continue;
-    if (entry.target === HARNESS_ANCHOR_FILE) continue;
-    if (isBaselineExcluded(entry.target, baselineExcluded)) continue;
-    const target = join30(projectDir, entry.target);
-    const foreign = foreignOwnedTarget(projectDir, entry.target);
-    if (foreign !== null) {
-      if (!foreignOwned.includes(foreign)) foreignOwned.push(foreign);
+  report.skillsPruned = skillPrune.pruned;
+  report.skillsBackedUp.push(...skillPrune.backedUp);
+  const restored = prunedPolicy.size === 0 ? [] : restoreDisplaced(log, projectDir, {
+    has: (p2) => p2.startsWith(".claude/") && prunedPolicy.has(p2.slice(".claude/".length)),
+    write: true
+  });
+  const ledger = writer.ledger();
+  recordHarnessWrites(projectDir, ledger, {
+    claims,
+    prunedPolicy,
+    prunedSkill: new Set(skillPrune.pruned),
+    restored,
+    walkedSkills: wants("skills")
+  });
+  const byPath = new Map(targets.files.map((t) => [t.path, t]));
+  const created = /* @__PURE__ */ new Map();
+  for (const w3 of ledger.writes) {
+    const t = byPath.get(w3.path);
+    if (t === void 0) continue;
+    if (!t.unitExisted) {
+      if (w3.verdict === "create")
+        created.set(t.unit, created.get(t.unit) === true || w3.line === LINES.restored);
       continue;
     }
-    if (existsSync21(target)) continue;
-    const source = join30(templatesDir, entry.source);
-    if (!existsSync21(source)) continue;
-    if (outside.skip(target)) continue;
-    if (entry.target.startsWith(".claude/")) {
-      if (!claudeSelected) continue;
-      if (entry.target === SETTINGS_TARGET) continue;
+    if (w3.verdict !== "leave") report.updated[t.label] = (report.updated[t.label] ?? 0) + 1;
+    if (w3.verdict !== "backup+overwrite" || w3.record !== "sha") continue;
+    if (w3.path.startsWith(".claude/skills/"))
+      report.skillsBackedUp.push(w3.path.slice(".claude/skills/".length));
+    else if (w3.path.startsWith(".claude/"))
+      report.policyBackedUp.push(w3.path.slice(".claude/".length));
+  }
+  for (const [unit, wasRestored] of created)
+    (wasRestored ? report.restored : report.installedNew).push(unit);
+  return {
+    displaced: ledger.rootFiles.filter((f) => f.change === "displaced"),
+    restored,
+    foreignOwned,
+    outside: ledger.outside
+  };
+}
+function pruneSkillExtras(projectDir, templatesDir, ids, outside, recordOf, now) {
+  const pruned = [];
+  const backedUp = [];
+  for (const id of ids) {
+    const targetSkill = join30(projectDir, ".claude/skills", id);
+    const bundled = new Set(listFilesRecursive(join30(templatesDir, "skills", id)));
+    for (const rel of listFilesRecursive(targetSkill)) {
+      if (bundled.has(rel) || basename3(rel).includes(".backup-")) continue;
+      if (foreignOwnedTarget(projectDir, `.claude/skills/${id}/${rel}`) !== null) continue;
+      const targetFile = join30(targetSkill, rel);
+      if (outside.skip(targetFile)) continue;
+      const rec = recordOf(`.claude/skills/${id}/${rel}`);
+      if (rec.state !== "sha" || hashContent(readFileSync21(targetFile, "utf8")) !== rec.sha256) {
+        backupFile(targetFile, now);
+        backedUp.push(`${id}/${rel}`);
+      }
+      unlinkSync2(targetFile);
+      pruned.push(`${id}/${rel}`);
+      for (let d2 = dirname7(targetFile); d2 !== targetSkill && readdirSync4(d2).length === 0; d2 = dirname7(d2))
+        rmdirSync2(d2);
     }
-    mkdirSync7(dirname7(target), { recursive: true });
-    copyFileSync(source, target);
-    const recordedAs = entry.target.startsWith(".claude/") ? entry.target.slice(8) : entry.target;
-    const wired = entry.target.startsWith(".claude/hooks/") && wiredBefore.has(entry.target.slice(".claude/hooks/".length));
-    if (priorBaseline.has(recordedAs) || wired) restored.push(entry.target);
-    else installed.push(entry.target);
   }
-  return { installed, restored, foreignOwned };
+  return { pruned, backedUp };
+}
+function recordHarnessWrites(projectDir, ledger, x) {
+  const log = readInstallLog(projectDir);
+  if (!log) return;
+  const skillLedger = log.skillFiles === void 0 && !x.walkedSkills ? [] : ledger.skillFiles;
+  const policy = mergeExternalFiles(log.policyFiles, ledger.policyFiles).filter(
+    (f) => !x.prunedPolicy.has(f.path)
+  );
+  const have = new Set(policy.map((f) => f.path));
+  const next = {
+    ...log,
+    policyFiles: [
+      ...policy,
+      ...x.claims.filter((c3) => !x.prunedPolicy.has(c3.path) && !have.has(c3.path))
+    ],
+    skillFiles: mergeExternalFiles(log.skillFiles, skillLedger).filter(
+      (f) => !x.prunedSkill.has(f.path)
+    ),
+    externalFiles: mergeExternalFiles(log.externalFiles, ledger.externalFiles),
+    rootFiles: withoutRestored(
+      mergeRootFiles(log.rootFiles, withoutLostBackups(log.rootFiles, ledger.rootFiles)),
+      x.restored
+    )
+  };
+  for (const key of ["policyFiles", "skillFiles", "externalFiles", "rootFiles"])
+    if (next[key]?.length === 0) delete next[key];
+  try {
+    writeInstallLog(projectDir, next);
+  } catch {
+  }
 }
 var BACKUP_SUFFIX = /\.backup-\d{8}T\d{6}(-\d+)?$/;
 var BACKUP_SCAN_DIRS = [
@@ -7815,51 +7906,6 @@ function writeBackupList(projectDir, backups, noChecksum = /* @__PURE__ */ new S
   } catch {
   }
 }
-function installNewSkillDirs(projectDir, templatesDir, tracks, outside) {
-  const installed = [];
-  const restored = [];
-  const foreignOwned = [];
-  const log = readInstallLog(projectDir);
-  const priorIds = new Set((log?.skillFiles ?? []).map((f) => f.path.split("/")[0] ?? ""));
-  const excluded = excludedIds(log);
-  const skillExcluded = excluded;
-  if (log !== null && !installedClis(log).includes("claude"))
-    return { installed, restored, foreignOwned };
-  const spec = buildAssetSpec({ tracks, options: DEFAULT_OPTIONS });
-  for (const entry of buildManifest(spec)) {
-    if (entry.type !== "dir" || !entry.target.startsWith(".claude/skills/")) continue;
-    if (!entry.applies(spec) || isBaselineExcluded(entry.target, excluded)) continue;
-    if (skillExcluded.has(entry.target.slice(".claude/skills/".length))) continue;
-    const target = join30(projectDir, entry.target);
-    const foreign = foreignOwnedTarget(projectDir, entry.target);
-    if (foreign !== null) {
-      if (!foreignOwned.includes(foreign)) foreignOwned.push(foreign);
-      continue;
-    }
-    if (existsSync21(target)) continue;
-    const source = join30(templatesDir, entry.source);
-    if (!existsSync21(source)) continue;
-    if (outside.skip(target)) continue;
-    copyDir(source, target, (rel) => foreignOwnedTarget(projectDir, `${entry.target}/${rel}`));
-    if (priorIds.has(entry.target.slice(".claude/skills/".length))) restored.push(entry.target);
-    else installed.push(entry.target);
-  }
-  return { installed, restored, foreignOwned };
-}
-function recordNewSkillBaseline(projectDir, templatesDir, targets) {
-  const log = readInstallLog(projectDir);
-  if (!log) return;
-  if (log.skillFiles === void 0) return;
-  const ids = new Set(targets.map((t) => t.slice(".claude/skills/".length)));
-  const added = collectSkillHashes(projectDir, templatesDir).filter(
-    (f) => ids.has(f.path.split("/")[0] ?? "")
-  );
-  const kept = (log.skillFiles ?? []).filter((f) => !ids.has(f.path.split("/")[0] ?? ""));
-  try {
-    writeInstallLog(projectDir, { ...log, skillFiles: [...kept, ...added] });
-  } catch {
-  }
-}
 function trackOnlyFileAssets(tracks) {
   const base = { tracks, selectedInternalSkills: [] };
   const optedOut = { ...base, withTauri: false };
@@ -7906,7 +7952,7 @@ function upsertRootImport(projectDir, outside) {
   const next = upsertHarnessImport(existing, {
     projectName: basename3(projectDir),
     tracks: installedTracks(projectDir),
-    // ADR-085 — update 는 선택 목록을 인자로 받지 않는다. `syncSkills` 와 같은 판정을 쓴다:
+    // ADR-085 — update 는 선택 목록을 인자로 받지 않는다. 앞 단계(하네스 파일 쓰기)가 지나간 디스크로 판정한다:
     // `.claude/skills/<id>` 가 있으면 그 스킬은 이 설치가 고른 것이다.
     continuousSkills: CONTINUOUS_SKILLS.map((s) => s.id).filter(
       (id) => existsSync21(join30(projectDir, ".claude/skills", id))
@@ -7979,16 +8025,20 @@ function recordedBundledSkills(projectDir, log) {
   return INTERNAL_BUNDLED_SKILL_IDS.filter((id) => ids.has(id));
 }
 function recordedSkillIds(projectDir, log) {
+  const ids = claudeSkillIds(projectDir, log);
+  for (const f of log.externalFiles ?? []) {
+    const id = SHARED_SKILL_ID.exec(f.path)?.[1];
+    if (id !== void 0) ids.add(id);
+  }
+  return ids;
+}
+function claudeSkillIds(projectDir, log) {
   const isTarget = recordedTrackTargets(log);
   const ids = new Set(bundledSkillTargets(projectDir, log));
   for (const f of log.skillFiles ?? []) {
     const id = f.path.split("/")[0] ?? "";
     if (recorded(log, `.claude/skills/${f.path}`, { isTarget }).state !== "none") ids.add(id);
   }
-  for (const f of log.externalFiles ?? []) {
-    const id = SHARED_SKILL_ID.exec(f.path)?.[1];
-    if (id !== void 0) ids.add(id);
-  }
   return ids;
 }
 var SHARED_SKILL_ID = /^\.agents\/skills\/([^/]+)\//;
@@ -8073,7 +8123,7 @@ function refreshExternalCli(projectDir, harnessRoot, droppedKeys, harnessMcp) {
     // 기록 없음: CLI 경로로는 도달 불가 — 진입 판정(#699)이 먼저 거절. 엔진 단위 방어(빈 집합).
     recordedClis: log === null ? [] : installedClis(log),
     // #761 B-1 — 외부 기록이 아예 없던 옛 판의 산출물은 첫 접촉이 아니라 체크섬 없는 하네스 파일이다(install 과 같은 판정).
-    // 앞 단계(`refreshNeutralHelpers`)가 헬퍼만 든 `externalFiles` 를 적어도 같은 답이다 — 헬퍼는 외부 자리로 세지 않는다(B-2)
+    // 앞 단계(하네스 파일 쓰기)가 헬퍼만 든 `externalFiles` 를 적어도 같은 답이다 — 헬퍼는 외부 자리로 세지 않는다(B-2)
     owned: recordedOwner(log)
   });
   const anchorPath = result.anchorRetired?.action === "removed" ? result.anchorRetired.path : null;
@@ -8200,229 +8250,27 @@ function refreshExternalCli(projectDir, harnessRoot, droppedKeys, harnessMcp) {
     })
   };
 }
-function updateDir(target, source, ext, ctx, now = /* @__PURE__ */ new Date()) {
-  if (!existsSync21(target) || !existsSync21(source))
-    return { updated: 0, backedUp: [], displaced: [] };
-  let updated = 0;
-  const backedUp = [];
-  const displaced = [];
-  for (const file of readdirSync4(target)) {
-    if (!file.endsWith(ext)) continue;
-    const targetFile = join30(target, file);
-    const sourceFile = join30(source, file);
-    if (!existsSync21(sourceFile)) continue;
-    if (ctx.outside?.skip(targetFile)) continue;
-    const projectRel = `.claude/${ctx.prefix}/${file}`;
-    if (ctx.excluded && isBaselineExcluded(projectRel, ctx.excluded)) continue;
-    if (ctx.justWritten?.has(projectRel)) continue;
-    const next = readFileSync21(sourceFile, "utf8");
-    const rec = ctx.recordOf?.(projectRel) ?? baselineRecord(ctx.baseline, `${ctx.prefix}/${file}`);
-    const w3 = judgedUpdateWrite(targetFile, rec, next, now);
-    if (w3.changed) updated++;
-    if (w3.kind === "edited") backedUp.push(`${ctx.prefix}/${file}`);
-    const d2 = displacedEntry(w3, projectRel, targetFile);
-    if (d2 !== null) displaced.push(d2);
-  }
-  return { updated, backedUp, displaced };
-}
-function syncSkills(targetDir, sourceDir, baseline, now = /* @__PURE__ */ new Date(), foreignOf, outside, excludedSkill, opts = {}) {
-  if (!existsSync21(targetDir) || !existsSync21(sourceDir))
-    return {
-      updated: 0,
-      backedUp: [],
-      skippedLinks: [],
-      foreignOwned: [],
-      pruned: [],
-      displaced: []
-    };
-  let updated = 0;
-  const backedUp = [];
-  const skippedLinks = [];
-  const foreignOwned = [];
-  const pruned = [];
-  const displaced = [];
-  for (const skill of readdirSync4(sourceDir, { withFileTypes: true })) {
-    if (!skill.isDirectory()) continue;
-    const targetSkill = join30(targetDir, skill.name);
-    if (occupiedByNonDirectory(targetSkill)) {
-      skippedLinks.push(skill.name);
-      continue;
-    }
-    if (opts.targets !== void 0 && !opts.targets.has(skill.name)) continue;
-    if (!existsSync21(targetSkill)) continue;
-    if (excludedSkill?.(skill.name)) continue;
-    for (const rel of listFilesRecursive(join30(sourceDir, skill.name))) {
-      const targetFile = join30(targetSkill, rel);
-      const foreign = foreignOf(`${skill.name}/${rel}`);
-      if (foreign !== null) {
-        if (!foreignOwned.includes(foreign)) foreignOwned.push(foreign);
-        continue;
-      }
-      if (outside?.skip(targetFile)) continue;
-      const next = readFileSync21(join30(sourceDir, skill.name, rel), "utf8");
-      const projectRel = `.claude/skills/${skill.name}/${rel}`;
-      const rec = opts.recordOf?.(projectRel) ?? baselineRecord(baseline, `${skill.name}/${rel}`);
-      const w3 = judgedUpdateWrite(targetFile, rec, next, now);
-      if (w3.changed) updated++;
-      if (w3.kind === "edited") backedUp.push(`${skill.name}/${rel}`);
-      const d2 = displacedEntry(w3, projectRel, targetFile);
-      if (d2 !== null) displaced.push(d2);
-    }
-    const bundled = new Set(listFilesRecursive(join30(sourceDir, skill.name)));
-    for (const rel of listFilesRecursive(targetSkill)) {
-      if (bundled.has(rel) || basename3(rel).includes(".backup-")) continue;
-      if (foreignOf(`${skill.name}/${rel}`) !== null) continue;
-      const targetFile = join30(targetSkill, rel);
-      if (outside?.skip(targetFile)) continue;
-      const rec = opts.recordOf?.(`.claude/skills/${skill.name}/${rel}`) ?? baselineRecord(baseline, `${skill.name}/${rel}`);
-      if (rec.state !== "sha" || hashContent(readFileSync21(targetFile, "utf8")) !== rec.sha256) {
-        backupFile(targetFile, now);
-        backedUp.push(`${skill.name}/${rel}`);
-      }
-      unlinkSync2(targetFile);
-      pruned.push(`${skill.name}/${rel}`);
-      for (let d2 = dirname7(targetFile); d2 !== targetSkill && readdirSync4(d2).length === 0; d2 = dirname7(d2))
-        rmdirSync2(d2);
-    }
-  }
-  return { updated, backedUp, skippedLinks, foreignOwned, pruned, displaced };
-}
-function judgedUpdateWrite(abs, rec, next, now) {
-  const disk = existsSync21(abs) ? readFileSync21(abs, "utf8") : null;
-  const j4 = judge({ op: "write", kind: "harness", rec, disk, next, run: "update" });
-  let backup;
-  switch (j4.verdict) {
-    case "leave":
-      break;
-    case "create":
-      mkdirSync7(dirname7(abs), { recursive: true });
-      writeFileSync7(abs, next);
-      break;
-    case "overwrite":
-      writeFileSync7(abs, next);
-      break;
-    case "backup+overwrite":
-      backup = backupFile(abs, now);
-      writeFileSync7(abs, next);
-      break;
-    default:
-      throw new Error(`update: '${j4.verdict}' is not a write verdict (${abs})`);
-  }
-  const changed = j4.verdict !== "leave";
-  if (j4.record === "displaced") return { kind: "displacedSame", changed };
-  if (backup === void 0) return { kind: changed ? "written" : "same", changed };
-  return { kind: j4.record === "displaced+sha" ? "displaced" : "edited", changed, backup };
-}
-function displacedEntry(w3, projectRel, abs) {
-  if (w3.kind === "displacedSame") return { path: projectRel, change: "displaced", notes: [] };
-  if (w3.kind !== "displaced" || w3.backup === void 0) return null;
-  const backupRel = `${projectRel}${w3.backup.slice(abs.length)}`;
-  return { path: projectRel, change: "displaced", notes: [backupRel] };
-}
-function baselineRecord(baseline, key) {
-  const sha256 = baseline.get(key);
-  return sha256 === void 0 ? { state: "no-sha" } : { state: "sha", sha256 };
-}
-function recordedStateOf(log) {
-  if (log === null) return void 0;
-  const isTarget = recordedTrackTargets(log);
-  return (projectRel) => recorded(log, projectRel, { isTarget });
-}
-function notOursUnder(displaced, prefix) {
-  return new Set(
-    displaced.filter((f) => f.notes.length === 0 && f.path.startsWith(prefix)).map((f) => f.path.slice(prefix.length))
-  );
-}
 function withoutLostBackups(prior, add) {
   const backedUp = new Set(
     (prior ?? []).filter((f) => f.change === "displaced" && f.notes.length > 0).map((f) => f.path)
   );
   return add.filter((f) => f.notes.length > 0 || !backedUp.has(f.path));
 }
-function recordDisplaced(projectDir, displaced, restored = []) {
-  const log = readInstallLog(projectDir);
-  if (!log) return;
-  const add = withoutLostBackups(log.rootFiles, displaced);
-  const settles = restored.some((d2) => d2.forget);
-  if (add.length === 0 && !settles) return;
-  const merged = add.length === 0 ? [...log.rootFiles ?? []] : mergeRootFiles(log.rootFiles, add);
-  try {
-    writeInstallLog(projectDir, { ...log, rootFiles: withoutRestored(merged, restored) });
-  } catch {
-  }
-}
-function skillBaseline(projectDir) {
-  const log = readInstallLog(projectDir);
-  return new Map((log?.skillFiles ?? []).map((f) => [f.path, f.sha256]));
-}
-function policyBaseline(projectDir) {
-  const log = readInstallLog(projectDir);
-  return new Map((log?.policyFiles ?? []).map((f) => [f.path, f.sha256]));
-}
-function refreshPolicyBaseline(projectDir, templatesDir, dirs, outside, notOurs = /* @__PURE__ */ new Set()) {
-  const log = readInstallLog(projectDir);
-  if (!log) return;
-  const excluded = excludedIds(log);
-  const inDirs = (path) => (dirs === void 0 || dirs.some((d2) => path.startsWith(`${d2}/`))) && !outside.has(path) && !isBaselineExcluded(`.claude/${path}`, excluded);
-  const rewritten = [
-    ...(log.policyFiles ?? []).filter((f) => !inDirs(f.path)),
-    ...collectPolicyHashes(projectDir, templatesDir).filter(
-      (f) => inDirs(f.path) && !notOurs.has(f.path)
-    )
-  ];
-  const policyFiles = [...rewritten, ...retiredClaims(log, projectDir, rewritten)];
-  const next = { ...log };
-  if (policyFiles.length > 0) next.policyFiles = policyFiles;
-  else delete next.policyFiles;
-  try {
-    writeInstallLog(projectDir, next);
-  } catch {
-  }
-}
-function outsidePaths(outside, prefix) {
-  return new Set(
-    outside.list().filter((o) => o.path.startsWith(prefix)).map((o) => o.path.slice(prefix.length))
-  );
-}
-function refreshSkillBaseline(projectDir, templatesDir, outside, targets, notOurs = /* @__PURE__ */ new Set()) {
-  const log = readInstallLog(projectDir);
-  if (!log) return;
-  const excludedSkill = excludedSkillOf(log);
-  const keepPrior = (path) => outside.has(path) || excludedSkill(path.split("/")[0] ?? "");
-  const ours = (path) => (targets === void 0 || targets.has(path.split("/")[0] ?? "")) && !notOurs.has(path);
-  const skillFiles = [
-    ...collectSkillHashes(projectDir, templatesDir).filter(
-      (f) => !keepPrior(f.path) && ours(f.path)
-    ),
-    ...(log.skillFiles ?? []).filter((f) => keepPrior(f.path))
-  ];
-  const next = { ...log };
-  if (skillFiles.length > 0) next.skillFiles = skillFiles;
-  else delete next.skillFiles;
-  try {
-    writeInstallLog(projectDir, next);
-  } catch {
-  }
-}
-function pruneOrphans(target, source, ext, ctx, now = /* @__PURE__ */ new Date()) {
+function pruneOrphans(target, source, ext, ctx, now) {
   if (!existsSync21(target) || !existsSync21(source)) return [];
   const removed = [];
   for (const file of readdirSync4(target)) {
-    if (!file.endsWith(ext)) continue;
-    const sourceFile = join30(source, file);
-    if (!existsSync21(sourceFile)) {
-      const targetFile = join30(target, file);
-      const key = `${ctx.prefix}/${file}`;
-      if (!ctx.baseline.has(key)) continue;
-      if (ctx.outside?.skip(targetFile)) continue;
-      try {
-        const current = readFileSync21(targetFile, "utf8");
-        const owned = ctx.baseline.get(key) === hashContent(current) && ctx.recordOf?.(`.claude/${key}`).state !== "no-sha";
-        if (!owned) backupFile(targetFile, now);
-        unlinkSync2(targetFile);
-        removed.push(file);
-      } catch {
-      }
+    if (!file.endsWith(ext) || existsSync21(join30(source, file))) continue;
+    const targetFile = join30(target, file);
+    const rec = ctx.recordOf(`.claude/${ctx.prefix}/${file}`);
+    try {
+      const disk = readFileSync21(targetFile, "utf8");
+      const { verdict } = judge({ op: "remove", kind: "harness", rec, disk, next: null });
+      if (verdict === "leave" || ctx.outside.skip(targetFile)) continue;
+      if (verdict === "backup+remove") backupFile(targetFile, now);
+      unlinkSync2(targetFile);
+      removed.push(file);
+    } catch {
     }
   }
   return removed;
@@ -8438,53 +8286,6 @@ function retireMcpAllowlist(projectDir, now = /* @__PURE__ */ new Date()) {
     return null;
   }
 }
-function refreshNeutralHelpers(projectDir, templatesDir, report) {
-  const spec = buildAssetSpec({ tracks: installedTracks(projectDir), options: DEFAULT_OPTIONS });
-  const refreshed = /* @__PURE__ */ new Map();
-  for (const entry of buildManifest(spec)) {
-    if (entry.type !== "file" || !isCliNeutralTarget(entry.target)) continue;
-    if (!entry.applies(spec)) continue;
-    const abs = join30(projectDir, entry.target);
-    const source = join30(templatesDir, entry.source);
-    if (!existsSync21(source)) continue;
-    let st2;
-    try {
-      st2 = lstatSync5(abs);
-    } catch {
-      continue;
-    }
-    if (st2.isSymbolicLink()) {
-      report.helpersKept = [...report.helpersKept ?? [], entry.target];
-      continue;
-    }
-    if (!st2.isFile()) continue;
-    const log2 = readInstallLog(projectDir);
-    const recorded2 = (log2?.externalFiles ?? []).find((f) => f.path === entry.target);
-    const diskSha = hashContent(readFileSync21(abs, "utf8"));
-    const freshContent = readFileSync21(source, "utf8");
-    const freshSha = hashContent(freshContent);
-    if (diskSha === freshSha) {
-      if (recorded2?.sha256 !== freshSha) refreshed.set(entry.target, freshSha);
-      continue;
-    }
-    if (recorded2 === void 0 || recorded2.sha256 !== diskSha) backupFile(abs);
-    writeFileSync7(abs, freshContent, "utf8");
-    refreshed.set(entry.target, freshSha);
-    report.updated[entry.target] = (report.updated[entry.target] ?? 0) + 1;
-  }
-  if (refreshed.size === 0) return;
-  const log = readInstallLog(projectDir);
-  if (log === null) return;
-  const next = (log.externalFiles ?? []).map(
-    (f) => refreshed.has(f.path) ? { ...f, sha256: refreshed.get(f.path) } : f
-  );
-  for (const [path, sha256] of refreshed)
-    if (!next.some((f) => f.path === path)) next.push({ path, sha256 });
-  try {
-    writeInstallLog(projectDir, { ...log, externalFiles: next });
-  } catch {
-  }
-}
 function recordClaudeCommand(log, tracks) {
   const trackArgs = (tracks.length > 0 ? tracks : log.spec.tracks).map((t) => `--track ${t}`);
   return `agent-harness install ${trackArgs.join(" ")} --cli claude --scope ${log.scope}`.replace(
@@ -8532,7 +8333,7 @@ function runInstall(ctx) {
         JSON.parse(readFileSync22(settingsPath, "utf8"));
       } catch {
         throw new Error(
-          `${relative4(process.cwd(), settingsPath)} is not valid JSON \u2014 left untouched, so no hooks were wired. Fix or delete that file, then run the install again`
+          `${relative5(process.cwd(), settingsPath)} is not valid JSON \u2014 left untouched, so no hooks were wired. Fix or delete that file, then run the install again`
         );
       }
     }
@@ -9153,7 +8954,7 @@ function recordInterruptedInstall(ctx, error, run) {
   const codexTrust = registeredTrust(journal.codexOptIn, ctx.projectDir);
   const written = writtenSoFar(ledger, cliFiles, rootFiles, stage.rootImportWritten);
   if (codexTrust) written.push(`${codexTrust.configPath} (Codex trust entry for this folder)`);
-  const projectRel = (abs) => relative4(ctx.projectDir, abs).split(sep5).join("/");
+  const projectRel = (abs) => relative5(ctx.projectDir, abs).split(sep6).join("/");
   const writtenSet = new Set(written);
   const backups = [...own.backups, ...journal.backups].map((abs) => {
     const original = projectRel(backupOriginal(abs) ?? abs);
@@ -9330,7 +9131,7 @@ function listHookFiles(hookDir) {
 init_esm_shims();
 import { homedir as homedir3 } from "os";
 import { existsSync as existsSync24, readdirSync as readdirSync6, readFileSync as readFileSync24 } from "fs";
-import { join as join33, relative as relative5 } from "path";
+import { join as join33, relative as relative6 } from "path";
 
 // src/preset-recommend.ts
 init_esm_shims();
@@ -10142,15 +9943,6 @@ function renderPhase1Rows(log, baseline, verbose = false) {
         )
       );
     }
-    if (baseline.updateMode.helpersKept?.length) {
-      log(
-        assetRow(
-          "skip",
-          "helper is a link",
-          `${baseline.updateMode.helpersKept.join(", ")} \xB7 \uB9C1\uD06C\uB77C \uAC31\uC2E0\uD558\uC9C0 \uC54A\uACE0 \uB0A8\uACBC\uB2E4`
-        )
-      );
-    }
     for (const row of outsideLinkRows(baseline.updateMode.outsideLinks ?? [])) log(row);
     if (baseline.updateMode.foreignOwned.length > 0) {
       log(
@@ -10348,6 +10140,9 @@ function renderPhase1Rows(log, baseline, verbose = false) {
     if (j4.backupAbs !== void 0) judgedBackups.add(j4.backupAbs);
     log(judgedRow(j4));
   }
+  for (const f of baseline.shared ?? []) {
+    if (f.backupAbs !== void 0 && f.removedEdited.length > 0) judgedBackups.add(f.backupAbs);
+  }
   for (const row of outsideLinkRows(baseline.outsideLinks ?? [])) log(row);
   for (const row of outOfTrackRows(baseline.outOfTrack)) log(row);
   for (const row of displacedRows(baseline.displacedRestored)) log(row);
@@ -10608,8 +10403,9 @@ function excludedKeyParts(f) {
     parts.push(`removed the harness part: ${f.removedOut.join(", ")} (you asked: ${asked})`);
   }
   if (f.removedEdited.length > 0) {
+    const where = f.backup === void 0 ? "went with it" : `are in the copy: ${f.backup}`;
     parts.push(
-      `your edits to ${f.removedEdited.join(", ")} went with it (a hook entry calls a harness script \u2014 left alone it would call a script that is no longer wired)`
+      `your edits to ${f.removedEdited.join(", ")} ${where} (a hook entry calls a harness script \u2014 left alone it would call a script that is no longer wired)`
     );
   }
   if (f.keptOut.length > 0) {
@@ -10729,7 +10525,7 @@ function renderInterruptedInstall(err, e2, cwd = process.cwd()) {
   }
   const { path, error } = e2.record;
   err(
-    path !== null ? `  Already in place before it stopped \u2014 recorded in ${relative5(cwd, path) || path}:` : "  Already in place before it stopped:"
+    path !== null ? `  Already in place before it stopped \u2014 recorded in ${relative6(cwd, path) || path}:` : "  Already in place before it stopped:"
   );
   for (const [key, n] of groups) {
     err(`    ${key.endsWith("/") ? `${key} (${n} file${n === 1 ? "" : "s"})` : key}`);
@@ -11192,7 +10988,7 @@ import {
   accessSync as accessSync2,
   existsSync as existsSync26,
   constants as fsConstants2,
-  lstatSync as lstatSync6,
+  lstatSync as lstatSync5,
   readdirSync as readdirSync7,
   readFileSync as readFileSync26,
   readlinkSync,
@@ -11202,7 +10998,7 @@ import {
   statSync as statSync5,
   writeFileSync as writeFileSync9
 } from "fs";
-import { dirname as dirname8, join as join35, relative as relative6, resolve as resolve4, sep as sep6 } from "path";
+import { dirname as dirname8, join as join35, relative as relative7, resolve as resolve4, sep as sep7 } from "path";
 
 // src/uninstall-interactive.ts
 init_esm_shims();
@@ -13051,7 +12847,7 @@ function unwritablePaths(ctx) {
 }
 function safeExists(abs) {
   try {
-    lstatSync6(abs);
+    lstatSync5(abs);
     return true;
   } catch {
     return false;
@@ -13127,7 +12923,17 @@ function settleLog(ctx, io) {
       return true;
     }
   } else {
-    io.rm(join35(projectDir, INSTALL_LOG_DIR));
+    const recordDir = join35(projectDir, INSTALL_LOG_DIR);
+    if (outsideLinkAt(projectDir, INSTALL_LOG_DIR) !== null) io.rm(recordDir);
+    else {
+      for (const rel of [
+        `${INSTALL_LOG_DIR}/${INSTALL_LOG_FILENAME}`,
+        ...HARNESS_RUNTIME_IGNORES
+      ]) {
+        io.rm(join35(projectDir, rel));
+      }
+      pruneEmptyDirsUpward(projectDir, recordDir);
+    }
     if (outsideLinkAt(projectDir, LEGACY_INSTALL_LOG_DIR) === null) {
       io.rm(legacyInstallLogPath(projectDir));
       pruneEmptyDirsUpward(projectDir, join35(projectDir, LEGACY_INSTALL_LOG_DIR));
@@ -13142,7 +12948,9 @@ function dryRunLines(plan, installLog, projectDir, assetsOnly, rootFiles, harnes
     lines2.push(c.dim("  (no project-scope assets to reverse)"));
   }
   lines2.push(...plan.reverseSteps.map((s) => `  \u25CB ${s.label}`));
-  lines2.push("  \u25CB remove install record (.uzys-agent-harness/ \u2014 \uB85C\uADF8\xB7\uD5EC\uD37C \uC2A4\uD06C\uB9BD\uD2B8\xB7\uCC28\uB2E8 \uB85C\uADF8)");
+  lines2.push(
+    "  \u25CB remove install record (.uzys-agent-harness/ \u2014 \uC124\uCE58 \uAE30\uB85D\xB7\uCC28\uB2E8 \uB85C\uADF8\xB7update \uBC31\uC5C5 \uBAA9\uB85D)"
+  );
   lines2.push(
     ...plan.noReversePath.flatMap((a) => [
       c.dim(`  \u2298 ${a.id} (${a.method}) \u2014 \uC790\uB3D9 \uB418\uB3CC\uB9AC\uAE30 \uACBD\uB85C \uC5C6\uC74C, \uAE30\uB85D \uC720\uC9C0`),
@@ -13204,7 +13012,6 @@ function backupArtifactAdvisoryLines(projectDir) {
     }
   }
   for (const dir of BACKUP_SCAN_DIRS) {
-    if (dir === INSTALL_LOG_DIR) continue;
     const abs = join35(projectDir, dir);
     if (!existsSync26(abs) || outsideLinkAt(projectDir, dir) !== null) continue;
     for (const rel of listFilesRecursive(abs)) {
@@ -13601,15 +13408,24 @@ function sharedStripLines(results, preview) {
       return id === null ? [] : [id.slice(id.indexOf(":") + 1)];
     };
     const names = (keys) => keys.flatMap(display).join(" \xB7 ");
+    const stays = r.edited === void 0 ? " (yours stays)" : "";
     if (r.fileRemoved) {
+      const only = (verb) => r.edited === void 0 ? ` and only its part ${verb} in it` : "";
       lines2.push(
-        preview ? `  \u25CB remove ${r.path} (the harness created it and only its part is in it)` : `  ${status.success(`${r.path} \u2014 removed (the harness created it and only its part was in it)`)}`
+        preview ? `  \u25CB remove ${r.path} (the harness created it${only("is")})` : `  ${status.success(`${r.path} \u2014 removed (the harness created it${only("was")})`)}`
       );
     } else if (r.removed.length > 0) {
       const which = r.path === AGENTS_MD2 ? "" : `: ${names(r.removed)}`;
       const what = r.path === AGENTS_MD2 ? "the harness block" : "the harness part";
       lines2.push(
-        preview ? `  \u25CB remove ${what} from ${r.path}${which} (yours stays)` : `  ${status.success(`${r.path} \u2014 removed ${what}${which} (yours stays)`)}`
+        preview ? `  \u25CB remove ${what} from ${r.path}${which}${stays}` : `  ${status.success(`${r.path} \u2014 removed ${what}${which}${stays}`)}`
+      );
+    }
+    if (r.edited !== void 0) {
+      const n = r.edited.keys.length;
+      const edited = `you had edited ${n} harness hook line${n === 1 ? "" : "s"} (${names(r.edited.keys)})`;
+      lines2.push(
+        preview ? `  \u25CB ${r.path} \u2014 ${edited} \u2014 a copy is saved first as ${r.edited.backup}` : `  ${c.yellow("\u2298")} ${r.path} \u2014 ${edited} \u2014 your edit is in the copy: ${r.edited.backup}`
       );
     }
     if (r.kept.length > 0) {
@@ -13802,7 +13618,10 @@ function harnessCandidates(log) {
   const paths = [
     ...(log.policyFiles ?? []).map((f) => `${CLAUDE_DIR3}${f.path}`),
     ...(log.skillFiles ?? []).map((f) => `${SKILLS_DIR3}${f.path}`),
-    ...(log.externalFiles ?? []).map((f) => f.path).filter((p2) => !p2.startsWith(`${INSTALL_LOG_DIR}/`)),
+    ...(log.externalFiles ?? []).map((f) => f.path),
+    // 헬퍼 — writer 기록은 `externalFiles` 에 sha 로 적지만 옛 기록(≤v26.161.0)엔 항목이 없다. `recorded()` 가 가른다
+    // (writer 기록에 없으면 `none` = 설치자 파일 · 옛 기록이면 `no-sha` = 번들 판과 같을 때만 백업 없이)
+    ...helperSources().keys(),
     // 어느 필드에도 적힌 적 없는 옛 판의 하네스 파일 — `isTarget` 이 알려 준다(A8 · install 과 같은 방식)
     INSTALLED_TRACKS,
     // 스캔 필드가 아예 없는 옛 로그(v26.125.0 이하)는 필드가 하네스 파일을 열거하지 못한다 — manifest 의 하네스 자리 ·
@@ -13816,11 +13635,18 @@ function harnessTargets(log) {
   const tracked = recordedTrackTargets(log);
   return (p2) => p2 === INSTALLED_TRACKS || tracked(p2);
 }
+function helperSources() {
+  return new Map(
+    buildManifest({ tracks: [] }).filter((e2) => isCliNeutralTarget(e2.target)).map((e2) => [e2.target, e2.source])
+  );
+}
 function templateNext(harnessRoot, log, path) {
   if (path === INSTALLED_TRACKS) return installedTracksText(log.spec.tracks.filter(isTrack));
-  if (!path.startsWith(CLAUDE_DIR3)) return null;
+  const helper = helperSources().get(path);
+  if (helper === void 0 && !path.startsWith(CLAUDE_DIR3)) return null;
   try {
-    return readFileSync26(join35(harnessRoot, "templates", path.slice(CLAUDE_DIR3.length)), "utf8");
+    const source = helper ?? path.slice(CLAUDE_DIR3.length);
+    return readFileSync26(join35(harnessRoot, "templates", source), "utf8");
   } catch {
     return null;
   }
@@ -13846,7 +13672,7 @@ function removeRecordedFile(path, ctx) {
   }
   let st2;
   try {
-    st2 = lstatSync6(abs, { throwIfNoEntry: false });
+    st2 = lstatSync5(abs, { throwIfNoEntry: false });
   } catch {
     out.unjudged.push(path);
     return;
@@ -13882,7 +13708,7 @@ function removeRecordedFile(path, ctx) {
   if (verdict.verdict !== "remove" && verdict.verdict !== "backup+remove") return;
   let backup = null;
   if (verdict.verdict === "backup+remove") {
-    backup = io.write ? relative6(projectDir, backupFile(effective)).split(sep6).join("/") : `${relative6(projectDir, effective).split(sep6).join("/")}.backup-<time>`;
+    backup = io.write ? relative7(projectDir, backupFile(effective)).split(sep7).join("/") : `${relative7(projectDir, effective).split(sep7).join("/")}.backup-<time>`;
   }
   if (io.write) {
     if (effective !== abs) io.rm(abs);
@@ -13989,7 +13815,7 @@ function removeHarnessMadeShared(path, sha, projectDir, io, out, pruneFrom) {
       out.unjudged.push(path);
       return true;
     }
-    if (lstatSync6(abs).isSymbolicLink()) effective = real;
+    if (lstatSync5(abs).isSymbolicLink()) effective = real;
     current = readFileSync26(effective, "utf8");
   } catch {
     out.unjudged.push(path);
@@ -14286,7 +14112,7 @@ function removeAnchor(log, projectDir, io) {
       ]
     };
   }
-  const backup = edited ? relative6(projectDir, backupFile(abs)).split(sep6).join("/") : null;
+  const backup = edited ? relative7(projectDir, backupFile(abs)).split(sep7).join("/") : null;
   io.rm(abs);
   return {
     removed: true,
@@ -14330,7 +14156,7 @@ function removeUnrecordedLegacyAgentsMd(path, projectDir, io, out, pruneFrom) {
   try {
     const real = realpathSync3(abs);
     if (!statSync5(real).isFile()) return false;
-    if (lstatSync6(abs).isSymbolicLink()) effective = real;
+    if (lstatSync5(abs).isSymbolicLink()) effective = real;
     current = readFileSync26(effective, "utf8");
   } catch {
     return false;
@@ -14349,7 +14175,7 @@ function removeLegacyAgentsMd(path, abs, effective, strip, ctx) {
   let backup = `${path}.backup-<time>`;
   try {
     if (io.write) {
-      backup = relative6(projectDir, backupFile(effective)).split(sep6).join("/");
+      backup = relative7(projectDir, backupFile(effective)).split(sep7).join("/");
       if (strip.remainder !== null) {
         writeFileSync9(effective, neutralizeScaffoldBanner(strip.remainder), "utf8");
       } else {
@@ -14379,7 +14205,7 @@ function removeToolFiles(files, projectDir, rm) {
     const abs = join35(projectDir, path);
     let isLink;
     try {
-      isLink = lstatSync6(abs).isSymbolicLink();
+      isLink = lstatSync5(abs).isSymbolicLink();
     } catch {
       continue;
     }
@@ -14395,7 +14221,7 @@ function removeToolFiles(files, projectDir, rm) {
     try {
       if (hashContent(readFileSync26(abs, "utf8")) !== sha256) {
         const backup = backupFile(abs);
-        notes.push(`backed up ${path} \u2192 ${relative6(projectDir, backup)} (changed since install)`);
+        notes.push(`backed up ${path} \u2192 ${relative7(projectDir, backup)} (changed since install)`);
       }
       rm(abs);
       removed.push(path);
@@ -14410,8 +14236,8 @@ function removeToolFiles(files, projectDir, rm) {
 function pruneEmptyDirsUpward(projectDir, startDir) {
   let cursor = startDir;
   while (true) {
-    const rel = relative6(projectDir, cursor);
-    if (rel === "" || rel.startsWith(`..${sep6}`) || rel === "..") return;
+    const rel = relative7(projectDir, cursor);
+    if (rel === "" || rel.startsWith(`..${sep7}`) || rel === "..") return;
     try {
       if (readdirSync7(cursor).length > 0) return;
       rmdirSync3(cursor);