@uzysjung/agent-harness 26.83.0 → 26.84.0

package/README.ko.md

@@ -226,7 +226,7 @@ Flag:
 
 ```
 ┌──────────────────────────────────────────────────────────┐
-│  npx agent-harness                                      │
+│  npx -y @uzysjung/agent-harness                         │
 │         │                                                │
 │         ▼                                                │
 │  ┌─ 6-step wizard ──────────────────────────────────┐    │

package/README.md

@@ -1,8 +1,8 @@
 # uzys-agent-harness
 
-**Track-based agent harness for Claude Code, Codex, OpenCode, and Antigravity.**
+**Install only the AI-coding workflows your tech stack actually needs — vetted, curated, and set up with one command across Claude Code, Codex, OpenCode & Antigravity.**
 
-Pick a stack track. Get a curated set of **vetted** skills, plugins, and rules — you review and choose what installs — wired into your project. Project scope by default; no global pollution unless you ask.
+Coding agents keep getting stronger out of the box — piling on skills and MCPs you'll never use just bloats their context. And the awesome-lists have too many options to wade through. `agent-harness` curates by **tech stack**: of the vetted options, you install only what this project actually calls for. **Claude Code is first-class; Codex / OpenCode / Antigravity get the skills + rules layer.** Project scope by default — no global pollution unless you ask.
 
 [![License](https://img.shields.io/badge/license-MIT-blue.svg)](LICENSE)
 [![Version](https://img.shields.io/github/v/tag/uzysjung/uzys-agent-harness?label=version)](https://github.com/uzysjung/uzys-agent-harness/releases)
@@ -10,6 +10,8 @@ Pick a stack track. Get a curated set of **vetted** skills, plugins, and rules
 
 ![agent-harness demo — one-command install of vetted AI-coding workflows](https://raw.githubusercontent.com/uzysjung/uzys-agent-harness/main/docs/assets/agent-harness-demo.gif)
 
+> **What "vetted" means** — ≥ 1000 GitHub stars + active maintenance + a Docker install-verification run, re-checked by CI ([catalog-verify](docs/COMPATIBILITY.md), [trust-tier-drift](.github/workflows/)). It is **not** a line-by-line security audit or a prompt-injection scan of asset contents. Treat installed assets like any third-party dependency — see [SECURITY.md](SECURITY.md).
+
 🇰🇷 [한국어](./README.ko.md)
 
 ---
@@ -59,6 +61,21 @@ npx -y @uzysjung/agent-harness install \
 
 ---
 
+## Installing into an existing project
+
+`agent-harness` never silently overwrites your config. Before replacing an **editable** file whose contents differ, it writes a timestamped backup next to it — and every backup path is printed in the install summary (`backup` rows). Nothing is deleted.
+
+| You already have… | What happens |
+|---|---|
+| `.claude/settings.json` with your own hooks / statusLine | Backed up to `settings.json.backup-<ts>` before update |
+| Root `CLAUDE.md` (yours differs from the generated one) | Backed up to `CLAUDE.md.backup-<ts>` before the merge write |
+| `.claude/` on `--reinstall` / `update` mode | The whole directory is renamed to `.claude.backup-<ts>` first |
+| `.mcp.json` | Your existing MCP servers are preserved and merged, not replaced |
+
+> Fresh project? None of this triggers — backups only protect pre-existing files.
+
+---
+
 ## Tracks
 
 Pick one or more at step 1. Each track determines which skills/plugins/rules are pre-checked in step 3.
@@ -253,7 +270,7 @@ Flags:
 
 ```
 ┌──────────────────────────────────────────────────────────┐
-│  npx agent-harness                                      │
+│  npx -y @uzysjung/agent-harness                         │
 │         │                                                │
 │         ▼                                                │
 │  ┌─ 6-step wizard ──────────────────────────────────┐    │
@@ -277,6 +294,20 @@ Flags:
 └──────────────────────────────────────────────────────────┘
 ```
 
+After install, a `tooling` + Claude project looks like:
+
+```
+your-project/
+├── .claude/
+│   ├── rules/          # coding conventions for your stack
+│   ├── agents/         # subagent definitions
+│   ├── commands/uzys/  # /uzys:* commands (only if you opted into uzys-harness)
+│   ├── hooks/          # gate / pre-commit hooks
+│   └── settings.json   # your existing one is backed up first
+├── CLAUDE.md           # merged instructions (yours backed up if it differed)
+└── .mcp.json           # MCP servers, merged with yours
+```
+
 ---
 
 ## CLI support

package/dist/index.js

@@ -698,7 +698,7 @@ var cac = (name = "") => new CAC(name);
 // package.json
 var package_default = {
   name: "@uzysjung/agent-harness",
-  version: "26.83.0",
+  version: "26.84.0",
   description: "One-command installer & curator of vetted, Docker-verified AI-coding workflows across Claude Code, Codex, OpenCode & Antigravity",
   type: "module",
   publishConfig: {
@@ -933,7 +933,7 @@ import {
   existsSync as existsSync14,
   mkdirSync as mkdirSync6,
   readdirSync as readdirSync4,
-  readFileSync as readFileSync13,
+  readFileSync as readFileSync14,
   writeFileSync as writeFileSync11
 } from "fs";
 import { dirname as dirname4, join as join12, resolve } from "path";
@@ -996,7 +996,7 @@ function runAntigravityOptIn(ctx) {
 
 // src/antigravity/transform.ts
 init_esm_shims();
-import { existsSync as existsSync3, readFileSync as readFileSync2, writeFileSync as writeFileSync2 } from "fs";
+import { existsSync as existsSync3, readFileSync as readFileSync3, writeFileSync as writeFileSync2 } from "fs";
 import { basename, join as join3 } from "path";
 
 // src/codex/skills.ts
@@ -1049,7 +1049,7 @@ function stripQuotes(raw) {
 
 // src/fs-ops.ts
 init_esm_shims();
-import { copyFileSync, cpSync as cpSync2, existsSync as existsSync2, mkdirSync as mkdirSync2, renameSync } from "fs";
+import { copyFileSync, cpSync as cpSync2, existsSync as existsSync2, mkdirSync as mkdirSync2, readFileSync as readFileSync2, renameSync } from "fs";
 import { dirname, join as join2 } from "path";
 function ensureDir(path) {
   mkdirSync2(path, { recursive: true });
@@ -1084,6 +1084,17 @@ function copyBackupDir(target, now = /* @__PURE__ */ new Date()) {
   cpSync2(target, backup, { recursive: true });
   return backup;
 }
+function backupFileIfChanged(target, newContent, now = /* @__PURE__ */ new Date()) {
+  if (!existsSync2(target)) {
+    return null;
+  }
+  if (readFileSync2(target, "utf-8") === newContent) {
+    return null;
+  }
+  const backup = `${target}.backup-${formatStamp(now)}`;
+  copyFileSync(target, backup);
+  return backup;
+}
 function formatStamp(now) {
   return now.toISOString().replace(/[-:]/g, "").replace(/\.\d+Z$/, "Z").slice(0, 15);
 }
@@ -1116,11 +1127,11 @@ function runAntigravityTransform(params) {
       const cmdSrc = join3(harnessRoot, "templates/commands/uzys", `${phase}.md`);
       let source = "";
       if (existsSync3(cmdSrc)) {
-        source = readFileSync2(cmdSrc, "utf8");
+        source = readFileSync3(cmdSrc, "utf8");
       } else {
         const fallback = join3(harnessRoot, "templates/codex/skills", `uzys-${phase}/SKILL.md`);
         if (existsSync3(fallback)) {
-          source = readFileSync2(fallback, "utf8");
+          source = readFileSync3(fallback, "utf8");
         }
       }
       const skillTarget = join3(skillDir, "SKILL.md");
@@ -1143,8 +1154,8 @@ function writeRules(harnessRoot, projectDir) {
   if (!existsSync3(claudeMdPath) || !existsSync3(templatePath)) {
     return null;
   }
-  const claudeMd = readFileSync2(claudeMdPath, "utf8");
-  const template = readFileSync2(templatePath, "utf8");
+  const claudeMd = readFileSync3(claudeMdPath, "utf8");
+  const template = readFileSync3(templatePath, "utf8");
   const rulesDir = join3(projectDir, ".agents", "rules");
   ensureDir(rulesDir);
   const target = join3(rulesDir, "uzys-harness.md");
@@ -1154,7 +1165,7 @@ function writeRules(harnessRoot, projectDir) {
 
 // src/codex/opt-in.ts
 init_esm_shims();
-import { cpSync as cpSync3, existsSync as existsSync5, mkdirSync as mkdirSync4, readdirSync, readFileSync as readFileSync4, writeFileSync as writeFileSync4 } from "fs";
+import { cpSync as cpSync3, existsSync as existsSync5, mkdirSync as mkdirSync4, readdirSync, readFileSync as readFileSync5, writeFileSync as writeFileSync4 } from "fs";
 import { homedir as homedir2 } from "os";
 import { join as join4 } from "path";
 
@@ -1201,14 +1212,14 @@ var CODEX_PROMPT_PHASES = ["spec", "plan", "build", "test", "review", "ship"];
 
 // src/codex/trust-entry.ts
 init_esm_shims();
-import { existsSync as existsSync4, mkdirSync as mkdirSync3, readFileSync as readFileSync3, writeFileSync as writeFileSync3 } from "fs";
+import { existsSync as existsSync4, mkdirSync as mkdirSync3, readFileSync as readFileSync4, writeFileSync as writeFileSync3 } from "fs";
 import { dirname as dirname2 } from "path";
 var TRUST_BLOCK_REGEX = /\[projects\."([^"]+)"\]/g;
 function registerTrustEntry(opts) {
   const { configPath, projectDir } = opts;
   try {
     mkdirSync3(dirname2(configPath), { recursive: true });
-    const existing = existsSync4(configPath) ? readFileSync3(configPath, "utf8") : "";
+    const existing = existsSync4(configPath) ? readFileSync4(configPath, "utf8") : "";
     if (hasTrustEntry(existing, projectDir)) {
       return { status: "already-present" };
     }
@@ -1287,7 +1298,7 @@ function copyCodexPrompts(harnessRoot, projectDir, promptsTarget) {
   for (const phase of CODEX_PROMPT_PHASES) {
     const src = join4(sourceDir, `${phase}.md`);
     if (!existsSync5(src)) continue;
-    const source = readFileSync4(src, "utf8");
+    const source = readFileSync5(src, "utf8");
     const dst = join4(promptsTarget, `uzys-${phase}.md`);
     writeFileSync4(dst, renderCodexPrompt({ source, phase }));
     count++;
@@ -1323,7 +1334,7 @@ function copyCodexSkills(projectDir, skillsTarget) {
 
 // src/codex/transform.ts
 init_esm_shims();
-import { chmodSync, existsSync as existsSync6, readFileSync as readFileSync5, writeFileSync as writeFileSync5 } from "fs";
+import { chmodSync, existsSync as existsSync6, readFileSync as readFileSync6, writeFileSync as writeFileSync5 } from "fs";
 import { basename as basename2, join as join5 } from "path";
 
 // src/codex/config-toml.ts
@@ -1421,7 +1432,7 @@ function runCodexTransform(params) {
     if (!existsSync6(src)) {
       continue;
     }
-    const ported = readFileSync5(src, "utf8").replace(ENV_VAR_RENAME, "CODEX_PROJECT_DIR");
+    const ported = readFileSync6(src, "utf8").replace(ENV_VAR_RENAME, "CODEX_PROJECT_DIR");
     const target = join5(hookDir, `${hook}.sh`);
     writeFileSync5(target, ported);
     chmodSync(target, 493);
@@ -1435,11 +1446,11 @@ function runCodexTransform(params) {
       const cmdSrc = join5(harnessRoot, "templates/commands/uzys", `${phase}.md`);
       let source = "";
       if (existsSync6(cmdSrc)) {
-        source = readFileSync5(cmdSrc, "utf8");
+        source = readFileSync6(cmdSrc, "utf8");
       } else {
         const fallback = join5(harnessRoot, "templates/codex/skills", `uzys-${phase}/SKILL.md`);
         if (existsSync6(fallback)) {
-          source = readFileSync5(fallback, "utf8");
+          source = readFileSync6(fallback, "utf8");
         }
       }
       const target = join5(skillDir, "SKILL.md");
@@ -1456,7 +1467,7 @@ function runCodexTransform(params) {
       if (!existsSync6(cmdSrc)) {
         continue;
       }
-      const source = readFileSync5(cmdSrc, "utf8");
+      const source = readFileSync6(cmdSrc, "utf8");
       const target = join5(promptDir, `uzys-${phase}.md`);
       writeFileSync5(target, renderCodexPrompt({ source, phase }));
       promptFiles.push(target);
@@ -1468,14 +1479,14 @@ function readRequired(path) {
   if (!existsSync6(path)) {
     throw new Error(`Codex transform: required source missing: ${path}`);
   }
-  return readFileSync5(path, "utf8");
+  return readFileSync6(path, "utf8");
 }
 function readOptionalJson(path) {
   if (!existsSync6(path)) {
     return null;
   }
   try {
-    return JSON.parse(readFileSync5(path, "utf8"));
+    return JSON.parse(readFileSync6(path, "utf8"));
   } catch {
     return null;
   }
@@ -1483,7 +1494,7 @@ function readOptionalJson(path) {
 
 // src/env-files.ts
 init_esm_shims();
-import { appendFileSync, existsSync as existsSync7, readFileSync as readFileSync6, writeFileSync as writeFileSync6 } from "fs";
+import { appendFileSync, existsSync as existsSync7, readFileSync as readFileSync7, writeFileSync as writeFileSync6 } from "fs";
 import { join as join6 } from "path";
 var ENV_EXAMPLE_BODY = `# .env.example \u2014 csr-supabase Track
 # Copy to .env (gitignored) and fill in values: cp .env.example .env
@@ -1533,7 +1544,7 @@ function addGitignoreEnv(projectDir) {
   if (!existsSync7(path)) {
     return false;
   }
-  const content = readFileSync6(path, "utf8");
+  const content = readFileSync7(path, "utf8");
   if (GITIGNORE_ENV_PATTERN.test(content)) {
     return false;
   }
@@ -1551,7 +1562,7 @@ function addGitignoreNpxSkillsAgents(projectDir) {
   if (!existsSync7(path)) {
     return [];
   }
-  const content = readFileSync6(path, "utf8");
+  const content = readFileSync7(path, "utf8");
   const missing = NPX_SKILLS_AGENT_DIRS.filter((pattern) => {
     const lineRegex = new RegExp(`^${pattern.replace(/\./g, "\\.").replace(/\//g, "/")}\\s*$`, "m");
     return !lineRegex.test(content);
@@ -1577,7 +1588,7 @@ function writeMcpAllowlist(projectDir) {
   }
   let names = [];
   try {
-    const parsed = JSON.parse(readFileSync6(mcpPath, "utf8"));
+    const parsed = JSON.parse(readFileSync7(mcpPath, "utf8"));
     names = Object.keys(parsed.mcpServers ?? {}).sort();
   } catch {
     return null;
@@ -1600,7 +1611,7 @@ function writeMcpAllowlist(projectDir) {
 // src/external-installer.ts
 init_esm_shims();
 import { spawnSync } from "child_process";
-import { existsSync as existsSync8, readdirSync as readdirSync2, readFileSync as readFileSync7 } from "fs";
+import { existsSync as existsSync8, readdirSync as readdirSync2, readFileSync as readFileSync8 } from "fs";
 import { homedir as homedir3 } from "os";
 import { join as join7 } from "path";
 var DEFAULT_SPAWN_TIMEOUT_MS = 12e4;
@@ -1691,8 +1702,12 @@ var SKILLS_CLI_AGENT_MAP = {
   // v26.66.0 — Antigravity (Google) skills agent. `.agents/skills/` 표준 공유 (codex transform 산출과 동일).
   antigravity: "antigravity"
 };
+var SKILLS_CLI_VERSION = "1.5.11";
+function skillsCliSpec() {
+  return `skills@${SKILLS_CLI_VERSION}`;
+}
 function buildSkillArgs(method, cli2, scope) {
-  const args = ["skills", "add", method.source];
+  const args = [skillsCliSpec(), "add", method.source];
   if (method.skill) {
     args.push("--skill", method.skill);
   }
@@ -1767,7 +1782,7 @@ function detectVersion(method, spawn) {
         if (!npmRoot) return void 0;
         const pkgJson = join7(npmRoot, method.pkg, "package.json");
         if (!existsSync8(pkgJson)) return void 0;
-        const parsed = JSON.parse(readFileSync7(pkgJson, "utf8"));
+        const parsed = JSON.parse(readFileSync8(pkgJson, "utf8"));
         return parsed.version;
       }
       default:
@@ -1795,7 +1810,7 @@ function getNpmGlobalRoot(spawn) {
 // src/install-log.ts
 init_esm_shims();
 import { createHash } from "crypto";
-import { existsSync as existsSync9, mkdirSync as mkdirSync5, readFileSync as readFileSync8, writeFileSync as writeFileSync7 } from "fs";
+import { existsSync as existsSync9, mkdirSync as mkdirSync5, readFileSync as readFileSync9, writeFileSync as writeFileSync7 } from "fs";
 import { dirname as dirname3, join as join8 } from "path";
 var INSTALL_LOG_FILENAME = ".harness-install.json";
 var INSTALL_LOG_VERSION = 1;
@@ -1864,7 +1879,7 @@ function readInstallLog(projectDir) {
   const path = join8(projectDir, ".claude", INSTALL_LOG_FILENAME);
   if (!existsSync9(path)) return null;
   try {
-    const parsed = JSON.parse(readFileSync8(path, "utf8"));
+    const parsed = JSON.parse(readFileSync9(path, "utf8"));
     if (Array.isArray(parsed.assets)) {
       parsed.assets = parsed.assets.map(
         (a) => a.method === "npm-global" ? { ...a, method: "npm" } : a
@@ -2127,7 +2142,7 @@ function buildManifest(spec) {
 
 // src/mcp-merge.ts
 init_esm_shims();
-import { existsSync as existsSync10, readFileSync as readFileSync9, writeFileSync as writeFileSync8 } from "fs";
+import { existsSync as existsSync10, readFileSync as readFileSync10, writeFileSync as writeFileSync8 } from "fs";
 function parseTrackMcpMap(raw) {
   const rows = [];
   for (const line of raw.split(/\r?\n/)) {
@@ -2178,15 +2193,15 @@ function mergeMcpServers(base, rows, tracks) {
   return out;
 }
 function composeMcpJson(opts) {
-  const base = JSON.parse(readFileSync9(opts.templateMcpPath, "utf8"));
+  const base = JSON.parse(readFileSync10(opts.templateMcpPath, "utf8"));
   const merged = opts.existingPath && existsSync10(opts.existingPath) ? mergeUserBase(base, opts.existingPath) : base;
-  const mapRaw = existsSync10(opts.trackMapPath) ? readFileSync9(opts.trackMapPath, "utf8") : "";
+  const mapRaw = existsSync10(opts.trackMapPath) ? readFileSync10(opts.trackMapPath, "utf8") : "";
   const rows = parseTrackMcpMap(mapRaw);
   return mergeMcpServers(merged, rows, opts.tracks);
 }
 function mergeUserBase(base, existingPath) {
   try {
-    const existing = JSON.parse(readFileSync9(existingPath, "utf8"));
+    const existing = JSON.parse(readFileSync10(existingPath, "utf8"));
     return {
       ...base,
       mcpServers: { ...base.mcpServers, ...existing.mcpServers }
@@ -2202,7 +2217,7 @@ function writeMcpJson(path, mcp) {
 
 // src/opencode/transform.ts
 init_esm_shims();
-import { copyFileSync as copyFileSync2, existsSync as existsSync11, readFileSync as readFileSync10, writeFileSync as writeFileSync9 } from "fs";
+import { copyFileSync as copyFileSync2, existsSync as existsSync11, readFileSync as readFileSync11, writeFileSync as writeFileSync9 } from "fs";
 import { basename as basename3, join as join9 } from "path";
 
 // src/opencode/agents-md.ts
@@ -2315,7 +2330,7 @@ function runOpencodeTransform(params) {
     const cmdSrc = join9(harnessRoot, "templates/commands/uzys", `${phase}.md`);
     let source = "";
     if (existsSync11(cmdSrc)) {
-      source = readFileSync10(cmdSrc, "utf8");
+      source = readFileSync11(cmdSrc, "utf8");
     } else {
       const fallback = join9(
         harnessRoot,
@@ -2323,7 +2338,7 @@ function runOpencodeTransform(params) {
         `uzys-${phase}.md`
       );
       if (existsSync11(fallback)) {
-        source = readFileSync10(fallback, "utf8");
+        source = readFileSync11(fallback, "utf8");
       }
     }
     const target = join9(cmdDir, `uzys-${phase}.md`);
@@ -2345,14 +2360,14 @@ function readRequired2(path) {
   if (!existsSync11(path)) {
     throw new Error(`OpenCode transform: required source missing: ${path}`);
   }
-  return readFileSync10(path, "utf8");
+  return readFileSync11(path, "utf8");
 }
 function readOptionalJson2(path) {
   if (!existsSync11(path)) {
     return null;
   }
   try {
-    return JSON.parse(readFileSync10(path, "utf8"));
+    return JSON.parse(readFileSync11(path, "utf8"));
   } catch {
     return null;
   }
@@ -2360,7 +2375,7 @@ function readOptionalJson2(path) {
 
 // src/project-claude-merge.ts
 init_esm_shims();
-import { existsSync as existsSync12, readFileSync as readFileSync11 } from "fs";
+import { existsSync as existsSync12, readFileSync as readFileSync12 } from "fs";
 import { join as join10 } from "path";
 var SECTIONS = [
   "stack",
@@ -2411,7 +2426,7 @@ var FULL_EXPANSION = [
 ];
 function mergeProjectClaude(tracks, opts) {
   const expanded = expandTracks(tracks);
-  const baseRaw = readFileSync11(join10(opts.baseDir, "_base.md"), "utf8");
+  const baseRaw = readFileSync12(join10(opts.baseDir, "_base.md"), "utf8");
   let output = baseRaw;
   output = output.replace("<!-- INSERT: track-list -->", trackList(expanded));
   output = output.replace("<!-- INSERT: tagline -->", taglineList(expanded, opts.baseDir));
@@ -2443,7 +2458,7 @@ function taglineList(tracks, baseDir) {
     if (!existsSync12(path)) {
       continue;
     }
-    const body = readFileSync11(path, "utf8").trim();
+    const body = readFileSync12(path, "utf8").trim();
     if (body) {
       taglines.push(body);
     }
@@ -2457,7 +2472,7 @@ function renderSection(section, tracks, baseDir) {
     if (!existsSync12(path)) {
       continue;
     }
-    const body = readFileSync11(path, "utf8").trim();
+    const body = readFileSync12(path, "utf8").trim();
     if (body) {
       present.push({ track: t, body });
     }
@@ -2516,7 +2531,7 @@ import {
   copyFileSync as copyFileSync3,
   existsSync as existsSync13,
   readdirSync as readdirSync3,
-  readFileSync as readFileSync12,
+  readFileSync as readFileSync13,
   unlinkSync,
   writeFileSync as writeFileSync10
 } from "fs";
@@ -2605,7 +2620,7 @@ function pruneOrphans(target, source, ext) {
 function cleanStaleHookRefs(settingsPath, hooksDir) {
   let settings;
   try {
-    settings = JSON.parse(readFileSync12(settingsPath, "utf8"));
+    settings = JSON.parse(readFileSync13(settingsPath, "utf8"));
   } catch {
     return [];
   }
@@ -2671,7 +2686,8 @@ function runInstall(ctx) {
     mode,
     envFiles: writeEnvironmentFiles(projectDir, spec.tracks),
     categories: base.categories,
-    rootClaudeMd: base.rootClaudeMd
+    rootClaudeMd: base.rootClaudeMd,
+    backups: base.backups
   };
   ctx.onProgress?.({ type: "baseline-complete", baseline });
   const external = runExternalPhase(ctx);
@@ -2733,7 +2749,8 @@ function emptyClaudeBaseline() {
     skipped: 0,
     categories: { rules: [], agents: [], hooks: [], commands: 0, skills: [] },
     rootClaudeMd: null,
-    rootClaudeMdLog: null
+    rootClaudeMdLog: null,
+    backups: []
   };
 }
 function installClaudeBaseline(manifestSpec, harnessRoot, projectDir, templatesDir) {
@@ -2751,6 +2768,12 @@ function installClaudeBaseline(manifestSpec, harnessRoot, projectDir, templatesD
       continue;
     }
     if (entry.type === "file") {
+      if (entry.target === ".claude/settings.json") {
+        const backup = backupFileIfChanged(target, readFileSync14(source, "utf-8"));
+        if (backup) {
+          result.backups.push(backup);
+        }
+      }
       copyFile(source, target);
       result.filesCopied += 1;
     } else {
@@ -2764,9 +2787,12 @@ function installClaudeBaseline(manifestSpec, harnessRoot, projectDir, templatesD
     chmodHooksSync(hookDir);
   }
   writeInstalledTracks(projectDir, manifestSpec.tracks);
-  const rootClaudeMdContent = writeRootClaudeMd(harnessRoot, projectDir, manifestSpec.tracks);
+  const rootClaudeMd = writeRootClaudeMd(harnessRoot, projectDir, manifestSpec.tracks);
   result.rootClaudeMd = { tracks: manifestSpec.tracks };
-  result.rootClaudeMdLog = { path: "CLAUDE.md", sha256: hashContent(rootClaudeMdContent) };
+  result.rootClaudeMdLog = { path: "CLAUDE.md", sha256: hashContent(rootClaudeMd.content) };
+  if (rootClaudeMd.backup) {
+    result.backups.push(rootClaudeMd.backup);
+  }
   return result;
 }
 function writeEnvironmentFiles(projectDir, tracks) {
@@ -2893,7 +2919,7 @@ function wireKarpathyHook(spec, external, harnessRoot, projectDir) {
   const settingsPath = join12(projectDir, ".claude/settings.json");
   let settingsUpdated = false;
   if (existsSync14(settingsPath)) {
-    const raw = readFileSync13(settingsPath, "utf8");
+    const raw = readFileSync14(settingsPath, "utf8");
     let before;
     try {
       before = JSON.parse(raw);
@@ -2950,8 +2976,10 @@ function writeInstalledTracks(projectDir, tracks) {
 function writeRootClaudeMd(harnessRoot, projectDir, tracks) {
   const baseDir = join12(harnessRoot, "templates/project-claude");
   const content = mergeProjectClaude(tracks, { baseDir });
-  writeFileSync11(join12(projectDir, "CLAUDE.md"), content);
-  return content;
+  const target = join12(projectDir, "CLAUDE.md");
+  const backup = backupFileIfChanged(target, content);
+  writeFileSync11(target, content);
+  return { content, backup };
 }
 function chmodHooksSync(hookDir) {
   for (const file of listHookFiles(hookDir)) {
@@ -3223,7 +3251,15 @@ function renderFinalSummary(log, spec, report, fromWizard) {
     }
   }
   log("");
-  log(infoRow("NEXT", `${c.bold("claude")}  \u2192  ${c.cyan("/uzys:spec")}`));
+  const hasUzysHarness = isAssetSelected("uzys-harness", spec);
+  const hasClaude = spec.cli.includes("claude");
+  if (hasUzysHarness && hasClaude) {
+    log(infoRow("NEXT", `${c.bold("claude")}  \u2192  ${c.cyan("/uzys:spec")}`));
+  } else {
+    const primary = (hasClaude ? "claude" : spec.cli[0]) ?? "claude";
+    const label = CLI_SUMMARY_LABELS[primary];
+    log(infoRow("NEXT", `Open ${c.bold(label)} \u2014 installed rules & skills are now active`));
+  }
   log("");
 }
 function formatAssetMeta(asset, version) {
@@ -3272,6 +3308,11 @@ function renderPhase1Rows(log, baseline, verbose = false, withEcc = false) {
     }
     return;
   }
+  if (baseline.backups) {
+    for (const b2 of baseline.backups) {
+      log(assetRow("success", "backup", shortenPath(b2)));
+    }
+  }
   const cats = baseline.categories;
   if (cats) {
     const phase1Row = (label, count, useText, files) => {
@@ -3363,7 +3404,7 @@ function renderPhase1Rows(log, baseline, verbose = false, withEcc = false) {
     log(
       `  ${c.dim("\xB7")} ${c.dim("ECC plugin not selected \u2014 cherry-pick fallback active (up to 4 agents + 8 skills + 3 commands)")}`
     );
-    log(`  ${c.dim("\xB7")} ${c.dim("Use --with-ecc to install ECC plugin instead")}`);
+    log(`  ${c.dim("\xB7")} ${c.dim("Use --with ecc-plugin to install ECC plugin instead")}`);
   }
   if (baseline.envFiles.envExampleCreated) {
     log(assetRow("success", ".env.example", "Supabase token guide"));
@@ -3591,11 +3632,9 @@ function registerInstallCommand(cli2) {
     }
   ).option("--project-dir <path>", "[Project] Target project directory", {
     default: process.cwd()
+  }).option("--scope <scope>", "[Scope] Installation scope: project (default) | global", {
+    default: "project"
   }).option(
-    "--scope <scope>",
-    "[Scope] Installation scope: project (default) | global. ADR-020 / NORTH_STAR D16",
-    { default: "project" }
-  ).option(
     "--with <asset-id>",
     "[Asset] Force-include External Asset id (regardless of preset). Repeatable. v26.47.0+"
   ).option(
@@ -3603,10 +3642,10 @@ function registerInstallCommand(cli2) {
     "[Asset] Force-exclude External Asset id (drop from preset recommendation). Repeatable. v26.47.0+"
   ).option(
     "--with-codex-prompts",
-    "[Codex] Unify Codex slash (~/.codex/prompts/uzys-*.md). v26.46.0+ default ON when --cli codex"
+    "[Codex] Unify Codex slash (~/.codex/prompts/uzys-*.md). Requires --cli codex. (v26.46.0+)"
   ).option(
     "--no-codex-prompts",
-    "[Codex] Disable Codex slash default ON (skip global copy even with --cli codex)"
+    "[Codex] Backward-compat noop \u2014 Codex slash is opt-in via --with-codex-prompts (v26.64.0 ADR-020)"
   ).option(
     "--with-codex-skills",
     "[Codex] Codex global opt-in: copy uzys-* skills to ~/.codex/skills/"
@@ -3628,7 +3667,7 @@ function registerInstallCommand(cli2) {
 // src/commands/uninstall.ts
 init_esm_shims();
 import { spawnSync as spawnSync2 } from "child_process";
-import { existsSync as existsSync15, readFileSync as readFileSync14, rmSync } from "fs";
+import { existsSync as existsSync15, readFileSync as readFileSync15, rmSync } from "fs";
 import { join as join13, resolve as resolve3 } from "path";
 function uninstallAction(options, deps = {}) {
   const log = deps.log ?? console.log;
@@ -3757,7 +3796,7 @@ function buildProjectReverseStep(asset, spawn) {
       return {
         label: `npx skills remove ${source}`,
         execute: () => {
-          const r = spawn("npx", ["skills", "remove", source, "--yes"]);
+          const r = spawn("npx", [skillsCliSpec(), "remove", source, "--yes"]);
           return r.status === 0 ? { ok: true } : { ok: false, message: (r.stderr || "").trim() };
         }
       };
@@ -3816,7 +3855,7 @@ function rootClaudeMdModified(log, projectDir) {
   if (!rootMd) return false;
   const path = join13(projectDir, rootMd.path);
   if (!existsSync15(path)) return false;
-  return hashContent(readFileSync14(path, "utf8")) !== rootMd.sha256;
+  return hashContent(readFileSync15(path, "utf8")) !== rootMd.sha256;
 }
 function formatTemplateList(log) {
   const items = [log.templates.claudeDir];
@@ -5102,7 +5141,7 @@ Proceed?`,
 
 // src/state.ts
 init_esm_shims();
-import { existsSync as existsSync16, readFileSync as readFileSync15 } from "fs";
+import { existsSync as existsSync16, readFileSync as readFileSync16 } from "fs";
 import { join as join14 } from "path";
 var META_FILE = ".claude/.installed-tracks";
 var LEGACY_SIGNATURES = [
@@ -5127,7 +5166,7 @@ function detectInstallState(projectDir) {
   return { state: "existing", tracks, source: "legacy", hasClaudeDir: true };
 }
 function readMetafile(path) {
-  const raw = readFileSync15(path, "utf8");
+  const raw = readFileSync16(path, "utf8");
   const seen = /* @__PURE__ */ new Set();
   for (const line of raw.split(/\s+/)) {
     const trimmed = line.trim();