@uzysjung/agent-harness 26.174.0 → 26.176.0

package/dist/chunk-LAWKDFKZ.js

@@ -1,2683 +0,0 @@
-#!/usr/bin/env node
-var __create = Object.create;
-var __defProp = Object.defineProperty;
-var __getOwnPropDesc = Object.getOwnPropertyDescriptor;
-var __getOwnPropNames = Object.getOwnPropertyNames;
-var __getProtoOf = Object.getPrototypeOf;
-var __hasOwnProp = Object.prototype.hasOwnProperty;
-var __esm = (fn, res) => function __init() {
-  return fn && (res = (0, fn[__getOwnPropNames(fn)[0]])(fn = 0)), res;
-};
-var __commonJS = (cb, mod) => function __require() {
-  return mod || (0, cb[__getOwnPropNames(cb)[0]])((mod = { exports: {} }).exports, mod), mod.exports;
-};
-var __copyProps = (to, from, except, desc) => {
-  if (from && typeof from === "object" || typeof from === "function") {
-    for (let key of __getOwnPropNames(from))
-      if (!__hasOwnProp.call(to, key) && key !== except)
-        __defProp(to, key, { get: () => from[key], enumerable: !(desc = __getOwnPropDesc(from, key)) || desc.enumerable });
-  }
-  return to;
-};
-var __toESM = (mod, isNodeMode, target) => (target = mod != null ? __create(__getProtoOf(mod)) : {}, __copyProps(
-  // If the importer is in node compatibility mode or this is not an ESM
-  // file that has been converted to a CommonJS file using a Babel-
-  // compatible transform (i.e. "__esModule" has not been set), then set
-  // "default" to the CommonJS "module.exports" for node compatibility.
-  isNodeMode || !mod || !mod.__esModule ? __defProp(target, "default", { value: mod, enumerable: true }) : target,
-  mod
-));
-
-// node_modules/tsup/assets/esm_shims.js
-import path from "path";
-import { fileURLToPath } from "url";
-var init_esm_shims = __esm({
-  "node_modules/tsup/assets/esm_shims.js"() {
-    "use strict";
-  }
-});
-
-// src/types.ts
-init_esm_shims();
-var TRACKS = [
-  // #456 (2026-09-20) — 스택 무관: 원칙·방법론·테스트 스킬만. 스택을 아직 안 정한 프로젝트용.
-  "base",
-  "tooling",
-  "csr-supabase",
-  "csr-fastify",
-  "csr-fastapi",
-  "ssr-htmx",
-  // #820 — htmx 의 Node 백엔드. `ssr-htmx`(FastAPI) 의 id 는 설치 기록이 갖고 있어 그대로 두고 옆에 더했다.
-  "ssr-htmx-fastify",
-  "ssr-nextjs",
-  "data",
-  "executive",
-  "full",
-  "project-management",
-  "growth-marketing"
-];
-function isTrack(value) {
-  return typeof value === "string" && TRACKS.includes(value);
-}
-var CLI_BASES = ["claude", "codex", "opencode", "antigravity"];
-function isCliBase(value) {
-  return typeof value === "string" && CLI_BASES.includes(value);
-}
-var INSTALL_SCOPES = ["project", "global"];
-function isInstallScope(value) {
-  return typeof value === "string" && INSTALL_SCOPES.includes(value);
-}
-function resolveScope(scope) {
-  return scope ?? "project";
-}
-var DEFAULT_OPTIONS = {
-  withCodexTrust: false
-};
-var UPDATE_GROUPS = [
-  "skills",
-  "new-skills",
-  "rules",
-  "anchor",
-  "hooks",
-  "external"
-];
-
-// src/external-assets.ts
-init_esm_shims();
-
-// src/track-match.ts
-init_esm_shims();
-function matchTrack(track, pattern) {
-  return pattern.split("|").some((p) => globToRegex(p.trim()).test(track));
-}
-function anyTrack(tracks, pattern) {
-  return tracks.some((t) => matchTrack(t, pattern));
-}
-function hasDevTrack(tracks) {
-  return anyTrack(tracks, "csr-*|ssr-*|data|full|tooling|base");
-}
-function hasUiTrack(tracks) {
-  return anyTrack(tracks, "csr-*|ssr-*|full");
-}
-function globToRegex(pattern) {
-  const escaped = pattern.replace(/[.+?^${}()|[\]\\]/g, "\\$&").replace(/\*/g, ".*");
-  return new RegExp(`^${escaped}$`);
-}
-
-// src/external-assets.ts
-var UI_TRACKS = TRACKS.filter((t) => hasUiTrack([t]));
-var CSR_SSR_NEXTJS_FULL = [
-  "csr-supabase",
-  "csr-fastify",
-  "csr-fastapi",
-  "ssr-nextjs",
-  "full"
-];
-var EXTERNAL_ASSETS = [
-  // === data Track ===
-  {
-    id: "anthropic-data-plugin",
-    tier: "official",
-    // anthropics/knowledge-work-plugins 18k
-    description: "Anthropic data plugin \u2014 SQL exploration, analysis, and visualization workflows. Installing it does not connect your warehouse; that is a separate MCP setup",
-    category: "data",
-    source: "anthropics",
-    condition: { kind: "any-track", tracks: ["data", "full"] },
-    method: {
-      kind: "plugin",
-      marketplace: "anthropics/knowledge-work-plugins",
-      pluginId: "data@knowledge-work-plugins"
-    }
-  },
-  // === Internal template assets (v26.81.0, ADR-022 — 이전 OptionFlags.withTauri/withUzysHarness) ===
-  {
-    id: "tauri-desktop",
-    tier: "official",
-    // uzys 본 하네스 자체 템플릿
-    description: "Tauri desktop rule template (CSR/full tracks \u2014 manifest rule mapping)",
-    category: "frontend",
-    source: "uzys",
-    condition: { kind: "opt-in" },
-    method: { kind: "internal", key: "tauri-desktop" }
-  },
-  // v26.108.0 (ADR-037, 라이프사이클 자산화 ②) — CI 스캐폴드: `.github/workflows/` fill-in
-  //   워크플로(tag-트리거 CI + 실DB 서비스 컨테이너 + coverage 게이트 + Playwright E2E).
-  //   실무 CI 패턴의 도메인 중립 일반화 (CI 부재 프로젝트의 갭이 계기). `.claude/` 밖에
-  //   쓰는 첫 자산 — 기존 워크플로 파일은 절대 덮어쓰지 않는다 (src/ci-scaffold.ts,
-  //   manifest 경유 아님 — CLI 선택과 무관하게 설치되는 CLI-agnostic 산출물).
-  // ADR-105 (#726, 사용자 결정 2026-10-11) — opt-in 전용 → 개발 트랙 기본. 없을 때만 쓰는 계약은 그대로.
-  {
-    id: "ci-scaffold",
-    tier: "official",
-    // uzys 본 하네스 자체 템플릿
-    description: "CI scaffold \u2014 .github/workflows fill-in templates (tag-triggered CI + real-DB service container + coverage gate + Playwright E2E); writes only when the file is absent, never overwrites existing workflow files",
-    category: "workflow",
-    source: "uzys",
-    condition: { kind: "has-dev-track" },
-    method: { kind: "internal", key: "ci-scaffold" }
-  },
-  // === Repo-bundled internal skills (uzys 1st-party, v26.87.0) ===
-  // 2026-08-02 복원 (ADR-062) — 이관(ADR-060) 후 감사에서 본문 열화 104건(dropped 76 ·
-  //   damaged 28)이 확인돼 9종을 이 리포 번들로 되돌렸다. 아래 10종 전부 `kind: "internal"`.
-  // #602 — ui-visual-review: TRACKS.md 가 말하는 트랙 추종 번들 스킬("follows the track, not
-  // the catalog"). internal 카탈로그 자산으로 등록해 selectedInternalSkills 흐름에 태우면
-  // .agents/skills(비-Claude 자리)에도 깔린다 — 종전의 .claude/ 전용 배선과 어긋나던 것.
-  {
-    id: "ui-visual-review",
-    tier: "official",
-    // uzys 자사 스킬
-    description: "UI visual review \u2014 screenshot capture, baseline diff, and a review gate for UI changes (ships with UI tracks; ssr-htmx excluded)",
-    category: "frontend",
-    source: "uzys",
-    condition: {
-      kind: "any-track",
-      tracks: ["csr-supabase", "csr-fastify", "csr-fastapi", "ssr-nextjs", "full"]
-    },
-    method: { kind: "internal", key: "ui-visual-review" }
-  },
-  {
-    id: "compaction-handoff",
-    tier: "official",
-    // uzys 본 하네스 자체 템플릿
-    description: "Compaction handoff \u2014 persist durable state + git snapshot + resume anchor before a context /compact so nothing is lost",
-    category: "workflow",
-    source: "uzys",
-    condition: { kind: "has-dev-track" },
-    method: { kind: "internal", key: "compaction-handoff" }
-  },
-  // === uzys 방법론 스킬 — 이 리포 번들 (2026-08-02 복원, ADR-062) ===
-  // ASIS(ADR-060): `kind: "skill"` — uzysjung/uzys-agent-skills 에서 `npx skills add`.
-  // TOBE: templates/skills/<id>/ 번들 → 설치 시 dir copy (`kind: "internal"`).
-  //   이관본이 판정 기준·수치·워크드 예시를 잃어(감사 실측 104건) 스킬이 무엇을 하라는지가
-  //   남고 무엇으로 판정하는지가 사라졌다. 배포 경로를 하나로 모으는 이득보다 본문 보존이
-  //   앞선다 — 본문 게이트(테스트)가 이 리포에만 있기 때문이다. tier official = 자사
-  //   (star 무관 — trust-tier-drift 가 official 을 건너뛴다). condition 은 이관 전 도달 범위 유지.
-  {
-    // #485 — 전신 `clear-korean-communication` 개명. 이름이 "한국어 전용"으로 읽혀 영어 사용자에게
-    // 닿지 않았다(사용자 결정 2026-09-20). 본문은 사용자가 검토한 개정안, 답변 언어는 사용자의 언어.
-    id: "user-centered-explanation",
-    tier: "official",
-    // uzys 자사 스킬 리포
-    description: "User-centered explanation \u2014 explain problems, changes, and choices as what the user does and sees (impact and cause first, then evidence), in the user's language; covers decisions, approval requests, and AS-IS/TO-BE contrasts of screens and flows",
-    category: "workflow",
-    source: "uzys",
-    condition: { kind: "has-dev-track" },
-    method: { kind: "internal", key: "user-centered-explanation" }
-  },
-  {
-    id: "north-star",
-    tier: "official",
-    // uzys 자사 스킬 리포
-    description: "North Star \u2014 create or safely update the project direction baseline and its revision-linked roadmap, then analyze the impact on audits, verification criteria, issues, and work in progress",
-    category: "workflow",
-    source: "uzys",
-    // 전 트랙 상주 보존 — 이관 전에는 manifest COMMON_SKILL_DIRS(조건 없는 전 트랙 설치)였다.
-    // 이 카탈로그에 "always" kind 가 없어 전 트랙 나열로 같은 도달 범위를 표현한다.
-    condition: { kind: "any-track", tracks: [...TRACKS] },
-    method: { kind: "internal", key: "north-star" }
-  },
-  {
-    id: "audit-service-gaps",
-    tier: "official",
-    // uzys 자사 스킬 리포
-    description: "Audit service gaps \u2014 audit observable gaps between the service's current state and an explicit North Star baseline (reverse \xB7 defect \xB7 experience \xB7 benchmark \xB7 verify \xB7 change-impact \xB7 drift modes)",
-    category: "dev-tools",
-    source: "uzys",
-    condition: { kind: "has-dev-track" },
-    method: { kind: "internal", key: "audit-service-gaps" }
-  },
-  {
-    id: "multi-persona-review",
-    tier: "official",
-    // uzys 자사 스킬 리포
-    description: "Multi-persona review \u2014 review one artifact through independent stakeholder and failure lenses, then synthesize evidence-backed, severity-ranked findings without discarding minority views",
-    category: "dev-tools",
-    source: "uzys",
-    condition: { kind: "has-dev-track" },
-    method: { kind: "internal", key: "multi-persona-review" }
-  },
-  {
-    id: "recurrence-prevention",
-    tier: "official",
-    // uzys 자사 스킬 리포
-    description: "Recurrence prevention \u2014 reconstruct a repeated defect's failure signature and timeline, then pick the least costly countermeasure (code \xB7 regression test \xB7 rule \xB7 hook \xB7 derivation \xB7 gate)",
-    category: "workflow",
-    source: "uzys",
-    condition: { kind: "has-dev-track" },
-    method: { kind: "internal", key: "recurrence-prevention" }
-  },
-  {
-    id: "gh-issue-workflow",
-    tier: "official",
-    // uzys 자사 스킬 리포
-    description: "GitHub issue workflow \u2014 run work through issues so user and agent share one backlog: group tasks under a parent (epic) issue, order them with milestones and labels, read comments before starting, promote decisions into the body, and keep read-only, draft, external-write, and status stages distinct",
-    category: "workflow",
-    source: "uzys",
-    // 전 트랙 상주 보존 — north-star 와 같은 이유 (이관 전 COMMON_SKILL_DIRS).
-    condition: { kind: "any-track", tracks: [...TRACKS] },
-    method: { kind: "internal", key: "gh-issue-workflow" }
-  },
-  {
-    id: "model-orchestration",
-    tier: "official",
-    // uzys 자사 스킬 리포
-    description: "Model orchestration \u2014 decompose work by capability and route independent, bounded tasks to available agents while preserving ownership, permissions, and verification. Model names are Claude Code vocabulary; on other CLIs the same split maps onto that vendor's tiers",
-    category: "workflow",
-    source: "uzys",
-    // ADR-105 (#726) — opt-in → 개발 트랙 기본.
-    condition: { kind: "has-dev-track" },
-    method: { kind: "internal", key: "model-orchestration" }
-  },
-  {
-    // 전신 = gemini-consult + codex-consult. provider 중립 한 스킬로 통합됐다(통합은 유지 —
-    //   되돌린 것은 배포 경로이지 통합이 아니다).
-    id: "external-model-consult",
-    tier: "official",
-    // uzys 자사 스킬 리포
-    description: "External model consult \u2014 ask an available external model/provider for an independent draft, critique, or provider-only output such as image generation (requires that provider's CLI)",
-    category: "dev-tools",
-    source: "uzys",
-    // ADR-105 (#726) — opt-in → 개발 트랙 기본. 설치는 디렉터리 복사뿐이라 provider CLI 가 없어도
-    //   설치는 성공한다 — 없으면 실행 시점에 래퍼가 멈추고 스킬이 "설치·로그인은 사용자 몫"을 알린다.
-    condition: { kind: "has-dev-track" },
-    method: { kind: "internal", key: "external-model-consult" }
-  },
-  {
-    // #729 (ADR-109) — 토론 정책(참여자 · 독립성 · 라운드 · 예산 · 재시도 · 대체 · 복귀 · 통합)은 이 스킬만
-    //   소유한다. 하위 경로(external-model-consult · 브라우저 위임 3종)는 실행 매개변수와 결과·상태만 맡는다.
-    // has-dev-track 인 이유: 브라우저 전제가 없다 — external-model-consult 의 CLI 둘만으로 "서로 다른 실제 모델 2개"가
-    //   성립하고, 없는 경로는 실행 시점에 unavailable 로 기록한다. DEV_METHOD 에 넣지 않는다(수단 — ADR-105 D2).
-    id: "multi-model-debate",
-    tier: "official",
-    // uzys 자사 스킬
-    description: "Multi-model debate \u2014 two or three different real models answer independently, then only decision-relevant disagreements are cross-examined and checked; uses whichever installed routes are available (external-model-consult CLIs or the browser delegates)",
-    category: "dev-tools",
-    source: "uzys",
-    condition: { kind: "has-dev-track" },
-    method: { kind: "internal", key: "multi-model-debate" }
-  },
-  // #729 (ADR-109, 사용자 결정 2026-10-12) — 브라우저 위임 3종은 opt-in. 실행 전제(브라우저 도구 · 로그인된 브라우저 ·
-  //   그 서비스 계정)가 하네스 밖에 있고 Codex CLI 에는 브라우저가 없다(공식 문서). #489 가 agent-browser 를 opt-in 으로
-  //   내린 축과 같다. 설치는 디렉터리 복사뿐이다 — `--with <id>` · 위저드 체크로 켠다.
-  {
-    id: "gemini-delegate",
-    tier: "official",
-    // uzys 자사 스킬
-    description: "Gemini delegate \u2014 hand design, review, or Korean polishing to Gemini on the web and collect the answer (needs a browser tool + your logged-in browser)",
-    category: "dev-tools",
-    source: "uzys",
-    condition: { kind: "opt-in" },
-    method: { kind: "internal", key: "gemini-delegate" }
-  },
-  {
-    id: "chatgpt-delegate",
-    tier: "official",
-    // uzys 자사 스킬
-    description: "ChatGPT delegate \u2014 hand design, planning, or review to ChatGPT on the web and collect the answer (needs a browser tool + your logged-in browser)",
-    category: "dev-tools",
-    source: "uzys",
-    condition: { kind: "opt-in" },
-    method: { kind: "internal", key: "chatgpt-delegate" }
-  },
-  {
-    id: "genspark-delegate",
-    tier: "official",
-    // uzys 자사 스킬
-    description: "Genspark delegate \u2014 hand design or planning to Genspark AI Chat, or generate and download images with AI Image (needs a browser tool + your logged-in browser)",
-    category: "dev-tools",
-    source: "uzys",
-    condition: { kind: "opt-in" },
-    method: { kind: "internal", key: "genspark-delegate" }
-  },
-  {
-    // 복원 9종이 아니라 신설이다 — 이관 이력이 없다.
-    // 전 트랙인 이유: 위임과 요청 정규화는 개발 트랙의 행위가 아니라 **전 트랙의 행위**다.
-    // executive 트랙도 서브에이전트에 일을 넘기고, 그때 브리프가 없으면 완료 판정 기준 없이 넘긴다.
-    // ADR-088 (#426 F-04) — 전신 `task-brief` 개명. 문턱이 **위임 · 설계 · 다단계(피처/프로젝트
-    //   규모 이상)** 로 좁혀졌고, 한 줄 요청마다 브리프를 권하던 매 프롬프트 넛지 훅과 상시 스킬
-    //   안내(`CONTINUOUS_SKILLS`)가 함께 빠졌다. 이름이 그 문턱을 들고 있다.
-    id: "objective-brief",
-    tier: "official",
-    // uzys 자사 스킬
-    description: "Objective brief \u2014 normalize a delegation, a design task, or multi-step work at feature scale into the canonical brief (objective \xB7 inputs \xB7 invariants \xB7 success criteria \xB7 boundaries \xB7 autonomy \xB7 verification) and write every delegation prompt in that same shape",
-    category: "workflow",
-    source: "uzys",
-    condition: { kind: "any-track", tracks: [...TRACKS] },
-    method: { kind: "internal", key: "objective-brief" }
-  },
-  {
-    // objective-brief 와 같은 신설이다 — 이관 이력이 없다.
-    // 전 트랙인 이유: 이 하네스는 **모든 트랙에** 앵커·룰·훅을 깐다. 그 상주층이 밥값을 하는지
-    // 되묻는 루프만 개발 트랙에 두면, 상주 비용은 전원이 무는데 감사는 일부만 갖는 비대칭이
-    // 된다. 감사 대상이 개발 산출물이 아니라 **설치본 자신**이라 트랙 술어와 무관하다.
-    // ADR-084 (#425) — 2판. 판정 근거가 공식 체크리스트 인용에서 **확정된 의도 + 리포 실증**으로
-    //   바뀌었고, 모드 4개(audit · verification · apply · populate)를 SKILL.md 가 references 로
-    //   라우팅한다. 비-Claude CLI 도 디렉터리째 받는 것이 전제다(#431).
-    id: "audit-harness-fit",
-    tier: "official",
-    // uzys 자사 스킬
-    description: "Audit harness fit \u2014 improve agent instructions and skills for autonomous, productive delivery with verifiable quality: resolve needless questions and repeated checks, conflicting decisions, missing actionable context, and low-value procedures; adapt guidance to demonstrated model and tool capabilities; also fill or refresh AGENTS.md / CLAUDE.md project context from repository evidence",
-    category: "workflow",
-    source: "uzys",
-    condition: { kind: "any-track", tracks: [...TRACKS] },
-    method: { kind: "internal", key: "audit-harness-fit" }
-  },
-  {
-    // CI 가 멈췄을 때(결제 실패·쿼터 소진·Actions 장애) 검증을 포기하지도, 위조하지도 않는 절차.
-    // has-dev-track 인 이유: 이건 **누가 요청해서 켜는 것이 아니라 사고가 났을 때 켜지는** 것이다.
-    //   CI 가 죽고 나서야 필요해지는 자산을 opt-in 으로 두면, 정작 그 순간에 없다. 대신 executive
-    //   트랙에는 깔지 않는다 — 거기엔 워크플로가 없다.
-    // DEV_METHOD_SKILL_IDS 에 넣지 않는 이유: 저건 wizard 의 "하네스 방법론 N종" 묶음이고,
-    //   이건 방법론이 아니라 사고 대응 런북이다. 묶음에 끼면 묶음의 뜻이 흐려진다.
-    id: "self-hosted-github-runner",
-    tier: "official",
-    // uzys 자사 스킬
-    description: "Self-hosted GitHub runner \u2014 when hosted runners stop (billing failure, spending limit, minutes exhausted, org quota, Actions outage), run the repo's existing workflow files unchanged on a Docker self-hosted runner instead of copying CI steps into a local script; covers runner-label switching, architecture and cache-key traps, container isolation, the risk that pull_request jobs then execute on your own machine, and the rollback path",
-    category: "dev-tools",
-    source: "uzys",
-    condition: { kind: "has-dev-track" },
-    method: { kind: "internal", key: "self-hosted-github-runner" }
-  },
-  {
-    // 트랙과 무관한 글쓰기 규율이다. ADR-105 (#726, 사용자 결정 2026-10-11) — opt-in → 개발 트랙
-    //   기본. 한국어로 쓰지 않는 설치자에게는 descriptor 상주가 낭비라는 대가를 받아들였다
-    //   (빼려면 `--without natural-korean`).
-    // user-centered-explanation 과의 경계: 저쪽은 **무엇을 어떤 형식으로 말할지**(설명·승인
-    //   요청의 구조)이고, 이쪽은 **한국어로 쓰는 행위 자체**(답변·글쓰기·번역·퇴고)의 표현이다.
-    // #428 — 전신 `humanize-korean`(#355, 진단-우선 퇴고)을 개명·교체했다. 범위가 퇴고에서
-    //   쓰기·번역까지로 넓어져 이름이 뜻과 어긋났다. 옛 id 로 깐 설치본은 `update` 가 손대지
-    //   않고(설치된 디렉터리만 갱신) 그대로 남는다 — 새 판은 `--with natural-korean` 으로 받는다.
-    id: "natural-korean",
-    tier: "official",
-    // uzys 자사 스킬
-    description: "Natural Korean \u2014 write, answer, translate, and revise in Korean that reads as Korean: keep meaning and register, cut translationese, needless English, stock phrases, and mechanical repetition; fix only what is actually awkward",
-    category: "workflow",
-    source: "uzys",
-    condition: { kind: "has-dev-track" },
-    method: { kind: "internal", key: "natural-korean" }
-  },
-  // === Option-gated (v26.42.0 — opt-in, BREAKING vs prior has-dev-track auto-install) ===
-  {
-    // v26.75.0 (ADR-021) — `npm i --save-dev @fission-ai/openspec` 후 `openspec init` 로 슬래시 주입.
-    id: "openspec",
-    tier: "vetted",
-    // Fission-AI/OpenSpec 53k
-    description: "OpenSpec \u2014 spec-driven change workflow for an existing codebase (propose \u2192 apply \u2192 archive). Use when your team has adopted a shared spec-and-delta process; it is a collaboration contract, not a coding aid",
-    category: "workflow",
-    source: "fission-ai",
-    condition: { kind: "opt-in" },
-    method: { kind: "npm", pkg: "@fission-ai/openspec", version: "1.4.1" }
-  },
-  {
-    // v26.75.0 (ADR-021) — 비대화형 install. v26.75.1: `--directory .` 누락 시 "Installation
-    // directory" 프롬프트에서 hang (Docker realcli 검출). cwd(=project) 기준 `.` 지정으로 봉합.
-    id: "bmad-method",
-    tier: "vetted",
-    // bmad-code-org/BMAD-METHOD 48k
-    description: "BMAD-METHOD \u2014 multi-agent agile workflow (PM / Architect / Dev roles). Use for team-scale delivery with fixed roles; the pinned 6.9.0 still runs the full ceremony, so skip it for solo or small changes",
-    category: "workflow",
-    source: "bmad-code-org",
-    condition: { kind: "opt-in" },
-    // v26.102.0 (ADR-031) — args 의 `--tools claude-code` 하드코딩이 claude 전용 산출물
-    // (.claude/ agent commands)을 생성 (Docker 실검증 realcli-workflows-2026-06-06).
-    // kind 기본값(npx-run=전 CLI)이 이 자산에선 거짓 → override. 대칭 실현(--tools derive)은 M4+.
-    cliSupportOverride: ["claude"],
-    method: {
-      kind: "npx-run",
-      cmd: "bmad-method",
-      version: "6.9.0",
-      args: ["install", "--directory", ".", "--tools", "claude-code", "--yes"]
-    }
-  },
-  // === Railway (csr-fastify|csr-fastapi|ssr-*|full) ===
-  // v0.6.3 — railway-plugin entry 제거. railwayapp/railway-plugin repo 자체 존재 안 함
-  // (404 Not Found). 공식 docs (https://docs.railway.com/ai/claude-code-plugin) 형식은
-  // marketplace add `railwayapp/railway-skills` + plugin install `railway@railway-skills`만.
-  // → 아래 railway-skills entry로 단일화.
-  {
-    id: "railway-skills",
-    tier: "experimental",
-    // railwayapp/railway-skills 268
-    description: "Railway skills \u2014 deploy and manage projects, services, and environments on Railway. Only for projects hosted on Railway; it drives a real account",
-    category: "backend",
-    source: "railwayapp",
-    // 2026-08-02 사용자 결정: 트랙 기본 → opt-in (ADR-063)
-    condition: { kind: "opt-in" },
-    method: {
-      kind: "plugin",
-      marketplace: "railwayapp/railway-skills",
-      pluginId: "railway@railway-skills"
-    }
-  },
-  // #709 (ADR-101) — Railway MCP 서버의 **선택** 경로. 서버 정의는 트랙 표(`templates/track-mcp-map.tsv`)의 같은 이름
-  //   행 하나다(key === 행 이름). 그 행의 패턴이 기본 트랙(csr-* · ssr-htmx · ssr-htmx-fastify · full)을 정하고, 이 항목은 그 밖의 트랙
-  //   (ssr-nextjs 등)에서 위저드 체크 · `--with` 로 고르게 한다. experimental 이라 조건으로는 미리 체크되지 않는다.
-  //   #712 (ADR-106) — 행이 Railway 공식 원격 서버(`https://mcp.railway.com`, OAuth)로 바뀌었다. 이름 · 키 id 는 그대로라 기록이
-  //   이어져 update 가 같은 키를 갈아 끼운다.
-  {
-    id: "railway-mcp-server",
-    tier: "experimental",
-    // railwayapp/cli 621★ (원격 서버에 공개 저장소가 따로 없다 — 같은 벤더의 CLI 를 감시, REPO_OVERRIDE)
-    description: "Railway's official remote MCP (https://mcp.railway.com, signs in with OAuth on first use) in .mcp.json, Codex and OpenCode \u2014 default on csr-* \xB7 ssr-htmx \xB7 ssr-htmx-fastify \xB7 full; check it to add it on any other track",
-    category: "backend",
-    source: "railwayapp",
-    condition: { kind: "opt-in" },
-    // #709 리뷰 NOTE 3 — `.mcp.json` · Codex `[mcp_servers]` · `opencode.json` `mcp` 만 받는다. Antigravity 변환에는 MCP 가 없다
-    //   (internal 기본값 = 4 CLI 는 과대 표기).
-    cliSupportOverride: ["claude", "codex", "opencode"],
-    method: { kind: "internal", key: "railway-mcp-server" }
-  },
-  // #711 (ADR-106) — Vercel 공식 원격 MCP. 트랙 표 행의 패턴은 `-`(기본 트랙 없음) — 어느 트랙에서도 미리 체크하지 않는다
-  //   (사용자 확정 2026-10-11 "opt-in", ssr-nextjs 포함). Antigravity 는 MCP 를 받지 않는다(Vercel 승인 클라이언트에도 없다).
-  {
-    id: "vercel",
-    tier: "vetted",
-    // Vercel MCP 에 공개 저장소가 따로 없다 — 같은 벤더의 vercel/vercel 16k 를 감시(REPO_OVERRIDE)
-    description: "Vercel's official remote MCP (https://mcp.vercel.com, signs in with OAuth on first use) in .mcp.json, Codex and OpenCode. Only if this project deploys to Vercel",
-    category: "backend",
-    source: "vercel",
-    condition: { kind: "opt-in" },
-    cliSupportOverride: ["claude", "codex", "opencode"],
-    method: { kind: "internal", key: "vercel" }
-  },
-  // #722 (ADR-106) — GitHub 공식 원격 MCP 의 opt-in 경로. 기본에서 뺀 옛 `github`(@modelcontextprotocol/server-github, 상류
-  //   deprecated)와 **다른 이름**이다 — 같은 이름이면 옛 설치본의 기록된 몫이 선택으로 읽혀 PAT 없는 설치자에게 매 세션 실패하는
-  //   서버가 조용히 깔린다. 인증 = 환경변수 GITHUB_PAT(파일에는 이름만).
-  {
-    id: "github-mcp",
-    tier: "vetted",
-    // github/github-mcp-server 33.5k (REPO_OVERRIDE)
-    description: "GitHub's official remote MCP server (api.githubcopilot.com) in .mcp.json, Codex and OpenCode \u2014 needs a GitHub personal access token in GITHUB_PAT in the shell you start the CLI from. Not needed when the agent uses the gh CLI",
-    category: "dev-tools",
-    source: "github",
-    condition: { kind: "opt-in" },
-    cliSupportOverride: ["claude", "codex", "opencode"],
-    method: { kind: "internal", key: "github-mcp" }
-  },
-  // #722 (ADR-106) — Chrome DevTools MCP. 트랙 표 행이 웹 트랙(csr-* · ssr-* · full)의 기본이고, 이 항목은 그 밖의 트랙에서
-  //   고르게 한다. Google 사용 통계는 행의 `--no-usage-statistics` 로 끈다.
-  {
-    id: "chrome-devtools",
-    tier: "vetted",
-    // ChromeDevTools/chrome-devtools-mcp 53k (REPO_OVERRIDE)
-    description: "Chrome DevTools MCP \u2014 browser automation, console, network and performance tools for the agent. Default on csr-* \xB7 ssr-* \xB7 full; check it to add it on any other track. Google's usage statistics are turned off (--no-usage-statistics)",
-    category: "understanding",
-    source: "ChromeDevTools",
-    condition: { kind: "opt-in" },
-    cliSupportOverride: ["claude", "codex", "opencode"],
-    method: { kind: "internal", key: "chrome-devtools" }
-  },
-  // #751 — Context7 MCP. 트랙 표 행의 패턴 `*` 가 모든 트랙의 기본이라 위저드 3단계에 늘 체크된 채 보이고, 풀거나
-  //   `--without context7` 이면 `.mcp.json` · Codex · OpenCode 세 자리에서 빠진다(#709 · #722 와 같은 경로). 기본값은 그대로다.
-  {
-    id: "context7",
-    tier: "vetted",
-    // upstash/context7 62.9k (REPO_OVERRIDE)
-    description: "Context7 MCP \u2014 current, version-specific library docs for the agent, in .mcp.json, Codex and OpenCode. Default on every track; uncheck it to leave it out",
-    category: "understanding",
-    source: "upstash",
-    condition: { kind: "opt-in" },
-    cliSupportOverride: ["claude", "codex", "opencode"],
-    method: { kind: "internal", key: "context7" }
-  },
-  // #751 — Supabase MCP. 트랙 표 행이 csr-supabase · full 의 기본이고, 이 항목은 그 밖의 트랙에서 고르게 · 기본 트랙에서
-  //   빼게 한다. 서버 정의(명령 · 인자)는 트랙 표 한 곳이다.
-  {
-    id: "supabase",
-    tier: "vetted",
-    // supabase/mcp 2.9k (REPO_OVERRIDE)
-    description: "Supabase's official remote MCP (https://mcp.supabase.com/mcp, signs in with OAuth on first use) in .mcp.json, Codex and OpenCode. Default on csr-supabase \xB7 full; check it to add it on any other track. Only if this project uses Supabase",
-    category: "backend",
-    source: "supabase",
-    condition: { kind: "opt-in" },
-    cliSupportOverride: ["claude", "codex", "opencode"],
-    method: { kind: "internal", key: "supabase" }
-  },
-  // === csr-supabase|full CLI ===
-  {
-    id: "vercel-cli",
-    tier: "vetted",
-    // vercel/vercel 16k
-    description: "Vercel CLI \u2014 the real deploy tool as a devDependency (global under --scope global). Only if this project deploys to Vercel. Non-interactive `vercel link`/deploy needs `--scope` when your account has several teams (55.0.0+)",
-    category: "backend",
-    source: "vercel",
-    // 2026-08-02 사용자 결정: 트랙 기본 → opt-in (ADR-063). #709 가 ssr-nextjs 기본으로 바꿨다가 #715 에서 되돌렸다 —
-    //   설치자 package.json 에 의존성을 더하고(에이전트는 npx 로 쓸 수 있다) login 없이는 쓸 것이 없으며 핀이 낡는다.
-    //   Vercel 공식 MCP 도 opt-in 이다(`vercel` 항목, #711 · ADR-106 — 사용자 확정 2026-10-11).
-    condition: { kind: "opt-in" },
-    method: { kind: "npm", pkg: "vercel", version: "63.1.2" }
-  },
-  {
-    // v26.106.0 (ADR-035, 사용자 승인 B): 배포 CLI 2종 동시 기본의 중복 해소 — npm dl 실측 10.11:1
-    //   (vercel 2.79M vs netlify 276k /주, 2026-07-18) → vercel 만 기본, netlify 는 opt-in.
-    id: "netlify-cli",
-    tier: "vetted",
-    // netlify/cli 1.9k
-    description: "Netlify CLI \u2014 the real deploy tool as a devDependency (global under --scope global). Only if this project deploys to Netlify",
-    category: "backend",
-    source: "netlify",
-    condition: { kind: "opt-in" },
-    method: { kind: "npm", pkg: "netlify-cli", version: "26.1.0" }
-  },
-  {
-    id: "supabase-cli",
-    tier: "vetted",
-    // supabase 103k
-    description: "Supabase CLI \u2014 the real Supabase tool as a devDependency (global under --scope global); first `supabase login` opens an OAuth browser flow. Only if this project uses Supabase",
-    category: "backend",
-    source: "supabase",
-    // 2026-08-02 사용자 결정: 트랙 기본 → opt-in (ADR-063)
-    condition: { kind: "opt-in" },
-    method: { kind: "npm", pkg: "supabase", version: "2.108.0" }
-  },
-  // === UI tracks (csr-*|ssr-*|full) ===
-  // v26.92.0 — frontend-design (Anthropic official).
-  //   사용자 결정: has-dev-track 기본추천 (모든 개발 트랙, executive 제외).
-  //   #709 (ADR-101) — UI 가 있는 트랙만(`UI_TRACKS`). data · tooling 은 미리 체크하지 않는다.
-  //   category=frontend (UI 자산, wizard 그룹).
-  //
-  // 2026-08-26 (#344) — **plugin → skill.** 배달 방식이 도달 CLI 를 정한다(assetCliSupport):
-  //   `plugin` 은 `claude plugin install` 을 spawn 하므로 **구조적으로 Claude Code 전용**이라,
-  //   Codex·OpenCode·Antigravity 를 고른 사용자는 기본 추천 자산인데도 한 번도 받지 못했다
-  //   (사용자 적발). 같은 스킬이 `anthropics/skills` 에 원본으로 있고 `npx skills add` 는
-  //   `--agent` 로 네 CLI 전부에 깐다 — 실재 확인 2026-08-26: `skills/frontend-design/SKILL.md`.
-  //   tier 는 official 그대로(저자 동일). marketplace 경유가 아니게 되어 upstream 판본을 직접 쓴다.
-  {
-    id: "frontend-design",
-    tier: "official",
-    // anthropics/skills (Anthropic 저자, ★171.5K — 2026-08-26 gh api 실측)
-    description: "frontend-design \u2014 visual direction, typography, and anti-generic UI guidance (Anthropic official). For new UI or an explicit redesign; do not let it override an existing design system",
-    category: "frontend",
-    source: "anthropics",
-    condition: { kind: "any-track", tracks: UI_TRACKS },
-    method: { kind: "skill", source: "anthropics/skills", skill: "frontend-design" }
-  },
-  // 2026-08-02 정비 — 프론트엔드 품질 3종 (사용자 지시). 전부 opt-in: frontend-design 이 기본
-  //   생성기이고 이 셋은 그 위의 취향·디테일 층이라 상시 비용을 물릴 근거가 없다 (ADR-032/035
-  //   와 같은 축). star 는 각 tier 라인 주석 = 2026-08-02 `gh api` 실측.
-  {
-    id: "jakubkrehel-skills",
-    tier: "vetted",
-    // jakubkrehel/skills 2,602 (2026-08-02)
-    description: "Better-* interface suite \u2014 one skill per concern: typography, OKLCH color, accessibility, layout, UX writing, component states. Add when you need a specific UI review, not as a default",
-    category: "frontend",
-    source: "jakubkrehel",
-    condition: { kind: "opt-in" },
-    // `--skill` 미지정 = 리포의 7 스킬 전부 설치. 다른 multi-skill 출처(K-Dense·softaworks)는
-    // 한 자산 = 한 스킬이라 `--skill` 을 썼지만, 여기 광고 문구가 "7 skills" 세트다 —
-    // 한 개만 깔면 description 이 곧 거짓이 된다. 실호출 형태는 Docker 실설치(AC8)로 확인한다.
-    method: { kind: "skill", source: "jakubkrehel/skills" }
-  },
-  {
-    id: "taste-skill",
-    tier: "vetted",
-    // Leonxlnx/taste-skill 70,078 (2026-08-02)
-    description: "taste-skill \u2014 tunes the look of landing pages, portfolios, and redesigns (variance \xB7 motion \xB7 density). Not for dashboards or multi-step product UI",
-    category: "frontend",
-    source: "Leonxlnx",
-    condition: { kind: "opt-in" },
-    // 리포에 스킬 14종(brandkit·brutalist·minimalist 등)이 있고 본체가 `taste-skill` —
-    // 스타일 변형은 그 안에서 고른다. 다른 단일 대표 자산(remotion)과 같은 형태.
-    // 2026-09-20 (#420) — 업스트림이 SKILL.md 의 `name:` 을 `design-taste-frontend` 로 바꿨다. `npx skills
-    // add --skill` 은 디렉터리명이 아니라 **frontmatter name** 으로 맞춘다(실측: 옛 이름은 "No matching
-    // skills found", 새 이름은 설치 완료). 디렉터리는 여전히 `skills/taste-skill/` 이다.
-    method: { kind: "skill", source: "Leonxlnx/taste-skill", skill: "design-taste-frontend" }
-  },
-  {
-    id: "scroll-world",
-    tier: "vetted",
-    // oso95/scroll-world 6,863 (2026-08-02)
-    description: "scroll-world \u2014 scroll-driven 3D landing pages with generated media assets. A special production pipeline that needs external image/video services; only when that effect is requested",
-    category: "frontend",
-    source: "oso95",
-    condition: { kind: "opt-in" },
-    method: { kind: "skill", source: "oso95/scroll-world", skill: "scroll-world" }
-  },
-  // 2026-08-16 — Preline 은 Tailwind 컴포넌트 킷이지만 **프레임워크에 매이지 않는다**: htmx·
-  // vanilla 에도 붙는다(사용자 확인). 그래서 `frontend` 이면서 React/Vue 트랙 전용이 아니다.
-  //
-  // 리포 안에 테마 스킬은 `skills/theme-generator/` 하나다. 2026-08-16 실측에서는 `npx skills add`
-  // 가 디렉터리명(`theme-generator`)으로 맞췄는데, 2026-09-01 부터 그 이름이 "No matching skills
-  // found" 가 됐다(#420) — 지금은 SKILL.md 의 `name:`(`preline-theme-generator`)으로 맞춘다(실측
-  // 2026-09-20: 옛 이름 exit 1 · 새 이름 설치 완료). 이름이 바뀌면 월 1회 catalog-verify 가 잡는다.
-  //
-  // 같은 날 조사한 flowbite 는 **넣지 않는다**: 에이전트용 제공물이 MCP 서버뿐인데, 그때 이 저장소의
-  // `.mcp.json` 조립은 트랙 조건만 읽어 opt-in 경로가 없었다 — 넣으면 해당 트랙 전원에게 항상
-  // 켜진다. 안 쓰는 사람에게 MCP 툴 스키마만큼의 상주 비용을 물리는 형태라 기각(사용자 확정).
-  // #709 (ADR-101) 부터는 카탈로그 `internal` 항목으로 opt-in 경로가 있다(`railway-mcp-server`). flowbite 는
-  // 그 경로로 다시 심사할 수 있다 — 이 변경은 넣지 않는다.
-  {
-    id: "preline",
-    tier: "vetted",
-    // htmlstreamofficial/preline 6,386 (2026-08-16)
-    description: "Preline theme generator \u2014 turns a brand description into a Preline UI Tailwind theme (tokens, dark mode, overrides) with a local generator script. Only for projects that use Preline",
-    category: "frontend",
-    source: "htmlstreamofficial",
-    condition: { kind: "opt-in" },
-    method: {
-      kind: "skill",
-      source: "htmlstreamofficial/preline",
-      skill: "preline-theme-generator"
-    }
-  },
-  // #822 (사용자 결정 2026-10-14) — ast-grep 공식 스킬. 언어에 매이지 않아 트랙에 묶지 않고 opt-in.
-  //   벤더 README 가 "설치하면 발견될 뿐 선호되지 않는다"고 적고, 기본으로 쓰게 하려면 상주 지시를 권한다 — 관측 없는
-  //   상주는 넣지 않으므로 원하는 사람이 고르는 자리에만 둔다. 스킬 파일에 CLI 설치 안내가 없어 description 에 적는다.
-  //   리포에 스킬이 2종(ast-grep · ast-grep-outline)이라 하나만 받는다. #820 의 htmx-fastapi-ui 룰은 이 스킬 없이 동작한다.
-  {
-    id: "ast-grep",
-    tier: "experimental",
-    // ast-grep/agent-skill 893★ (license none — README "follows ast-grep's MIT"; 본체 ast-grep/ast-grep 16k MIT, 2026-10-14)
-    description: "ast-grep \u2014 write and test structural (AST) search and lint rules across languages (ast-grep official). Needs the ast-grep CLI installed separately; fires reliably only when you ask for ast-grep",
-    category: "dev-tools",
-    source: "ast-grep",
-    condition: { kind: "opt-in" },
-    method: { kind: "skill", source: "ast-grep/agent-skill", skill: "ast-grep" }
-  },
-  // === dev tools (has_dev_track) ===
-  // v26.110.0 (ADR-039) — security-guidance: 매 편집 패턴 경고 + LLM diff 리뷰 (훅 12파일,
-  //   Python + Agent SDK 의존). 상시 훅 = 매 편집 비용 + 폭발 반경 — 실측 전 기본설치 금지
-  //   (Context Cost NSM) → opt-in. Claude Code `/security-review`·agentshield ship 게이트와 보완.
-  {
-    id: "security-guidance",
-    tier: "official",
-    // anthropics/claude-plugins-official (220.8K installs, 사용자 관측 2026-07-18)
-    description: "security-guidance \u2014 pattern warnings on every edit plus an LLM review of diffs and commits (Anthropic official). Weigh it against security tools you already run: overlap, false positives, and cost per edit",
-    category: "dev-tools",
-    source: "anthropics",
-    condition: { kind: "opt-in" },
-    method: {
-      kind: "plugin",
-      marketplace: "anthropics/claude-plugins-official",
-      pluginId: "security-guidance@claude-plugins-official"
-    }
-  },
-  // v26.110.0 (ADR-039) — context7 플러그인은 **미등록** (검토 후 철회): 트랙 표(#751 전 templates/mcp.json) ·
-  //   codex config.toml.template · opencode 설정이 이미 @upstash/context7-mcp 를 기본 wiring —
-  //   플러그인 추가 = 동일 서버 중복 등록이고 도달 범위도 더 좁다(plugin=claude-only vs
-  //   템플릿=claude+codex+opencode). "문서 조회 기본 제공" 요구는 기충족.
-  {
-    id: "agent-browser",
-    tier: "vetted",
-    // vercel-labs/agent-browser 34k
-    description: "agent-browser \u2014 drives a real browser from the terminal (Playwright wrapper: screenshots, DOM search). Only if your CLI has no equivalent browser tool",
-    // v26.78.0 — Understanding 으로 재분류: 웹 지각(screenshot·DOM). 영상/코드 지각과 같은 축.
-    category: "understanding",
-    source: "vercel-labs",
-    // #489 (사용자 결정 2026-09-20 a) — 기본 체크에서 opt-in 으로. computer-use 가 같은 일을 하고,
-    // 셋 중 설치 비용이 가장 크다(npm devDep → 안 쓰는 프로젝트에 node_modules 만 남는다).
-    // 3단계에는 그대로 뜨되 체크 해제, `--with agent-browser` 로 켠다. 기존 설치본은 영향 없음.
-    condition: { kind: "opt-in" },
-    method: { kind: "npm", pkg: "agent-browser", version: "0.31.0" }
-  },
-  // v26.78.0 — Understanding 신규 3종 (plugin, opt-in). 에이전트 인지 증강: 영상·코드 지각 + 메모리.
-  {
-    id: "claude-video",
-    tier: "vetted",
-    // bradautomates/claude-video 1.8k
-    description: "Claude Video \u2014 fetches a video from a URL, extracts frames and a transcript so the agent can see and hear it. For video evidence, not general image understanding",
-    category: "understanding",
-    source: "bradautomates",
-    condition: { kind: "opt-in" },
-    method: {
-      kind: "plugin",
-      marketplace: "bradautomates/claude-video",
-      pluginId: "watch@claude-video"
-    }
-  },
-  {
-    id: "understand-anything",
-    tier: "vetted",
-    // Lum1104/Understand-Anything 53k
-    description: "Understand Anything \u2014 builds an interactive knowledge graph and dashboard of your codebase. For visual exploration of a large codebase; the graph costs time to build and keep current",
-    category: "understanding",
-    source: "Lum1104",
-    condition: { kind: "opt-in" },
-    method: {
-      kind: "plugin",
-      marketplace: "Lum1104/Understand-Anything",
-      pluginId: "understand-anything@understand-anything"
-    }
-  },
-  // === Visual & Media (v26.85.0) — 코드-퍼스트 제작 자산. 전부 opt-in. ===
-  // Docker 실설치 검증 PASS (실 claude 2.1.177): plugin install / npx skills add resolve 확인.
-  {
-    id: "frontend-slides",
-    tier: "vetted",
-    // zarazhangrui/frontend-slides 21k
-    description: "frontend-slides \u2014 dependency-free HTML slide decks with PPTX-to-HTML and PDF export scripts. When an HTML deck is the actual deliverable",
-    category: "visual-media",
-    source: "zarazhangrui",
-    condition: { kind: "opt-in" },
-    method: {
-      kind: "plugin",
-      marketplace: "zarazhangrui/frontend-slides",
-      pluginId: "frontend-slides@frontend-slides"
-    }
-  },
-  {
-    id: "marp-slide",
-    tier: "vetted",
-    // softaworks/agent-toolkit 2k
-    description: "marp-slide \u2014 Marp Markdown slides with 7 themes and PPTX/PDF export. Only for a Marp-based workflow",
-    category: "visual-media",
-    source: "softaworks",
-    // softaworks plugin dir 는 plugin.json 부재 → skill 경로가 안전 (Docker 검증).
-    condition: { kind: "opt-in" },
-    method: { kind: "skill", source: "softaworks/agent-toolkit", skill: "marp-slide" }
-  },
-  {
-    id: "gsap-skills",
-    tier: "vetted",
-    // greensock/gsap-skills 9k (GSAP 본가 공식)
-    description: "GSAP skills \u2014 GreenSock's own guide to timelines, ScrollTrigger, and framework lifecycle cleanup. Only for projects that already use GSAP; not a reason to pick it",
-    category: "visual-media",
-    source: "greensock",
-    condition: { kind: "opt-in" },
-    method: {
-      kind: "plugin",
-      marketplace: "greensock/gsap-skills",
-      pluginId: "gsap-skills@gsap-skills"
-    }
-  },
-  {
-    // remotion: star 3.6k → vetted (star 기반 tier SSOT + trust-tier-drift CI 정합, 사용자 결정 2026-06-13).
-    //   코어 BUSL(Business Source License) — opt-in + description 고지로 신중 취급 (경고 배지 대신).
-    //   --skill 값 = remotion-best-practices (dir `remotion` ≠ frontmatter name, Docker 실측 확정).
-    id: "remotion",
-    tier: "vetted",
-    // remotion-dev/skills 3.6k (license none — 출처 신뢰; 코어 BUSL 고지)
-    description: "Remotion \u2014 programmatic MP4 video from React components (core license BUSL). The skill is a reference; the renderer and its environment are a separate install",
-    category: "visual-media",
-    source: "remotion-dev",
-    condition: { kind: "opt-in" },
-    method: { kind: "skill", source: "remotion-dev/skills", skill: "remotion-best-practices" }
-  },
-  // Issue #176 — 프레젠테이션 생성 스택 4종 (Docker 실설치 4/4 PASS: skills@1.5.11 add <src> --agent claude-code --skill, 2026-06-20).
-  {
-    id: "ppt-master",
-    tier: "vetted",
-    // hugohe3/ppt-master 29k
-    description: "ppt-master \u2014 editable PowerPoint (.pptx) from a document, with native shapes, speaker notes, and your own template. When the deliverable must stay editable in PowerPoint",
-    category: "visual-media",
-    source: "hugohe3",
-    condition: { kind: "opt-in" },
-    method: { kind: "skill", source: "hugohe3/ppt-master", skill: "ppt-master" }
-  },
-  {
-    // ADR-104 (#726) — web-video-presentation 의 교체. plugin 인 이유: skill 방식이면 상류 CLI 가
-    //   작업 중 `npx hyperframes skills update`/`init` 으로 같은 스킬 디렉터리를 다시 쓰고 prune 해
-    //   설치 기록(#573 sha)과 어긋난다. plugin 모드는 그 런타임 설치를 상류가 스스로 금한다.
-    //   Anthropic 공식 마켓플레이스 항목(sha 고정 URL 소스, 내용 저자 HeyGen) — 그래서 tier official.
-    id: "hyperframes",
-    tier: "official",
-    // anthropics/claude-plugins-official 등재 (heygen-com/hyperframes)
-    description: "HyperFrames \u2014 write video as HTML and render it to MP4 (headless Chrome + FFmpeg): narrated explainers, slideshow-style decks, captions and voice-over. Rendering needs Node 22+ and FFmpeg",
-    category: "visual-media",
-    source: "heygen-com",
-    condition: { kind: "opt-in" },
-    method: {
-      kind: "plugin",
-      marketplace: "anthropics/claude-plugins-official",
-      pluginId: "hyperframes@claude-plugins-official"
-    }
-  },
-  // === Supabase agent-skills (csr-supabase|full) ===
-  {
-    id: "supabase-agent-skills",
-    tier: "vetted",
-    // supabase/agent-skills 2.2k
-    description: "Supabase agent skills \u2014 auth, RLS, edge functions, realtime, and current docs (Supabase official). Only for projects on Supabase; pre-checked on csr-supabase and full",
-    category: "backend",
-    source: "supabase",
-    condition: { kind: "any-track", tracks: ["csr-supabase", "full"] },
-    method: {
-      kind: "plugin",
-      marketplace: "supabase/agent-skills",
-      pluginId: "supabase@supabase-agent-skills"
-    }
-  },
-  {
-    id: "postgres-best-practices",
-    tier: "vetted",
-    // supabase/agent-skills 2.2k
-    description: "Postgres best practices \u2014 schema, index, and query optimization reference (Supabase official). Reach for it when designing tables or fixing slow queries, not on every edit",
-    category: "backend",
-    source: "supabase",
-    condition: { kind: "any-track", tracks: ["csr-supabase", "full"] },
-    method: {
-      kind: "plugin",
-      marketplace: "supabase/agent-skills",
-      pluginId: "postgres-best-practices@supabase-agent-skills"
-    }
-  },
-  // === React + Next UI tracks ===
-  // v0.6.3 — vercel-labs/agent-skills source는 short form 안 됨. full HTTPS URL 필요.
-  // 사용자 확인 형식: `npx skills add https://github.com/vercel-labs/agent-skills --skill <name>`.
-  {
-    id: "react-best-practices",
-    tier: "vetted",
-    // vercel-labs/agent-skills 27k (license none — 출처 신뢰)
-    description: "React best practices \u2014 Vercel's data-fetching order, server rendering, serialization, and cache guidance. For performance work in React, not every component edit",
-    category: "frontend",
-    source: "vercel-labs",
-    condition: { kind: "any-track", tracks: CSR_SSR_NEXTJS_FULL },
-    method: {
-      kind: "skill",
-      source: "https://github.com/vercel-labs/agent-skills",
-      // v0.6.5 — skills.sh registry name. GitHub dir 이름(react-best-practices)과 다름.
-      // skills.sh: 대부분 vercel- prefix (web-design-guidelines, deploy-to-vercel만 예외).
-      skill: "vercel-react-best-practices"
-    }
-  },
-  {
-    id: "shadcn-ui",
-    tier: "vetted",
-    // shadcn-ui/ui 115k
-    description: "shadcn/ui \u2014 reads this project's component config and registry so the agent adds components the way your setup expects (shadcn official). Only for projects that use shadcn",
-    category: "frontend",
-    source: "shadcn-ui",
-    condition: { kind: "any-track", tracks: CSR_SSR_NEXTJS_FULL },
-    // v26.54.1 — shadcn/ui repo 의 실제 skill 이름은 `shadcn` (자산 id 와 다름).
-    method: { kind: "skill", source: "shadcn/ui", skill: "shadcn" }
-  },
-  {
-    // v26.106.0 (ADR-035, 사용자 승인 D): 순수 pattern-guide(일반 디자인 가이드라인) → opt-in 강등
-    //   (T2 가설 전제 — taste 3종 중복 주장은 검증자 정정으로 기각, 근거는 P축 단독).
-    id: "web-design-guidelines",
-    tier: "vetted",
-    // vercel-labs/agent-skills 27k (license none — 출처 신뢰)
-    description: "Web design guidelines \u2014 Vercel's review checklist for hierarchy, color, spacing, and accessibility. A review aid, not a generator; frontend-design covers the default",
-    category: "frontend",
-    source: "vercel-labs",
-    condition: { kind: "opt-in" },
-    method: {
-      kind: "skill",
-      source: "https://github.com/vercel-labs/agent-skills",
-      skill: "web-design-guidelines"
-    }
-  },
-  {
-    // 2026-08-17 (사용자 지정) — 웹 게임 개발. **웹 전용이다**: 스킬 본문 frontmatter 가
-    //   "HTML5, Canvas, WebGL, and JavaScript" 로 스스로 범위를 적고 있고 프레임워크도
-    //   Phaser · Three.js · Babylon.js · A-Frame 이다. Unity/Unreal/Godot 은 안 덮으므로
-    //   description 에 "web" 을 남긴다 — 엔진 이름을 지우면 네이티브 엔진까지 되는 것처럼 읽힌다.
-    // opt-in 인 이유: frontend 트랙 사용자 대부분은 게임을 만들지 않는다. 게임 트랙은 아직 없다.
-    id: "game-engine",
-    tier: "vetted",
-    // github/awesome-copilot 37,909★ (MIT, 2026-08-17 `gh api` 실측 · GitHub 공식 조직)
-    description: "Game engine \u2014 web game development with HTML5 Canvas / WebGL (Phaser, Three.js, Babylon.js): game loop, physics, sprites, tilemaps, input. Web games only, not Unity or Unreal",
-    category: "frontend",
-    source: "github",
-    condition: { kind: "opt-in" },
-    method: {
-      kind: "skill",
-      source: "https://github.com/github/awesome-copilot",
-      skill: "game-engine"
-    }
-  },
-  // === Executive tracks ===
-  {
-    id: "anthropic-document-skills",
-    tier: "official",
-    // anthropics/skills 144k
-    description: "Anthropic document skills \u2014 pptx / docx / xlsx / pdf authoring with real scripts (slide duplication, OOXML validation, thumbnails). For document deliverables",
-    category: "business",
-    source: "anthropics",
-    condition: { kind: "any-track", tracks: ["executive", "full"] },
-    method: {
-      kind: "plugin",
-      marketplace: "anthropics/skills",
-      pluginId: "document-skills@anthropic-agent-skills"
-    }
-  },
-  // alirezarezvani/claude-skills marketplace (v2.3.0) — 2026-04-25 통합 갱신.
-  // 기존 alirezarezvani/c-level-skills + alirezarezvani/finance-skills 별도 marketplace
-  // → 통합된 alirezarezvani/claude-skills marketplace (claude-code-skills 이름)로 이동.
-  {
-    id: "finance-skills",
-    tier: "vetted",
-    // alirezarezvani 16k
-    description: "finance-skills \u2014 financial analyst, SaaS metrics, and investment advisor skills with calculation scripts. For financial analysis work; the tools matter more than the role names",
-    category: "business",
-    source: "alirezarezvani",
-    // 2026-08-02 사용자 결정: 트랙 기본 → opt-in (ADR-063)
-    condition: { kind: "opt-in" },
-    method: {
-      kind: "plugin",
-      marketplace: "alirezarezvani/claude-skills",
-      pluginId: "finance-skills@claude-code-skills"
-    }
-  },
-  // === Growth Marketing Track (v0.5.0) ===
-  // 2026-08-02 정비 — alirezarezvani 번들 4종(c-level·business-growth·pm·marketing) +
-  //   research-summarizer 제거. 남는 마케팅 번들은 아래 coreyhaines31/marketingskills 하나로,
-  //   동명이물(marketing-skills ≠ marketingskills) 병존도 이로써 해소된다.
-  // v26.91.0 — coreyhaines31/marketingskills (35k★, MIT, plugin v2.5.1). opt-in =
-  //   growth-marketing 외 전 트랙에서도 wizard 토글 + `--with marketingskills` 로 설치 가능
-  //   ("SEO 는 일반 개발에도 활용" 충족: dev 트랙에서 본 번들 토글). 45 스킬 중 SEO 7종
-  //   (seo-audit/schema/ai-seo/site-architecture/programmatic-seo/content/aso)은 상호참조
-  //   (product-marketing 우선 + seo-audit↔schema↔ai-seo)라 부분 추출 시 포인터 깨짐 → 번들
-  //   통째 설치만 정합. repoForAsset = marketplace(coreyhaines31/marketingskills) → drift 라이브.
-  {
-    id: "marketingskills",
-    tier: "vetted",
-    // coreyhaines31 35k
-    description: "marketingskills \u2014 SEO, conversion, ads, content, and measurement (45 skills, cross-referenced). For marketing work; too broad as a default on a development track",
-    category: "business",
-    source: "coreyhaines31",
-    condition: { kind: "opt-in" },
-    method: {
-      kind: "plugin",
-      marketplace: "coreyhaines31/marketingskills",
-      pluginId: "marketing-skills@marketingskills"
-    }
-  },
-  // v26.76.0 — content-creator / demand-gen 제거: alirezarezvani/claude-skills marketplace.json 에
-  // 해당 plugin 부재(Docker 실설치 검출, exit 1). 거짓 광고 0건 원칙(Promise=Implementation).
-  // 2026-08-02 정비 — karpathy-coder 제거. Write|Edit 마다 Python complexity 검사를 돌리는
-  //   상시 훅이었고, 그 검사는 현행 모델이 이미 하는 일이다 (Opus 5 가이드의 "legacy harness
-  //   scaffolding"에 정확히 해당). 딸린 배선(`--with-karpathy-hook` 플래그 · templates/hooks/
-  //   karpathy-gate.sh · settings.json PreToolUse auto-wire)도 함께 삭제 — BREAKING, ADR-060.
-  // === Option-gated ===
-  {
-    // ADR-104 (#726) — trailofbits-skills(differential-review)의 교체. Anthropic 공식 플러그인.
-    //   `git push` 에 훅을 걸고 스캔이 시간·토큰을 쓰므로 opt-in 이다.
-    id: "claude-security",
-    tier: "official",
-    // anthropics/claude-plugins-official 등재 (./plugins/claude-security)
-    description: "Claude Security \u2014 on-request vulnerability scan of a branch, PR, or commit diff; a verifier agent challenges each finding and results are tallied in code; asks you to confirm the cost before it starts. For a light diff check, the built-in /security-review is enough",
-    category: "dev-tools",
-    source: "anthropics",
-    condition: { kind: "opt-in" },
-    method: {
-      kind: "plugin",
-      marketplace: "anthropics/claude-plugins-official",
-      pluginId: "claude-security@claude-plugins-official"
-    }
-  }
-];
-var REMOVED_CATALOG_ASSETS = {
-  "product-skills": {},
-  agentmemory: {},
-  revealjs: {},
-  "trailofbits-skills": { replacedBy: "claude-security" },
-  "web-video-presentation": { replacedBy: "hyperframes" }
-};
-var DEV_METHOD_SKILL_IDS = [
-  "compaction-handoff",
-  "user-centered-explanation",
-  "audit-service-gaps",
-  "multi-persona-review",
-  "recurrence-prevention"
-];
-var INTERNAL_BUNDLED_SKILL_IDS = [
-  ...DEV_METHOD_SKILL_IDS,
-  // #602 — 트랙을 따라가는 번들 스킬(csr-*·ssr-*·full). selectedInternalSkills 로 흘러야
-  // .agents/skills(비-Claude 자리)에도 깔린다 — manifest 의 UI_SKILL_DIRS 배선은 .claude/ 만
-  // 알아 TRACKS.md 와 어긋났다. 조건은 buildAssetSpec 이 UI 트랙으로 건다.
-  "ui-visual-review",
-  "north-star",
-  "gh-issue-workflow",
-  "objective-brief",
-  "audit-harness-fit",
-  "model-orchestration",
-  "external-model-consult",
-  "self-hosted-github-runner",
-  "natural-korean",
-  // #729 (ADR-109) — 토론(개발 트랙 기본) + 브라우저 위임 3종(opt-in). condition 이 설치를 가른다.
-  "multi-model-debate",
-  "gemini-delegate",
-  "chatgpt-delegate",
-  "genspark-delegate"
-];
-var CONTINUOUS_SKILLS = [
-  {
-    // #493 (#485 분리, 사용자 결정 2026-09-20) — 상주 한 줄의 문안은 사용자가 이슈에 적은 원칙이다:
-    // 평소 설명부터 사용자 행동·결과를 먼저, 재설명·UX 전후·중요한 선택 정리는 스킬로.
-    id: "user-centered-explanation",
-    whenToApply: "when explaining a development problem, change, or choice to the user, explain what the user does and sees before internal implementation \u2014 in every answer and report, not only when approval is asked for; for a detailed re-explanation, a UX before/after comparison, or laying out an important decision, apply this skill"
-  },
-  {
-    id: "model-orchestration",
-    whenToApply: "when work is delegated, it decides which lane takes the work and how that lane is run"
-  }
-];
-var RENAMED_SKILL_IDS = {
-  "task-brief": "objective-brief",
-  "humanize-korean": "natural-korean",
-  // #485 (2026-09-20) — 새 이름은 `new-skills` 묶음(#480 ①)이 같은 update 에서 깐다.
-  "clear-korean-communication": "user-centered-explanation"
-};
-var RETIRED_SKILL_IDS = [
-  "strategic-compact",
-  "continuous-learning-v2",
-  "spec-scaling",
-  // ADR-090 (#452) — 관측 없는 자산 은퇴. 앞 세 종과 같은 경로로 안내한다.
-  "verification-loop",
-  "deep-research",
-  "eval-harness",
-  "agent-introspection-debugging",
-  // #492 — ECC cherry-pick 스킬 7종 은퇴. 번들에서 빠졌으니 설치본에 남은 디렉터리는 죽은
-  // 사본이다 — `update` 화면이 "지워도 된다"를 말하고 삭제는 사용자가 한다(위와 같은 규율).
-  "python-patterns",
-  "python-testing",
-  "e2e-testing",
-  "nextjs-turbopack",
-  "market-research",
-  "investor-materials",
-  "investor-outreach"
-];
-var TRUST_TIER = Object.fromEntries(
-  EXTERNAL_ASSETS.map((a) => [a.id, a.tier])
-);
-function assetTrustTier(assetId) {
-  return TRUST_TIER[assetId] ?? "experimental";
-}
-function shouldInstallAsset(asset, ctx) {
-  if (ctx.userOverride?.forceExclude.includes(asset.id)) return false;
-  if (ctx.userOverride?.forceInclude.includes(asset.id)) return true;
-  if (TRUST_TIER[asset.id] === "experimental") return false;
-  return matchesCondition(asset, ctx);
-}
-function matchesCondition(asset, ctx) {
-  const cond = asset.condition;
-  switch (cond.kind) {
-    case "any-track":
-      return ctx.tracks.some((t) => cond.tracks.includes(t));
-    case "has-dev-track":
-      return hasDevTrack(ctx.tracks);
-    case "option":
-      return ctx.options[cond.flag] === true;
-    case "opt-in":
-      return false;
-  }
-}
-function isAssetSelected(assetId, ctx) {
-  const asset = EXTERNAL_ASSETS.find((a) => a.id === assetId);
-  return asset ? shouldInstallAsset(asset, ctx) : false;
-}
-function experimentalOptInCandidates(ctx) {
-  return EXTERNAL_ASSETS.filter(
-    (a) => TRUST_TIER[a.id] === "experimental" && !ctx.userOverride?.forceInclude.includes(a.id) && matchesCondition(a, ctx)
-  );
-}
-function assetCliSupport(asset) {
-  if (asset.cliSupportOverride) {
-    return [...asset.cliSupportOverride];
-  }
-  switch (asset.method.kind) {
-    case "plugin":
-      return ["claude"];
-    case "skill":
-    case "npm":
-    case "npx-run":
-    case "internal":
-      return [...CLI_BASES];
-  }
-}
-function assetReachesCli(asset, cli) {
-  if (cli.length === 0) {
-    return true;
-  }
-  const support = assetCliSupport(asset);
-  return cli.some((c) => support.includes(c));
-}
-function filterApplicableAssets(assets, ctx) {
-  return assets.filter((a) => shouldInstallAsset(a, ctx));
-}
-
-// src/manifest.ts
-init_esm_shims();
-
-// src/install-log.ts
-init_esm_shims();
-import { createHash } from "crypto";
-import { existsSync as existsSync2, mkdirSync as mkdirSync2, readFileSync as readFileSync3, rmSync, statSync, writeFileSync } from "fs";
-import { dirname as dirname3, join as join4 } from "path";
-
-// package.json
-var package_default = {
-  name: "@uzysjung/agent-harness",
-  version: "26.174.0",
-  description: "Curate vetted AI-coding skills & plugins by your tech stack \u2014 install only what you need, across Claude Code, Codex, OpenCode & Antigravity",
-  type: "module",
-  publishConfig: {
-    access: "public"
-  },
-  engines: {
-    node: ">=20.12.0"
-  },
-  bin: {
-    "agent-harness": "./dist/index.js"
-  },
-  files: [
-    "dist",
-    "templates",
-    "README.md",
-    "LICENSE"
-  ],
-  scripts: {
-    build: "tsup",
-    dev: "tsup --watch",
-    "gen:compat": "npm run build && node scripts/gen-compatibility.mjs",
-    "gen:legacy-fingerprints": "node scripts/gen-legacy-fingerprints.mjs",
-    test: "vitest run",
-    "test:watch": "vitest",
-    "test:coverage": "vitest run --coverage",
-    typecheck: "tsc --noEmit",
-    lint: "biome check src tests",
-    "lint:fix": "biome check --write src tests",
-    format: "biome format --write src tests",
-    ci: "npm run typecheck && npm run lint && npm run test:coverage && npm run build",
-    prepare: "[ -d dist ] || npm run build",
-    "cost:report": "npm run build && node scripts/context-cost-report.mjs",
-    "cost:baseline": "npm run build && node scripts/context-cost-baseline.mjs",
-    "assets:history": "bash scripts/asset-history.sh",
-    "release:audit": "node scripts/release-audit.mjs",
-    security: "npm audit --omit=dev --audit-level=high && npx --yes ecc-agentshield@1.4.0 scan --baseline security-baseline.json --gate",
-    "security:baseline": "npx --yes ecc-agentshield@1.4.0 scan --save-baseline security-baseline.json"
-  },
-  dependencies: {
-    "@clack/prompts": "^1.3.0",
-    cac: "^7.0.0",
-    "smol-toml": "^1.9.0"
-  },
-  devDependencies: {
-    "@biomejs/biome": "^2.4.13",
-    "@types/node": "^25.6.0",
-    "@vitest/coverage-v8": "^4.1.11",
-    tsup: "^8.3.0",
-    typescript: "^5.6.0",
-    vitest: "^4.1.11"
-  },
-  license: "MIT",
-  repository: {
-    type: "git",
-    url: "git+https://github.com/uzysjung/uzys-agent-harness.git"
-  }
-};
-
-// src/adapters/shared-files.ts
-init_esm_shims();
-var SHARED_FILES = {
-  "CLAUDE.md": { adapter: "marker-md", prefix: "claude-md:" },
-  "AGENTS.md": { adapter: "marker-md", prefix: "agents-md:" },
-  ".claude/settings.json": { adapter: "json-keys", prefix: "settings:" },
-  ".mcp.json": { adapter: "json-keys", prefix: "mcp:", strip: "mcpServers." },
-  "opencode.json": { adapter: "json-keys", prefix: "opencode:" },
-  ".codex/config.toml": { adapter: "toml-region", prefix: "codex:" },
-  ".gitignore": { adapter: "lines", prefix: "gitignore:" }
-};
-var KEY_ID_PREFIXES = Object.values(SHARED_FILES).map(
-  (f) => f.prefix
-);
-function isKeyId(id) {
-  return KEY_ID_PREFIXES.some((p) => id.startsWith(p));
-}
-function sharedPathOfKeyId(id) {
-  for (const [path2, file] of Object.entries(SHARED_FILES))
-    if (id.startsWith(file.prefix)) return path2;
-  return null;
-}
-
-// src/cli-targets.ts
-init_esm_shims();
-var CLI_BASE_SORT_ORDER = {
-  claude: 0,
-  codex: 1,
-  opencode: 2,
-  antigravity: 3
-};
-var CLI_DISPLAY_NAMES = {
-  claude: "Claude",
-  codex: "Codex",
-  opencode: "OpenCode",
-  antigravity: "Antigravity"
-};
-function parseCliTargets(input) {
-  const items = normalizeInput(input);
-  if (items.length === 0) {
-    return { ok: true, targets: ["claude"], warnings: [] };
-  }
-  const collected = /* @__PURE__ */ new Set();
-  const warnings = [];
-  for (const item of items) {
-    if (!isCliBase(item)) {
-      let hint = "";
-      if (item === "both") {
-        hint = "\n         v0.8.0 removed 'both' alias. Use --cli claude --cli codex.";
-      } else if (item === "all") {
-        hint = "\n         v0.8.0 removed 'all' alias. Use --cli claude --cli codex --cli opencode.";
-      } else if (item.includes(",")) {
-        hint = "\n         Tip: comma-separated not supported. Use --cli A --cli B for multiple.";
-      }
-      return {
-        ok: false,
-        targets: ["claude"],
-        warnings,
-        error: `Invalid --cli value: ${item}. Must be one of: ${CLI_BASES.join(" | ")}${hint}`
-      };
-    }
-    collected.add(item);
-  }
-  const targets = [...collected].sort((a, b) => CLI_BASE_SORT_ORDER[a] - CLI_BASE_SORT_ORDER[b]);
-  return { ok: true, targets, warnings };
-}
-function normalizeInput(input) {
-  if (input === void 0 || input === null) return [];
-  if (typeof input === "string") {
-    const trimmed = input.trim();
-    return trimmed === "" ? [] : [trimmed];
-  }
-  return input.filter((s) => typeof s === "string" && s.trim() !== "").map((s) => s.trim());
-}
-function targetsInclude(targets, base) {
-  return targets.includes(base);
-}
-
-// src/fs-ops.ts
-init_esm_shims();
-import {
-  copyFileSync,
-  existsSync,
-  constants as fsConstants,
-  mkdirSync,
-  readdirSync,
-  readFileSync
-} from "fs";
-import { dirname as dirname2, join as join2 } from "path";
-
-// src/outside-project.ts
-init_esm_shims();
-import { lstatSync, readlinkSync, realpathSync } from "fs";
-import { basename, dirname, isAbsolute, join, relative, resolve, sep } from "path";
-function isOutsideProject(projectDir, target) {
-  const root = resolveWriteTarget(projectDir) ?? projectDir;
-  const rel = relative(root, target);
-  return rel === ".." || rel.startsWith(`..${sep}`) || isAbsolute(rel);
-}
-function resolveWriteTarget(abs) {
-  const tail = [];
-  const hops = /* @__PURE__ */ new Set();
-  let path2 = abs;
-  for (; ; ) {
-    try {
-      return join(realpathSync(path2), ...tail);
-    } catch {
-    }
-    let isLink = false;
-    try {
-      const st = lstatSync(path2, { throwIfNoEntry: false });
-      if (st !== void 0 && !st.isSymbolicLink()) return null;
-      isLink = st !== void 0;
-    } catch {
-      return null;
-    }
-    if (isLink) {
-      if (hops.has(path2)) return null;
-      hops.add(path2);
-      path2 = resolve(dirname(path2), readlinkSync(path2));
-      continue;
-    }
-    const parent = dirname(path2);
-    if (parent === path2) return null;
-    tail.unshift(basename(path2));
-    path2 = parent;
-  }
-}
-function outsideProjectTarget(projectDir, abs) {
-  const target = resolveWriteTarget(abs);
-  if (target === null || !isOutsideProject(projectDir, target)) return null;
-  const rel = relative(projectDir, abs);
-  const parts = rel.split(sep);
-  let link = rel;
-  let linkTarget = target;
-  for (let i = 1; i <= parts.length; i++) {
-    const prefix = join(projectDir, ...parts.slice(0, i));
-    const st = lstatSync(prefix, { throwIfNoEntry: false });
-    if (st?.isSymbolicLink() !== true) continue;
-    const resolved = resolveWriteTarget(prefix);
-    if (resolved === null || !isOutsideProject(projectDir, resolved)) continue;
-    link = parts.slice(0, i).join(sep);
-    linkTarget = resolved;
-    break;
-  }
-  const slash = (p) => p.split(sep).join("/");
-  return { path: slash(rel), target, link: slash(link), linkTarget };
-}
-function outsideLinkAt(projectDir, rel) {
-  const abs = join(projectDir, rel);
-  try {
-    if (!lstatSync(abs, { throwIfNoEntry: false })?.isSymbolicLink()) return null;
-  } catch {
-    return null;
-  }
-  return outsideProjectTarget(projectDir, abs);
-}
-function createOutsideGuard(projectDir) {
-  const seen = /* @__PURE__ */ new Map();
-  return {
-    skip(abs) {
-      const hit = outsideProjectTarget(projectDir, abs);
-      if (hit === null) return false;
-      if (!seen.has(hit.path)) seen.set(hit.path, hit);
-      return true;
-    },
-    list: () => [...seen.values()]
-  };
-}
-function mergeOutside(...lists) {
-  const out = /* @__PURE__ */ new Map();
-  for (const list of lists) for (const o of list) if (!out.has(o.path)) out.set(o.path, o);
-  return [...out.values()];
-}
-
-// src/fs-ops.ts
-function ensureDir(path2) {
-  mkdirSync(path2, { recursive: true });
-}
-function copyFile(source, target) {
-  if (!existsSync(source)) {
-    throw new Error(`Source not found: ${source}`);
-  }
-  mkdirSync(dirname2(target), { recursive: true });
-  copyFileSync(source, target);
-}
-var MAX_BACKUP_CLAIMS = 100;
-function claimBackupPath(base, claim) {
-  for (let n = 1; n <= MAX_BACKUP_CLAIMS; n++) {
-    const candidate = n === 1 ? base : `${base}-${n}`;
-    try {
-      claim(candidate);
-      return candidate;
-    } catch (err) {
-      if (err.code !== "EEXIST") throw err;
-    }
-  }
-  throw new Error(`Cannot allocate a backup path for ${base} (${MAX_BACKUP_CLAIMS} taken)`);
-}
-function backupFile(target, now = /* @__PURE__ */ new Date()) {
-  return claimBackupPath(
-    `${target}.backup-${formatStamp(now)}`,
-    (c) => copyFileSync(target, c, fsConstants.COPYFILE_EXCL)
-  );
-}
-function backupFromCopy(target, source, now = /* @__PURE__ */ new Date()) {
-  mkdirSync(dirname2(target), { recursive: true });
-  return claimBackupPath(
-    `${target}.backup-${formatStamp(now)}`,
-    (c) => copyFileSync(source, c, fsConstants.COPYFILE_EXCL)
-  );
-}
-function claimBackupDir(target, now = /* @__PURE__ */ new Date()) {
-  return claimBackupPath(`${target}.backup-${formatStamp(now)}`, (c) => mkdirSync(c));
-}
-function backupOriginal(backupPath) {
-  const m = /^(.+)\.backup-\d{8}T\d{6}(?:-\d+)?$/.exec(backupPath);
-  return m?.[1] ?? null;
-}
-function listFilesRecursive(dir, prefix = "") {
-  if (!existsSync(dir)) return [];
-  const out = [];
-  for (const entry of readdirSync(dir, { withFileTypes: true })) {
-    const rel = prefix ? `${prefix}/${entry.name}` : entry.name;
-    if (entry.isDirectory()) {
-      out.push(...listFilesRecursive(join2(dir, entry.name), rel));
-    } else if (entry.isFile()) {
-      out.push(rel);
-    }
-  }
-  return out;
-}
-function formatStamp(now) {
-  return now.toISOString().replace(/[-:]/g, "").replace(/\.\d+Z$/, "Z").slice(0, 15);
-}
-var PROJECT_SKELETON_DIRS = [
-  ".claude/commands/uzys",
-  ".claude/rules",
-  ".claude/skills",
-  ".claude/agents",
-  ".claude/hooks",
-  "docs/decisions"
-];
-function ensureProjectSkeleton(projectDir) {
-  for (const d of PROJECT_SKELETON_DIRS) {
-    if (outsideProjectTarget(projectDir, join2(projectDir, d)) !== null) continue;
-    mkdirSync(join2(projectDir, d), { recursive: true });
-  }
-}
-function backupIfLossyUtf8(target, now = /* @__PURE__ */ new Date()) {
-  if (!existsSync(target)) return null;
-  let raw;
-  try {
-    raw = readFileSync(target);
-  } catch {
-    return null;
-  }
-  if (Buffer.from(raw.toString("utf8")).equals(raw)) return null;
-  const backup = backupFile(target, now);
-  console.error(
-    `\u26A0 ${target} contains bytes that are not valid UTF-8 \u2014 rewriting would alter them permanently. Original bytes saved as ${backup}`
-  );
-  return backup;
-}
-
-// src/track-heal.ts
-init_esm_shims();
-import { lstatSync as lstatSync2, readFileSync as readFileSync2 } from "fs";
-import { join as join3 } from "path";
-var META_FILE = ".claude/.installed-tracks";
-var META_KEY = ".installed-tracks";
-function memoTargets(render) {
-  const cache = /* @__PURE__ */ new Map();
-  return (tracks) => {
-    const key = [...tracks].sort().join(",");
-    const hit = cache.get(key) ?? new Set(render(tracks));
-    cache.set(key, hit);
-    return hit;
-  };
-}
-var claudeTargets = memoTargets((tracks) => {
-  const spec = buildAssetSpec({ tracks, options: DEFAULT_OPTIONS });
-  return buildManifest(spec).filter((e) => e.applies(spec) && (e.type === "file" || e.target.startsWith(".claude/skills/"))).map((e) => e.target);
-});
-function claudeRecorded(log) {
-  return /* @__PURE__ */ new Set([
-    ...(log.policyFiles ?? []).map((f) => `.claude/${f.path}`),
-    ...(log.skillFiles ?? []).map((f) => `.claude/skills/${f.path.split("/")[0] ?? ""}`)
-  ]);
-}
-function healRecordedTracks(log, projectDir, clis) {
-  if (!clis.includes("claude")) return log;
-  const recorded = log.spec.tracks.filter(isTrack);
-  const added = metafileTracks(log, projectDir).filter((t) => !recorded.includes(t));
-  if (added.length === 0) return log;
-  return {
-    ...log,
-    spec: { ...log.spec, tracks: [.../* @__PURE__ */ new Set([...log.spec.tracks, ...added])].sort() }
-  };
-}
-function metafileTracks(log, projectDir) {
-  const abs = join3(projectDir, META_FILE);
-  if (lstatSync2(abs, { throwIfNoEntry: false })?.isFile() !== true) return [];
-  const content = readFileSync2(abs, "utf8");
-  const sha = log.policyFiles?.find((f) => f.path === META_KEY)?.sha256;
-  if (sha === void 0 || hashContent(content) !== sha) return [];
-  return content.split("\n").map((l) => l.trim()).filter(isTrack);
-}
-
-// src/install-log.ts
-var INSTALL_LOG_FILENAME = ".harness-install.json";
-var INSTALL_LOG_DIR = ".uzys-agent-harness";
-var LEGACY_INSTALL_LOG_DIR = ".claude";
-var INSTALL_LOG_VERSION = 1;
-var POLICY_DIRS = [
-  { dir: "rules", ext: ".md" },
-  { dir: "agents", ext: ".md" },
-  { dir: "commands/uzys", ext: ".md" },
-  { dir: "hooks", ext: ".sh" }
-];
-var ANTIGRAVITY_RULE_FILE = ".agents/rules/uzys-harness.md";
-function installedClis(log) {
-  if (log === null) return [];
-  if (log.spec.clis) return sortClis(log.spec.clis);
-  const found = new Set(log.spec.cli.filter(isCliBase));
-  if (log.templates.rootClaudeMd !== void 0) found.add("claude");
-  if (log.templates.codexDir !== void 0) found.add("codex");
-  if (log.templates.opencodeDir !== void 0) found.add("opencode");
-  if ((log.externalFiles ?? []).some((f) => f.path === ANTIGRAVITY_RULE_FILE)) {
-    found.add("antigravity");
-  }
-  return sortClis([...found]);
-}
-function sortClis(clis) {
-  return [...new Set(clis)].filter(isCliBase).sort((a, b) => CLI_BASE_SORT_ORDER[a] - CLI_BASE_SORT_ORDER[b]);
-}
-function buildAssetEntries(report, scope, previous) {
-  if (!report) return [];
-  return report.attempted.filter((r) => r.ok).map((r) => {
-    const entry = assetToLogEntry(r.asset, scope, r.version);
-    if (r.files === void 0) return entry;
-    const recordedBefore = previous?.find((a) => a.id === r.asset.id);
-    if (recordedBefore !== void 0 && recordedBefore.files === void 0) return entry;
-    return { ...entry, files: mergeToolFiles(recordedBefore?.files, r.files) };
-  });
-}
-function mergeToolFiles(prior, run) {
-  const changed = new Map(run.changed.map((f) => [f.path, f.sha256]));
-  const byPath = /* @__PURE__ */ new Map();
-  for (const f of prior ?? []) byPath.set(f.path, changed.get(f.path) ?? f.sha256);
-  for (const f of run.created) byPath.set(f.path, f.sha256);
-  return [...byPath].map(([path2, sha256]) => ({ path: path2, sha256 }));
-}
-function assetToLogEntry(asset, scope, version) {
-  const detail = methodDetail(asset.method);
-  const entry = {
-    id: asset.id,
-    category: asset.category,
-    method: asset.method.kind,
-    scope,
-    detail
-  };
-  if (version) entry.version = version;
-  return entry;
-}
-function methodDetail(method) {
-  switch (method.kind) {
-    case "plugin":
-      return { marketplace: method.marketplace, pluginId: method.pluginId };
-    case "skill":
-      return { source: method.source, ...method.skill ? { skill: method.skill } : {} };
-    case "npm":
-      return { pkg: method.pkg };
-    case "npx-run":
-      return { cmd: method.cmd, args: (method.args ?? []).join(" ") };
-    case "internal":
-      return { key: method.key };
-  }
-}
-var BUNDLED_SKILL_IDS = new Set(INTERNAL_BUNDLED_SKILL_IDS);
-function buildInstallLog(spec, external, scope, rootClaudeMd, previous, claudeDirMovedAside = false, rootFiles = [], codexTrust) {
-  const skillExclude = (spec.userOverride?.forceExclude ?? []).filter(
-    (id) => BUNDLED_SKILL_IDS.has(id)
-  );
-  const templates = {
-    ...spec.cli.includes("claude") ? { claudeDir: ".claude/" } : {},
-    ...spec.cli.includes("codex") ? { codexDir: ".codex/" } : {},
-    ...spec.cli.includes("opencode") ? { opencodeDir: ".opencode/" } : {},
-    ...rootClaudeMd ? { rootClaudeMd } : {}
-  };
-  const clis = sortClis([...installedClis(previous ?? null), ...spec.cli.filter(isCliBase)]);
-  const tracks = [
-    .../* @__PURE__ */ new Set([...(previous?.spec.tracks ?? []).filter(isTrack), ...spec.tracks])
-  ].sort();
-  const log = {
-    schemaVersion: INSTALL_LOG_VERSION,
-    installedAt: (/* @__PURE__ */ new Date()).toISOString(),
-    scope,
-    spec: {
-      tracks,
-      cli: spec.cli,
-      clis,
-      ...spec.baselineExclude && spec.baselineExclude.length > 0 ? { baselineExclude: spec.baselineExclude } : {},
-      ...skillExclude.length > 0 ? { skillExclude } : {}
-    },
-    // 이번 설치가 만든 항목이 이기고, 이번에 안 만든 항목은 이전 값을 그대로 둔다.
-    // (예: claude 로 깔고 나중에 codex 만 추가 설치해도 root CLAUDE.md 기록이 살아남는다)
-    templates: { ...previous?.templates, ...templates },
-    assets: mergeAssets(
-      claudeDirMovedAside ? previous?.assets?.filter(survivesClaudeDirRename) : previous?.assets,
-      buildAssetEntries(external, scope, previous?.assets)
-    )
-  };
-  const mergedRootFiles = mergeRootFiles(previous?.rootFiles, rootFiles);
-  if (mergedRootFiles.length > 0) log.rootFiles = mergedRootFiles;
-  const trust = codexTrust ?? previous?.codexTrust;
-  if (trust) log.codexTrust = trust;
-  return log;
-}
-function mergeRootFiles(previous, current) {
-  const byPath = /* @__PURE__ */ new Map();
-  for (const file of [...previous ?? [], ...current]) {
-    const prior = byPath.get(file.path);
-    byPath.set(
-      file.path,
-      prior && file.change !== "displaced" ? {
-        path: file.path,
-        change: prior.change === "created" ? "created" : file.change,
-        notes: [.../* @__PURE__ */ new Set([...prior.notes, ...file.notes])]
-      } : file
-    );
-  }
-  return [...byPath.values()];
-}
-function survivesClaudeDirRename(asset) {
-  if (asset.scope === "global") return true;
-  switch (asset.method) {
-    case "plugin":
-      return true;
-    // `~/.claude/plugins/cache` — 프로젝트 밖
-    case "npm":
-      return true;
-    // `node_modules/`
-    case "skill":
-      return false;
-    // `npx skills add` project scope → `.claude/skills/`
-    case "shell-script":
-      return false;
-    // legacy(#492 은퇴): ecc-prune → `.claude/local-plugins/`
-    case "npx-run":
-      return false;
-    case "internal":
-      return false;
-  }
-}
-function mergeAssets(previous, current) {
-  if (!previous || previous.length === 0) return [...current];
-  const currentById = new Map(current.map((a) => [a.id, a]));
-  const previousIds = new Set(previous.map((a) => a.id));
-  return [
-    ...previous.map((a) => currentById.get(a.id) ?? a),
-    ...current.filter((a) => !previousIds.has(a.id))
-  ];
-}
-function hashContent(content) {
-  return createHash("sha256").update(content, "utf8").digest("hex");
-}
-function mergeExternalFiles(previous, current) {
-  const byPath = /* @__PURE__ */ new Map();
-  for (const file of [...previous ?? [], ...current]) byPath.set(file.path, file);
-  return [...byPath.values()];
-}
-function writeInstallLog(projectDir, log) {
-  const path2 = installLogPath(projectDir);
-  mkdirSync2(dirname3(path2), { recursive: true });
-  const marked = { ...normalizeLogOrder(log), excludedKeysMigrated: true };
-  writeFileSync(path2, `${JSON.stringify(marked, null, 2)}
-`, "utf8");
-  migrateAwayLegacyLog(projectDir);
-  return path2;
-}
-function normalizeLogOrder(log) {
-  const cmp = (a, b) => a < b ? -1 : a > b ? 1 : 0;
-  const byPath = (xs) => [...xs].sort((a, b) => cmp(a.path, b.path));
-  const out = { ...log };
-  if (log.policyFiles !== void 0) out.policyFiles = byPath(log.policyFiles);
-  if (log.skillFiles !== void 0) out.skillFiles = byPath(log.skillFiles);
-  if (log.externalFiles !== void 0) out.externalFiles = byPath(log.externalFiles);
-  if (log.rootFiles !== void 0) out.rootFiles = byPath(log.rootFiles);
-  if (log.portions !== void 0) {
-    out.portions = [...log.portions].sort((a, b) => cmp(a.path, b.path) || cmp(a.key, b.key));
-  }
-  return out;
-}
-function migrateAwayLegacyLog(projectDir) {
-  const legacy = legacyInstallLogPath(projectDir);
-  if (!existsSync2(legacy)) return;
-  try {
-    rmSync(legacy);
-  } catch {
-  }
-}
-function readInstallLog(projectDir) {
-  return readInstallLogStatus(projectDir).log;
-}
-function readInstallLogStatus(projectDir) {
-  const path2 = [installLogPath(projectDir), legacyInstallLogPath(projectDir)].find(
-    (p) => existsSync2(p)
-  );
-  if (!path2) return { status: "missing", log: null };
-  let parsed;
-  try {
-    parsed = JSON.parse(readFileSync3(path2, "utf8"));
-  } catch {
-    return { status: "corrupted", log: null };
-  }
-  if (!isValidInstallLogShape(parsed)) return { status: "corrupted", log: null };
-  const log = parsed;
-  if (Array.isArray(log.assets)) {
-    log.assets = log.assets.map(
-      (a) => a.method === "npm-global" ? { ...a, method: "npm" } : a
-    );
-  }
-  const migrated = migrateExcluded(log, projectDir);
-  if (migrated.droppedKeys.length > 0) {
-    LEGACY_RELEASED.set(migrated.log, {
-      released: migrated.droppedKeys,
-      catalog: migrated.releasedCatalog
-    });
-  }
-  return {
-    status: "ok",
-    log: healRecordedTracks(migrated.log, projectDir, installedClis(migrated.log))
-  };
-}
-var LEGACY_RELEASED = /* @__PURE__ */ new WeakMap();
-function legacyDroppedKeys(log) {
-  return log === null ? [] : LEGACY_RELEASED.get(log)?.released ?? [];
-}
-function legacyReleasedCatalog(log) {
-  return log === null ? [] : LEGACY_RELEASED.get(log)?.catalog ?? [];
-}
-var SELECTIONS_MAX = 100;
-var HARNESS_VERSION = package_default.version;
-function appendSelection(log, ev) {
-  const empty = (a) => a === void 0 || a.length === 0;
-  if (empty(ev.with) && empty(ev.without) && empty(ev.released) && empty(ev.kept)) return log;
-  const clean = {
-    at: ev.at,
-    harness: ev.harness,
-    by: ev.by,
-    ...ev.via !== void 0 ? { via: ev.via } : {},
-    ...empty(ev.with) ? {} : { with: [...ev.with ?? []] },
-    ...empty(ev.without) ? {} : { without: [...ev.without ?? []] },
-    ...empty(ev.released) ? {} : { released: [...ev.released ?? []] },
-    ...empty(ev.kept) ? {} : { kept: [...ev.kept ?? []] },
-    ...ev.interrupted ? { interrupted: true } : {}
-  };
-  return { ...log, selections: [...log.selections ?? [], clean].slice(-SELECTIONS_MAX) };
-}
-var LEGACY_REINSTALL_WINDOW_MS = 6e5;
-function assetFiles(projectDir, asset) {
-  if (asset.files !== void 0) {
-    return asset.files.map((f) => join4(projectDir, f.path)).filter((p) => existsSync2(p));
-  }
-  const dir = asset.detail.skill ?? asset.id;
-  return [".claude/skills", ".agents/skills"].flatMap(
-    (d) => listFilesRecursive(join4(projectDir, d, dir)).map((rel) => join4(projectDir, d, dir, rel))
-  );
-}
-function legacyCatalogReleased(projectDir, log, asset) {
-  if (asset.method !== "skill" || asset.scope === "global") return false;
-  const files = assetFiles(projectDir, asset);
-  if (files.length === 0) return false;
-  const t = Date.parse(log.installedAt);
-  if (Number.isNaN(t)) return false;
-  const m = Math.max(...files.map((f) => statSync(f).mtimeMs));
-  return m <= t && m >= t - LEGACY_REINSTALL_WINDOW_MS;
-}
-function migrateExcluded(log, projectDir) {
-  if (log.excludedKeysMigrated === true) return { log, droppedKeys: [], releasedCatalog: [] };
-  const baseline = new Set(log.spec.baselineExclude ?? []);
-  const skills = new Set(log.spec.skillExclude ?? []);
-  const released = [];
-  const releasedCatalog = [];
-  const keptCatalog = [];
-  const kept = [];
-  for (const id of log.excluded ?? []) {
-    if (isKeyId(id)) {
-      released.push(id);
-      continue;
-    }
-    if (id.startsWith("baseline:") && !baseline.has(id)) {
-      released.push(id);
-      continue;
-    }
-    if (BUNDLED_SKILL_IDS.has(id) && !skills.has(id)) {
-      released.push(id);
-      continue;
-    }
-    const asset = log.assets.find((a) => a.id === id);
-    if (asset !== void 0 && !BUNDLED_SKILL_IDS.has(id) && !id.startsWith("baseline:")) {
-      if (projectDir !== void 0 && legacyCatalogReleased(projectDir, log, asset)) {
-        released.push(id);
-        releasedCatalog.push(id);
-        continue;
-      }
-      keptCatalog.push(id);
-    }
-    kept.push(id);
-  }
-  let next = { ...log, excludedKeysMigrated: true };
-  if (kept.length > 0) next.excluded = kept;
-  else delete next.excluded;
-  next = appendSelection(next, {
-    at: (/* @__PURE__ */ new Date()).toISOString(),
-    harness: HARNESS_VERSION,
-    by: "migration",
-    released,
-    kept: keptCatalog
-  });
-  return { log: next, droppedKeys: released, releasedCatalog };
-}
-function isValidInstallLogShape(value) {
-  if (typeof value !== "object" || value === null) return false;
-  const v = value;
-  const spec = v.spec;
-  if (typeof spec !== "object" || spec === null) return false;
-  if (!Array.isArray(spec.tracks)) return false;
-  if (!Array.isArray(v.assets)) return false;
-  if (typeof v.templates !== "object" || v.templates === null) return false;
-  return true;
-}
-function corruptedInstallLogMessage(projectDir) {
-  return `install log is corrupted at ${installLogPath(projectDir)} \u2014 if it holds git conflict markers, take one side whole; otherwise run install --reinstall (it forgets recorded exclusions and external assets)`;
-}
-function installLogPath(projectDir) {
-  return join4(projectDir, INSTALL_LOG_DIR, INSTALL_LOG_FILENAME);
-}
-function legacyInstallLogPath(projectDir) {
-  return join4(projectDir, LEGACY_INSTALL_LOG_DIR, INSTALL_LOG_FILENAME);
-}
-
-// src/project-claude-merge.ts
-init_esm_shims();
-var HARNESS_ANCHOR_FILE = "CLAUDE-uzys-harness.md";
-var HARNESS_IMPORT_LINE = `@${HARNESS_ANCHOR_FILE}`;
-var IMPORT_MARKER_START = "<!-- uzys-harness:import:start -->";
-var IMPORT_MARKER_END = "<!-- uzys-harness:import:end -->";
-var CONTINUOUS_SKILLS_HEADING = "## Skills that apply continuously";
-function renderContinuousSkillsNote(selectedInternalSkills) {
-  const lines = CONTINUOUS_SKILLS.filter((s) => selectedInternalSkills.includes(s.id)).map(
-    (s) => `- \`${s.id}\` \u2014 ${s.whenToApply}.`
-  );
-  if (lines.length === 0) return "";
-  return [
-    CONTINUOUS_SKILLS_HEADING,
-    "",
-    "These installed skills apply to every response or delegation; no prompt ever looks like their job, so open them from this list:",
-    "",
-    ...lines
-  ].join("\n");
-}
-function withContinuousSkillsNote(scaffold, selectedInternalSkills) {
-  const note = renderContinuousSkillsNote(selectedInternalSkills);
-  return note ? `${scaffold}
-
-${note}` : scaffold;
-}
-function importBlock(continuousSkills) {
-  const note = renderContinuousSkillsNote(continuousSkills);
-  const body = note ? `${HARNESS_IMPORT_LINE}
-
-${note}` : HARNESS_IMPORT_LINE;
-  return `${IMPORT_MARKER_START}
-${body}
-${IMPORT_MARKER_END}`;
-}
-var TRACK_DISPLAY_NAMES = {
-  base: "Base",
-  tooling: "Tooling",
-  "csr-supabase": "CSR Supabase",
-  "csr-fastify": "CSR Fastify",
-  "csr-fastapi": "CSR FastAPI",
-  "ssr-htmx": "SSR htmx + FastAPI",
-  "ssr-htmx-fastify": "SSR htmx + Fastify",
-  "ssr-nextjs": "SSR Next.js",
-  data: "Data",
-  executive: "Executive",
-  full: "Full",
-  "project-management": "Project Management",
-  "growth-marketing": "Growth Marketing"
-};
-var FULL_EXPANSION = TRACKS.filter((t) => t !== "full");
-var FILL_SECTIONS = [
-  "identity",
-  "stack",
-  "architecture",
-  "installed-assets",
-  "boundaries",
-  "verify"
-];
-var FILL_SPECS = {
-  identity: {
-    title: "Identity & Purpose",
-    prompt: `Replace the H1 title above with this project's real name, then state in 1-2 plain sentences what it does, who uses it, and why it exists. Sources: README.md, the package.json / pyproject.toml "description", docs/. Do NOT describe the harness itself. Delete this comment when done.`,
-    placeholder: "what this project is, who it is for, and why it exists"
-  },
-  stack: {
-    title: "Stack & Commands",
-    prompt: "Replace the list below with this project's REAL stack. Inspect package.json / pyproject.toml / go.mod / Cargo.toml / Gemfile + lockfiles and any Makefile/justfile/package scripts. List the language(s)+versions, framework(s), package manager, and the exact install/build/test/run commands. Verify each command exists before writing it \u2014 never guess. Delete lines that do not apply, then delete this comment.",
-    placeholder: "languages, runtimes, package manager, and the install/build/test/run commands"
-  },
-  architecture: {
-    title: "Architecture & Layout",
-    prompt: "Map this repository. List each top-level source directory and what it holds, the entry point(s), the 3-5 files a newcomer reads first, and how data/requests flow between the main layers. View the real tree (e.g. `git ls-files | sed 's#/.*##' | sort -u`) \u2014 do not assume a framework's conventional layout. Flag any generated/vendored directories that must never be hand-edited. If this is a single small module, say so in one line. Delete this comment when done.",
-    placeholder: "where things live, the entry points, and how data flows between layers"
-  },
-  "installed-assets": {
-    title: "Installed Harness Assets",
-    prompt: "List the harness assets installed in this project (rules / skills / agents / commands) and add one line each on when to reach for it here. Verify against the harness folders this CLI reads (.claude/rules/ \xB7 .claude/skills/ \xB7 .claude/agents/ for Claude Code; AGENTS.md \xA7 Harness Rules \xB7 .agents/skills/ for Codex and OpenCode; .agents/rules/ \xB7 .agents/skills/ for Antigravity) and list ONLY assets whose file exists on disk \u2014 do not invent any. Do NOT restate the harness's working principles (they live in this project's harness anchor and rules layer) \u2014 cross-reference them instead. Delete this comment when done.",
-    placeholder: "the installed rules/skills/agents/commands and when to use each"
-  },
-  boundaries: {
-    title: "Boundaries \u2014 Always / Ask First / Never",
-    prompt: `Fill the Always / Ask First / Never lists with this repo's real red lines. Read the CI config, CODEOWNERS, .gitignore, and release/deploy scripts. Never must include secrets, generated files, force-push, and direct commits to the default branch, plus any repo-specific "do not touch" directories. Every entry must be specific and enforceable here. Delete this comment when done.`,
-    placeholder: "what to always do, ask before doing, and never do in this repo"
-  },
-  verify: {
-    title: "Verification Gate",
-    prompt: 'State the single command (or short sequence) that PROVES a change is safe here \u2014 the test/lint/typecheck/build gate you run before committing \u2014 plus the coverage/CI threshold and what "done" means. Sources: package scripts, CI workflow files, CONTRIBUTING. An agent must be able to self-verify without guessing. Delete this comment when done.',
-    placeholder: "the single command that proves a change is safe, and the done bar"
-  }
-};
-function anchorLine(surface) {
-  if (surface === "claude") {
-    return `> The working principles live in this project's harness anchor \`${HARNESS_ANCHOR_FILE}\`, imported at the bottom of this file. Everything above that import is **project-specific context only**.`;
-  }
-  return `> **This file (\`AGENTS.md\`) is the harness anchor** \u2014 it carries the working principles in full, further down. Only the \`## \u2026\` sections immediately below are project-specific context for you to fill in.`;
-}
-function scaffoldBanner(surface) {
-  return [
-    "> \u2699\uFE0F **SCAFFOLD \u2014 not filled in yet.** The sections below are a fill-in template for THIS project, not verified facts.",
-    "> To fill: open this file and paste each `<!-- FILL: \u2026 -->` comment's instruction into your coding agent (e.g. Claude Code) \u2014 it will inspect the real repo and write the section. You can also fill them by hand; the comments are the instructions.",
-    anchorLine(surface)
-  ].join("\n");
-}
-function renderFillScaffold(surface = "claude") {
-  const blocks = FILL_SECTIONS.map((id) => {
-    const spec = FILL_SPECS[id];
-    return `## ${spec.title}
-
-<!-- FILL:${id} \u2014 ${spec.prompt} -->
-
-_(not filled yet \u2014 ${spec.placeholder})_`;
-  });
-  return `${scaffoldBanner(surface)}
-
-${blocks.join("\n\n")}`;
-}
-var SCAFFOLD_MARK = "SCAFFOLD \u2014 not filled in yet";
-var TRACK_NOTE_MARK = "Active track(s):";
-function dropHarnessQuoteBlocks(lines) {
-  const out = [];
-  let i = 0;
-  while (i < lines.length) {
-    if (!(lines[i] ?? "").trim().startsWith(">")) {
-      out.push(lines[i] ?? "");
-      i += 1;
-      continue;
-    }
-    let end = i;
-    while (end < lines.length && (lines[end] ?? "").trim().startsWith(">")) end++;
-    const run = lines.slice(i, end);
-    const text = run.join("\n");
-    if (!text.includes(SCAFFOLD_MARK) && !text.includes(TRACK_NOTE_MARK)) out.push(...run);
-    i = end;
-  }
-  return out;
-}
-function continuousNoteEnd(lines, headingAt) {
-  let i = headingAt + 1;
-  while (i < lines.length) {
-    const l = (lines[i] ?? "").replace(/\r$/, "").trim();
-    const isNote = l === "" || l.startsWith("- `") || l.startsWith("These installed skills apply");
-    if (!isNote) break;
-    i++;
-  }
-  return i;
-}
-function dropContinuousSkillsNote(lines) {
-  const at = lines.findIndex((l) => l.replace(/\r$/, "").trim() === CONTINUOUS_SKILLS_HEADING);
-  if (at === -1) return [...lines];
-  return [...lines.slice(0, at), ...lines.slice(continuousNoteEnd(lines, at))];
-}
-function dropFillComments(lines) {
-  const out = [];
-  let inFill = false;
-  for (const line of lines) {
-    if (!inFill && line.trim().startsWith("<!-- FILL:")) inFill = true;
-    if (inFill) {
-      if (line.includes("-->")) inFill = false;
-      continue;
-    }
-    out.push(line);
-  }
-  return out;
-}
-function scaffoldComparable(lines) {
-  return dropFillComments(dropContinuousSkillsNote(dropHarnessQuoteBlocks(lines))).map((l) => l.replace(/\r$/, "").trimEnd()).filter((l) => l.trim() !== "");
-}
-function isUnfilledScaffold(body) {
-  const pristine = scaffoldComparable(renderFillScaffold("agents-md").split("\n"));
-  return scaffoldComparable(body).join("\n") === pristine.join("\n");
-}
-function mergeProjectClaude(opts) {
-  const expanded = expandTracks(opts.tracks);
-  const trackList = expanded.map((t) => TRACK_DISPLAY_NAMES[t]).join(", ");
-  const header = `# ${opts.projectName}
-
-> Active track(s): ${trackList}`;
-  return `${header}
-
-${opts.projectContext ?? renderFillScaffold()}
-`;
-}
-function upsertHarnessImport(existing, opts) {
-  const block = importBlock(opts.continuousSkills ?? []);
-  if (existing === null) {
-    return `${mergeProjectClaude(opts)}
-${block}
-`;
-  }
-  const start = existing.indexOf(IMPORT_MARKER_START);
-  if (start !== -1) {
-    const endAt = existing.indexOf(IMPORT_MARKER_END, start);
-    if (endAt === -1) return existing;
-    const current = existing.slice(start, endAt + IMPORT_MARKER_END.length);
-    if (current === block) return existing;
-    return `${existing.slice(0, start)}${block}${existing.slice(endAt + IMPORT_MARKER_END.length)}`;
-  }
-  if (hasHarnessImport(existing)) {
-    return existing;
-  }
-  const body = existing.endsWith("\n") ? existing : `${existing}
-`;
-  return `${body}
-${block}
-`;
-}
-function stripHarnessImport(text) {
-  if (!text.includes(IMPORT_MARKER_START) && !text.includes(IMPORT_MARKER_END)) return null;
-  const endsWithNewline = text.endsWith("\n");
-  const out = [];
-  const lines = text.split("\n");
-  let i = 0;
-  while (i < lines.length) {
-    const line = lines[i] ?? "";
-    if (line.includes(IMPORT_MARKER_START)) {
-      let j = i;
-      while (j < lines.length && !(lines[j] ?? "").includes(IMPORT_MARKER_END)) j++;
-      i = j < lines.length ? j + 1 : i + 1;
-      if (out.length > 0 && out[out.length - 1] === "") out.pop();
-      continue;
-    }
-    if (line.includes(IMPORT_MARKER_END) || line.trim() === HARNESS_IMPORT_LINE) {
-      i++;
-      continue;
-    }
-    out.push(line);
-    i++;
-  }
-  let result = out.join("\n");
-  if (endsWithNewline && result !== "" && !result.endsWith("\n")) result += "\n";
-  if (!endsWithNewline && result.endsWith("\n")) result = result.slice(0, -1);
-  return result === text ? null : result;
-}
-function hasHarnessImport(text) {
-  if (text.includes(IMPORT_MARKER_START)) return true;
-  let inFence = false;
-  for (const line of text.split("\n")) {
-    if (/^\s*(?:```|~~~)/.test(line)) {
-      inFence = !inFence;
-      continue;
-    }
-    if (!inFence && line.trim() === HARNESS_IMPORT_LINE) return true;
-  }
-  return false;
-}
-function expandTracks(tracks) {
-  if (tracks.includes("full")) {
-    return FULL_EXPANSION;
-  }
-  return tracks;
-}
-
-// src/manifest.ts
-function buildAssetSpec(ctx) {
-  return {
-    tracks: ctx.tracks,
-    withTauri: isAssetSelected("tauri-desktop", ctx),
-    // v26.87.0 — internal bundled skills (dev-method + opt-in advisors, v26.95.0). id 별 condition
-    // (has-dev-track vs opt-in)은 isAssetSelected 가 적용한다.
-    selectedInternalSkills: INTERNAL_BUNDLED_SKILL_IDS.filter((id) => isAssetSelected(id, ctx))
-  };
-}
-var all = () => true;
-var dev = (s) => hasDevTrack(s.tracks);
-var onTracks = (pattern) => (s) => anyTrack(s.tracks, pattern);
-var COMMON_RULES = ["git-policy", "change-management", "doc-governance"];
-var DEV_RULES = ["test-policy", "ship-checklist"];
-var UI_RULES = ["ui-components"];
-var REACT_UI_TRACKS = "csr-*|ssr-nextjs|full";
-var TRACK_RULES = {
-  base: [],
-  // #456 — 공통 룰만. cli-development 는 tooling·full 전용
-  "csr-supabase": [],
-  "csr-fastify": [],
-  "csr-fastapi": [],
-  // #820 — htmx 화면 기술(Tailwind v4 + daisyUI)과 그 스택에서 실제로 도는 린트. 백엔드마다 템플릿 형식이
-  //   달라 린트가 갈린다(Jinja = ast-grep · 서버 JSX = @shadcn/lint) — 실측 = `docs/plans/820-spike/`. `full` 은 아래.
-  "ssr-htmx": ["htmx-fastapi-ui"],
-  "ssr-htmx-fastify": ["htmx-fastify-ui"],
-  "ssr-nextjs": [],
-  data: [],
-  executive: [],
-  tooling: ["cli-development"],
-  // #820 — htmx 룰 둘은 `full` 에 넣지 않는다. OpenCode 가 섞인 설치는 룰을 AGENTS.md 본문에 인라인하는데, full 의 렌더가
-  //   Antigravity 상한(24,000 B)을 넘는다(22,322 → 24,455 B, `agents-md-size-budget`). htmx 를 쓰면 그 트랙을 함께 고른다.
-  full: ["cli-development"],
-  // v0.5.0 — executive-style baselines (no dev rules; common rules only).
-  "project-management": [],
-  "growth-marketing": []
-};
-function resolveRules(spec) {
-  const set = new Set(COMMON_RULES);
-  if (hasDevTrack(spec.tracks)) {
-    for (const r of DEV_RULES) {
-      set.add(r);
-    }
-  }
-  if (anyTrack(spec.tracks, REACT_UI_TRACKS)) {
-    for (const r of UI_RULES) {
-      set.add(r);
-    }
-  }
-  for (const t of spec.tracks) {
-    for (const r of TRACK_RULES[t]) {
-      set.add(r);
-    }
-  }
-  return [...set].sort();
-}
-var ALL_RULES = resolveRules({ tracks: [...TRACKS] });
-var CORE_AGENTS = ["reviewer"];
-var DEV_AGENTS = ["implementer"];
-var TRACK_AGENTS = [
-  ["data-analyst", "data|full"],
-  ["strategist", "executive|full"]
-];
-var RETIRED_AGENTS = [
-  { id: "code-reviewer", instead: "Claude Code \uC758 `/code-review` \uAC00 \uAC19\uC740 \uC77C\uC744 \uD55C\uB2E4" },
-  { id: "security-reviewer", instead: "Claude Code \uC758 `/security-review` \uAC00 \uAC19\uC740 \uC77C\uC744 \uD55C\uB2E4" },
-  // ADR-090 (#452) — spawn 0 · 결함만 관측된 세 종. **대안을 종마다 적는다**: 한 문구로 뭉치면
-  // 자기 에이전트와 상관없는 대안을 읽게 되고, 그건 "대신 쓸 것을 말한다"의 뜻을 잃는다.
-  { id: "plan-checker", instead: "`reviewer` \uAC00 \uACC4\uD68D \uBB38\uC11C\uB3C4 \uAC19\uC740 \uACC4\uC57D\uC73C\uB85C \uAC80\uD1A0\uD55C\uB2E4" },
-  { id: "silent-failure-hunter", instead: "Claude Code \uC758 `/code-review` \uAC00 \uAC19\uC740 \uC77C\uC744 \uD55C\uB2E4" },
-  { id: "build-error-resolver", instead: "\uBAA8\uB378\uC774 \uAE30\uBCF8\uC73C\uB85C \uD558\uB294 \uC77C\uC774\uB77C \uB300\uCCB4 \uC790\uC0B0\uC774 \uC5C6\uB2E4" }
-];
-var RETIRED_PATHS = [
-  // rules (23)
-  "rules/api-contract.md",
-  "rules/benchmark-parity.md",
-  "rules/code-style.md",
-  "rules/commit-policy.md",
-  "rules/data-analysis.md",
-  "rules/database.md",
-  "rules/design-workflow.md",
-  "rules/ecc-git-workflow.md",
-  "rules/ecc-performance-common.md",
-  "rules/ecc-security-common.md",
-  "rules/ecc-testing.md",
-  "rules/error-handling.md",
-  "rules/gates-taxonomy.md",
-  "rules/gsd-planner-antipatterns.md",
-  "rules/htmx.md",
-  "rules/model-routing.md",
-  "rules/nextjs.md",
-  "rules/no-false-ship.md",
-  "rules/playwright-launch.md",
-  "rules/pyside6.md",
-  "rules/seo.md",
-  "rules/shadcn.md",
-  "rules/tauri.md",
-  // agents (5)
-  "agents/build-error-resolver.md",
-  "agents/code-reviewer.md",
-  "agents/plan-checker.md",
-  "agents/security-reviewer.md",
-  "agents/silent-failure-hunter.md",
-  // commands/uzys (7)
-  "commands/uzys/auto.md",
-  "commands/uzys/build.md",
-  "commands/uzys/plan.md",
-  "commands/uzys/review.md",
-  "commands/uzys/ship.md",
-  "commands/uzys/spec.md",
-  "commands/uzys/test.md",
-  // hooks (10)
-  "hooks/agentshield-gate.sh",
-  "hooks/checkpoint-snapshot.sh",
-  "hooks/codebase-map.sh",
-  "hooks/gate-check.sh",
-  "hooks/hito-counter.sh",
-  "hooks/karpathy-gate.sh",
-  "hooks/mcp-pre-exec.sh",
-  "hooks/spec-drift-check.sh",
-  "hooks/task-brief-nudge.sh",
-  "hooks/uncommitted-check.sh"
-];
-var RETIRED_HOOK_WIRING_REFS = [
-  // 6617766 (2026-04-14, phase4b) 배선 → c8fdef1 (2026-05-03, CL-v2 observer 중복 fire 제거) 제거.
-  // PreToolUse · PostToolUse 각각 matcher "*" 묶음 하나 — `observe.sh pre|post`, async.
-  "skills/continuous-learning-v2/hooks/observe.sh",
-  // 5defc58 (2026-04-14, wire strategic-compact) 배선 → a125453 (2026-09-13, #444 스킬 3종 은퇴) 제거.
-  // PreToolUse 의 protect-files 묶음 안 두 번째 핸들러, async.
-  "skills/strategic-compact/suggest-compact.sh"
-];
-var RETIRED_AGENT_IDS = RETIRED_PATHS.filter(
-  (p) => p.startsWith("agents/")
-).map((p) => p.slice("agents/".length).replace(/\.md$/, ""));
-var ALWAYS_HOOKS = ["session-start.sh", "protect-files.sh"];
-var COMMON_SKILL_DIRS = [];
-var DEV_SKILL_DIRS = [];
-function isCliNeutralTarget(target) {
-  return target.startsWith(`${INSTALL_LOG_DIR}/`);
-}
-function buildManifest(spec) {
-  const m = [];
-  for (const r of resolveRules(spec)) {
-    m.push({
-      source: `rules/${r}.md`,
-      target: `.claude/rules/${r}.md`,
-      type: "file",
-      applies: all
-    });
-  }
-  m.push({
-    source: "CLAUDE.md",
-    target: HARNESS_ANCHOR_FILE,
-    type: "file",
-    applies: all
-  });
-  m.push({
-    source: "scripts/protect-branch.sh",
-    target: ".uzys-agent-harness/protect-branch.sh",
-    type: "file",
-    applies: all
-  });
-  m.push({
-    source: "scripts/spec-drift-check.sh",
-    target: ".uzys-agent-harness/spec-drift-check.sh",
-    type: "file",
-    applies: all
-  });
-  m.push({
-    source: "scripts/check-absence.sh",
-    target: ".uzys-agent-harness/check-absence.sh",
-    type: "file",
-    applies: all
-  });
-  for (const a of CORE_AGENTS) {
-    m.push({
-      source: `agents/${a}.md`,
-      target: `.claude/agents/${a}.md`,
-      type: "file",
-      applies: all
-    });
-  }
-  for (const a of DEV_AGENTS) {
-    m.push({
-      source: `agents/${a}.md`,
-      target: `.claude/agents/${a}.md`,
-      type: "file",
-      applies: dev
-    });
-  }
-  for (const [a, pattern] of TRACK_AGENTS) {
-    m.push({
-      source: `agents/${a}.md`,
-      target: `.claude/agents/${a}.md`,
-      type: "file",
-      applies: onTracks(pattern)
-    });
-  }
-  for (const sd of COMMON_SKILL_DIRS) {
-    m.push({
-      source: `skills/${sd}`,
-      target: `.claude/skills/${sd}`,
-      type: "dir",
-      applies: all
-    });
-  }
-  for (const sd of INTERNAL_BUNDLED_SKILL_IDS) {
-    m.push({
-      source: `skills/${sd}`,
-      target: `.claude/skills/${sd}`,
-      type: "dir",
-      // #602 — selectedInternalSkills 가 SSOT(위저드 해제·--without 반영). `tracks` 만 담긴
-      // 스펙(listBaselineTargets·위저드 1단계 등)에서는 카탈로그 조건으로 판정한다 —
-      // buildAssetSpec 와 같은 isAssetSelected 라 두 번 적는 사본이 아니라 같은 원천이다.
-      applies: (s) => s.selectedInternalSkills !== void 0 ? s.selectedInternalSkills.includes(sd) : (
-        // #602 폴백은 트랙 추종 번들 스킬 한정 — 카탈로그 옵트인(compaction-handoff 등)은
-        // 선택 목록 없이는 깔리지 않는다(위저드 해제·--without 의 SSOT 를 우회하는 금이 된다).
-        sd === "ui-visual-review" && isAssetSelected(sd, { tracks: s.tracks, options: { withCodexTrust: false } })
-      )
-    });
-  }
-  for (const sd of DEV_SKILL_DIRS) {
-    m.push({
-      source: `skills/${sd}`,
-      target: `.claude/skills/${sd}`,
-      type: "dir",
-      applies: dev
-    });
-  }
-  for (const h of ALWAYS_HOOKS) {
-    m.push({
-      source: `hooks/${h}`,
-      target: `.claude/hooks/${h}`,
-      type: "file",
-      applies: all
-    });
-  }
-  m.push({
-    source: "settings.json",
-    target: ".claude/settings.json",
-    type: "file",
-    applies: all
-  });
-  return m;
-}
-
-// src/context-cost.ts
-init_esm_shims();
-import { existsSync as existsSync3, readFileSync as readFileSync4 } from "fs";
-import { join as join5, resolve as resolve2 } from "path";
-import { fileURLToPath as fileURLToPath2 } from "url";
-var CHARS_PER_TOKEN = 4;
-function estimateTokens(chars) {
-  return Math.ceil(chars / CHARS_PER_TOKEN);
-}
-function resolveBundleRoot() {
-  return resolve2(fileURLToPath2(new URL(".", import.meta.url)), "..");
-}
-function extractFrontmatter(content) {
-  const m = content.match(/^?---\r?\n([\s\S]*?)\r?\n---/);
-  return m?.[1] ?? null;
-}
-function assetDescriptorTokens(assetId, root = resolveBundleRoot()) {
-  const asset = EXTERNAL_ASSETS.find((a) => a.id === assetId);
-  if (!asset || asset.method.kind !== "internal") return null;
-  const skillMd = join5(root, "templates", "skills", asset.method.key, "SKILL.md");
-  if (!existsSync3(skillMd)) return null;
-  const fm = extractFrontmatter(readFileSync4(skillMd, "utf8"));
-  return fm === null ? null : estimateTokens(fm.length);
-}
-function assetBodyTokens(assetId, root = resolveBundleRoot()) {
-  const asset = EXTERNAL_ASSETS.find((a) => a.id === assetId);
-  if (!asset || asset.method.kind !== "internal") return null;
-  const skillMd = join5(root, "templates", "skills", asset.method.key, "SKILL.md");
-  if (!existsSync3(skillMd)) return null;
-  const content = readFileSync4(skillMd, "utf8");
-  const fm = extractFrontmatter(content);
-  if (fm === null) return estimateTokens(content.length);
-  const close = content.indexOf("\n---", content.indexOf(fm) + fm.length);
-  const body = close === -1 ? "" : content.slice(close + "\n---".length);
-  return estimateTokens(body.trim().length);
-}
-function assetCostRows(assetIds, root = resolveBundleRoot()) {
-  return assetIds.map((id) => ({
-    id,
-    descriptorTokens: assetDescriptorTokens(id, root),
-    bodyTokens: assetBodyTokens(id, root)
-  })).sort((a, b) => (b.bodyTokens ?? -1) - (a.bodyTokens ?? -1));
-}
-function makeResidentCost(base) {
-  return {
-    ...base,
-    contextFile: base.contextFile ?? "CLAUDE.md",
-    perSkillDescriptor: base.perSkillDescriptor ?? {},
-    total: base.rules + base.projectClaudeMd + base.skillDescriptors + base.agentDescriptors,
-    directive: {
-      items: base.items.rules + base.items.claudeMd,
-      tokens: base.rules + base.projectClaudeMd
-    },
-    firing: {
-      items: base.items.skills + base.items.agents,
-      tokens: base.skillDescriptors + base.agentDescriptors
-    }
-  };
-}
-function fileTokens(path2) {
-  return existsSync3(path2) ? estimateTokens(readFileSync4(path2, "utf8").trim().length) : 0;
-}
-function descriptorTokens(path2) {
-  if (!existsSync3(path2)) return 0;
-  const fm = extractFrontmatter(readFileSync4(path2, "utf8"));
-  return fm === null ? 0 : estimateTokens(fm.length);
-}
-function anchorSurface(cli) {
-  if (cli.includes("claude") || cli.length === 0) {
-    return { label: "CLAUDE.md", files: 2, scaffold: "claude" };
-  }
-  return { label: "AGENTS.md", files: 1, scaffold: "agents-md" };
-}
-function residentCost(entries, root = resolveBundleRoot(), cli = ["claude"], contextFiles) {
-  const tpl = (source) => join5(root, "templates", source);
-  const measured = (e) => e.file ?? tpl(e.source);
-  const perSkill = {};
-  let rules = 0;
-  let skillDescriptors = 0;
-  let agentDescriptors = 0;
-  let ruleItems = 0;
-  let skillItems = 0;
-  let agentItems = 0;
-  for (const e of entries) {
-    if (e.target.startsWith(".claude/rules/")) {
-      rules += fileTokens(measured(e));
-      ruleItems += 1;
-    } else if (e.target.startsWith(".claude/agents/")) {
-      agentDescriptors += descriptorTokens(measured(e));
-      agentItems += 1;
-    } else if (e.target.startsWith(".claude/skills/")) {
-      const t = descriptorTokens(join5(measured(e), "SKILL.md"));
-      skillDescriptors += t;
-      skillItems += 1;
-      const id = /\.claude\/skills\/([^/]+)/.exec(e.target)?.[1];
-      if (id !== void 0) perSkill[id] = (perSkill[id] ?? 0) + t;
-    }
-  }
-  const harnessAnchor = fileTokens(join5(root, "templates", "CLAUDE.md"));
-  const surface = anchorSurface(cli);
-  const projectScaffold = estimateTokens(
-    withContinuousSkillsNote(
-      renderFillScaffold(surface.scaffold),
-      CONTINUOUS_SKILLS.map((s) => s.id)
-    ).trim().length
-  );
-  const onDisk = contextFiles?.map((f) => typeof f === "string" ? fileTokens(f) : estimateTokens(f.text.trim().length)).filter((t) => t > 0);
-  const projectClaudeMd = onDisk === void 0 ? harnessAnchor + projectScaffold : onDisk.reduce((a, b) => a + b, 0);
-  const claudeMdItems = onDisk !== void 0 ? onDisk.length : surface.files === 1 ? 1 : (harnessAnchor > 0 ? 1 : 0) + (projectScaffold > 0 ? 1 : 0);
-  return makeResidentCost({
-    rules,
-    projectClaudeMd,
-    skillDescriptors,
-    agentDescriptors,
-    perSkillDescriptor: perSkill,
-    contextFile: surface.label,
-    items: {
-      rules: ruleItems,
-      skills: skillItems,
-      agents: agentItems,
-      claudeMd: claudeMdItems,
-      total: ruleItems + skillItems + agentItems + claudeMdItems
-    }
-  });
-}
-function summarizeContextCost(assetIds, root = resolveBundleRoot()) {
-  let measuredTokens = 0;
-  let measuredCount = 0;
-  let unmeasuredCount = 0;
-  for (const id of assetIds) {
-    const tokens = assetDescriptorTokens(id, root);
-    if (tokens === null) unmeasuredCount += 1;
-    else {
-      measuredTokens += tokens;
-      measuredCount += 1;
-    }
-  }
-  return { measuredTokens, measuredCount, unmeasuredCount };
-}
-function formatResidentCostLine(r, unmeasuredCount) {
-  if (r.total === 0) return null;
-  const rules = r.rulesInline ? `rules ${r.items.rules} inside ${r.contextFile}${r.rulesInline === "planned" ? " (planned count)" : ""}` : `rules ${r.items.rules} ~${r.rules}`;
-  const note = r.contextNote ? ` ${r.contextNote}` : "";
-  const parts = [
-    `directives ${r.directive.items} ~${r.directive.tokens}`,
-    `[${rules} \xB7 ${r.contextFile} ${r.items.claudeMd} ~${r.projectClaudeMd}${note}]`,
-    `triggers ${r.firing.items} ~${r.firing.tokens}`,
-    `[skills ${r.items.skills} ~${r.skillDescriptors} \xB7 agents ${r.items.agents} ~${r.agentDescriptors}]`
-  ].join(" \xB7 ");
-  const external = unmeasuredCount > 0 ? ` \xB7 ${unmeasuredCount} external asset${unmeasuredCount === 1 ? "" : "s"} unmeasured` : "";
-  return `session-start context cost: ${r.items.total} items resident \xB7 ~${r.total} tokens/session (${parts}${external})`;
-}
-var RESIDENT_ROWS = [
-  {
-    // ADR-083 — 축 소계를 **행으로** 낸다. 소계가 없으면 읽는 사람이 네 줄을 머리로 더해야
-    // 하고, 그러면 "무엇을 줄여야 하나"가 표에서 안 보인다.
-    label: "\uC9C0\uC2DC\uBB38",
-    gap: 13,
-    count: (r) => r.directive.items,
-    tokens: (r) => r.directive.tokens
-  },
-  { label: "  rules", gap: 12, count: (r) => r.items.rules, tokens: (r) => r.rules },
-  {
-    // 한 행에 두 파일(앵커 + 스캐폴드). 개수 열이 2 를 뱉어 그 사실을 드러낸다 — 라벨로
-    // 하나만 이름 붙이면 v26.140.0 이전과 같은 거짓 라벨이 된다.
-    label: "  CLAUDE.md",
-    gap: 8,
-    count: (r) => r.items.claudeMd,
-    tokens: (r) => r.projectClaudeMd
-  },
-  {
-    label: "\uBC1C\uD654 \uD45C\uBA74",
-    gap: 10,
-    count: (r) => r.firing.items,
-    tokens: (r) => r.firing.tokens
-  },
-  {
-    label: "  skill descriptors",
-    gap: 0,
-    count: (r) => r.items.skills,
-    tokens: (r) => r.skillDescriptors
-  },
-  {
-    label: "  agent descriptors",
-    gap: 0,
-    count: (r) => r.items.agents,
-    tokens: (r) => r.agentDescriptors
-  }
-];
-function formatResidentCostBlock(r) {
-  const n = (v) => String(v).padStart(3);
-  return [
-    "                       \uAC1C\uC218    \uD1A0\uD070",
-    ...RESIDENT_ROWS.map(
-      (row) => `  ${row.label}${" ".repeat(row.gap)}${n(row.count(r))}\uAC1C  ~${row.tokens(r)}`
-    ),
-    "  \u2500\u2500\u2500\u2500\u2500\u2500\u2500\u2500\u2500\u2500\u2500\u2500\u2500\u2500\u2500\u2500\u2500\u2500\u2500\u2500\u2500\u2500\u2500\u2500\u2500\u2500\u2500\u2500\u2500\u2500\u2500\u2500\u2500",
-    `  \uC0C1\uC8FC \uD569\uACC4          ${n(r.items.total)}\uAC1C \uC0C1\uC8FC \xB7 ~${r.total} tokens/\uC138\uC158`,
-    "",
-    "  \uC9C0\uC2DC\uBB38 = \uC6B0\uB9AC\uAC00 \uD56D\uC0C1 \uC77D\uD788\uAC8C \uB123\uC740 \uAC83. **\uC791\uC744\uC218\uB85D \uC88B\uC740 \uAC12\uC774 \uC544\uB2C8\uB2E4** \u2014 \uD310\uB2E8\uC740",
-    "           '\uBD88\uD544\uC694\uD55C \uC9C0\uC2DC\uBB38\uC774 \uC788\uB098'\uB85C \uD55C\uB2E4. ratchet \uC740 \uC870\uC6A9\uD55C \uC99D\uAC00\uB9CC \uB9C9\uB294\uB2E4.",
-    "  \uBC1C\uD654 \uD45C\uBA74 = \uC2A4\uD0AC\xB7\uC5D0\uC774\uC804\uD2B8\uAC00 \uBD88\uB9AC\uB824\uACE0 \uC0C1\uC8FC\uC2DC\uD0A4\uB294 descriptor. \uAE4E\uC73C\uBA74 \uC548 \uBD88\uB9B0\uB2E4."
-  ];
-}
-
-// src/categories.ts
-init_esm_shims();
-var CATEGORIES = [
-  "frontend",
-  "backend",
-  "data",
-  "business",
-  "dev-tools",
-  "understanding",
-  "visual-media",
-  "workflow"
-];
-var CATEGORY_TITLES = {
-  frontend: "\u{1F3A8} Frontend (UI \xB7 Design)",
-  backend: "\u{1F5C4}\uFE0F  Backend (API \xB7 DB \xB7 Deploy)",
-  data: "\u{1F4CA} Data",
-  business: "\u{1F4BC} Business (Documents)",
-  "dev-tools": "\u{1F6E1}\uFE0F  Dev Tools (Security \xB7 Quality)",
-  // v26.78.0 — 에이전트 인지 증강: 환경에 대한 지각(영상·웹·코드) + 기억(memory).
-  understanding: "\u{1F9E0} Understanding (Perception \xB7 Memory)",
-  // v26.85.0 — 코드-퍼스트 비주얼/미디어 제작: 슬라이드·다이어그램·모션·동영상.
-  "visual-media": "\u{1F3AC} Visual & Media (Slides \xB7 Diagrams \xB7 Motion \xB7 Video)",
-  workflow: "\u{1F504} Workflow (Development Cycle)"
-};
-
-export {
-  __commonJS,
-  __toESM,
-  init_esm_shims,
-  package_default,
-  SHARED_FILES,
-  isKeyId,
-  sharedPathOfKeyId,
-  TRACKS,
-  isTrack,
-  CLI_BASES,
-  isCliBase,
-  isInstallScope,
-  resolveScope,
-  DEFAULT_OPTIONS,
-  UPDATE_GROUPS,
-  CLI_BASE_SORT_ORDER,
-  CLI_DISPLAY_NAMES,
-  parseCliTargets,
-  targetsInclude,
-  anyTrack,
-  hasUiTrack,
-  EXTERNAL_ASSETS,
-  REMOVED_CATALOG_ASSETS,
-  DEV_METHOD_SKILL_IDS,
-  INTERNAL_BUNDLED_SKILL_IDS,
-  CONTINUOUS_SKILLS,
-  RENAMED_SKILL_IDS,
-  RETIRED_SKILL_IDS,
-  TRUST_TIER,
-  assetTrustTier,
-  shouldInstallAsset,
-  isAssetSelected,
-  experimentalOptInCandidates,
-  assetCliSupport,
-  assetReachesCli,
-  filterApplicableAssets,
-  isOutsideProject,
-  outsideProjectTarget,
-  outsideLinkAt,
-  createOutsideGuard,
-  mergeOutside,
-  ensureDir,
-  copyFile,
-  backupFile,
-  backupFromCopy,
-  claimBackupDir,
-  backupOriginal,
-  listFilesRecursive,
-  PROJECT_SKELETON_DIRS,
-  ensureProjectSkeleton,
-  backupIfLossyUtf8,
-  HARNESS_ANCHOR_FILE,
-  HARNESS_IMPORT_LINE,
-  CONTINUOUS_SKILLS_HEADING,
-  renderContinuousSkillsNote,
-  scaffoldBanner,
-  renderFillScaffold,
-  dropHarnessQuoteBlocks,
-  continuousNoteEnd,
-  dropContinuousSkillsNote,
-  isUnfilledScaffold,
-  upsertHarnessImport,
-  stripHarnessImport,
-  buildAssetSpec,
-  resolveRules,
-  TRACK_AGENTS,
-  RETIRED_AGENTS,
-  RETIRED_PATHS,
-  RETIRED_HOOK_WIRING_REFS,
-  RETIRED_AGENT_IDS,
-  isCliNeutralTarget,
-  buildManifest,
-  memoTargets,
-  claudeTargets,
-  claudeRecorded,
-  INSTALL_LOG_FILENAME,
-  INSTALL_LOG_DIR,
-  LEGACY_INSTALL_LOG_DIR,
-  POLICY_DIRS,
-  installedClis,
-  buildAssetEntries,
-  buildInstallLog,
-  mergeRootFiles,
-  hashContent,
-  mergeExternalFiles,
-  writeInstallLog,
-  readInstallLog,
-  readInstallLogStatus,
-  legacyDroppedKeys,
-  legacyReleasedCatalog,
-  HARNESS_VERSION,
-  appendSelection,
-  corruptedInstallLogMessage,
-  installLogPath,
-  legacyInstallLogPath,
-  estimateTokens,
-  resolveBundleRoot,
-  extractFrontmatter,
-  assetCostRows,
-  makeResidentCost,
-  anchorSurface,
-  residentCost,
-  summarizeContextCost,
-  formatResidentCostLine,
-  formatResidentCostBlock,
-  CATEGORIES,
-  CATEGORY_TITLES
-};
-//# sourceMappingURL=chunk-LAWKDFKZ.js.map