@uzysjung/agent-harness 26.95.0 → 26.97.0

package/dist/trust-tier-drift.js

@@ -6,7 +6,7 @@ import {
   INTERNAL_BUNDLED_SKILL_IDS,
   TRUST_TIER,
   init_esm_shims
-} from "./chunk-DSWWKCW3.js";
+} from "./chunk-WKXYOTUV.js";
 
 // src/trust-tier-drift.ts
 init_esm_shims();
@@ -20,8 +20,6 @@ var REPO_OVERRIDE = {
   // npm
   "agent-browser": "vercel-labs/agent-browser",
   // npm
-  "gsd-orchestrator": "gsd-build/get-shit-done",
-  // npx-run
   openspec: "Fission-AI/OpenSpec",
   // npm (v26.75.0)
   "bmad-method": "bmad-code-org/BMAD-METHOD"

package/dist/trust-tier-drift.js.map

@@ -1 +1 @@
-{"version":3,"sources":["../src/trust-tier-drift.ts"],"sourcesContent":["/**\n * A1 — Trust Tier star-drift 검출 데이터 + 순수 로직.\n *\n * TRUST_TIER 의 star 기반 라벨(vetted ≥ 1000★ / experimental < 1000★)이 실제 GitHub\n * star 와 어긋났는지(drift) 판정한다. `official` 은 star 무관(Anthropic 공식·하네스 자체)\n * 이라 검사 제외.\n *\n * repo 출처 = 각 자산 method (in-code authoritative — 주석이 아니라 실제 설치 source):\n *   skill  → method.source     (\"owner/repo\" 또는 github URL)\n *   plugin → method.marketplace (\"owner/repo\")\n *   npm    → NPM_REPO_OVERRIDE[id] (pkg 는 npm 명이므로 GitHub repo 를 별도 명시)\n *\n * fetch/네트워크는 본 모듈에 없음 — 순수 로직만(테스트 가능). 실 fetch 는\n * `scripts/trust-tier-drift.mjs` 가 담당.\n */\nimport { EXTERNAL_ASSETS, type ExternalAsset, TRUST_TIER } from \"./external-assets.js\";\n\n// v26.79.0 — gen-compatibility 의 카테고리 exhaustiveness 가드용 SSOT (하드코딩 drift 차단).\nexport { CATEGORIES } from \"./categories.js\";\n// v26.76.0 — gen-compatibility.mjs 가 dist 에서 자산 카탈로그+tier 를 읽도록 re-export.\n// v26.93.0 — DEV_METHOD_SKILL_IDS 추가: gen-compatibility 의 CLI scope override 를\n//   하드코딩 id 목록 대신 SSOT 에서 derive (no-false-ship drift 구조 차단).\n// v26.95.0 — INTERNAL_BUNDLED_SKILL_IDS (dev-method + opt-in gemini-consult) 로 CLI scope derive.\nexport {\n  DEV_METHOD_SKILL_IDS,\n  EXTERNAL_ASSETS,\n  INTERNAL_BUNDLED_SKILL_IDS,\n  TRUST_TIER,\n} from \"./external-assets.js\";\n\n/** vetted 경계 (NORTH_STAR / PRD v26-71 D2). */\nexport const STAR_THRESHOLD = 1000;\n\nexport type StarTier = \"vetted\" | \"experimental\";\nexport type DriftVerdict = \"ok\" | \"promote\" | \"demote\";\n\n/**\n * method 가 GitHub repo 를 안 담는 자산(npm.pkg / npx-run.cmd 는 npm 명) → 트러스트 근거가\n * 된 GitHub repo 를 명시 매핑. override 가 method 도출보다 우선.\n */\nconst REPO_OVERRIDE: Record<string, string> = {\n  \"vercel-cli\": \"vercel/vercel\", // npm\n  \"netlify-cli\": \"netlify/cli\", // npm\n  \"supabase-cli\": \"supabase/cli\", // npm\n  \"agent-browser\": \"vercel-labs/agent-browser\", // npm\n  \"gsd-orchestrator\": \"gsd-build/get-shit-done\", // npx-run\n  openspec: \"Fission-AI/OpenSpec\", // npm (v26.75.0)\n  \"bmad-method\": \"bmad-code-org/BMAD-METHOD\", // npx-run (v26.75.0)\n};\n\n/** \"https://github.com/owner/repo\" 또는 \"owner/repo[/...]\" → \"owner/repo\". 실패 시 null. */\nexport function normalizeRepo(source: string): string | null {\n  const stripped = source.replace(/^https?:\\/\\/github\\.com\\//i, \"\");\n  const m = stripped.match(/^([^/\\s]+\\/[^/\\s]+)/);\n  return m?.[1] ?? null;\n}\n\n/** 자산의 GitHub owner/repo 도출. override 우선 → skill/plugin method. 도출 불가 시 null. */\nexport function repoForAsset(asset: ExternalAsset): string | null {\n  const override = REPO_OVERRIDE[asset.id];\n  if (override) return override;\n  const m = asset.method;\n  if (m.kind === \"skill\") return normalizeRepo(m.source);\n  if (m.kind === \"plugin\") return normalizeRepo(m.marketplace);\n  return null;\n}\n\nexport interface DriftTarget {\n  id: string;\n  tier: StarTier;\n  repo: string;\n}\n\n/** star 기반(vetted/experimental) 자산만 + repo 도출 가능한 것만 검사 대상. */\nexport function driftTargets(\n  assets: ReadonlyArray<ExternalAsset> = EXTERNAL_ASSETS,\n): DriftTarget[] {\n  const out: DriftTarget[] = [];\n  for (const a of assets) {\n    const tier = TRUST_TIER[a.id];\n    if (tier !== \"vetted\" && tier !== \"experimental\") continue;\n    const repo = repoForAsset(a);\n    if (!repo) continue; // 도출 불가 — 테스트가 0건을 강제하므로 정상 경로에선 발생 안 함\n    out.push({ id: a.id, tier, repo });\n  }\n  return out;\n}\n\n/** 정적 tier 가 실제 star 와 어긋났는지 판정. */\nexport function classifyDrift(tier: StarTier, stars: number): DriftVerdict {\n  if (tier === \"vetted\" && stars < STAR_THRESHOLD) return \"demote\";\n  if (tier === \"experimental\" && stars >= STAR_THRESHOLD) return \"promote\";\n  return \"ok\";\n}\n"],"mappings":";;;;;;;;;;;AAAA;AA+BO,IAAM,iBAAiB;AAS9B,IAAM,gBAAwC;AAAA,EAC5C,cAAc;AAAA;AAAA,EACd,eAAe;AAAA;AAAA,EACf,gBAAgB;AAAA;AAAA,EAChB,iBAAiB;AAAA;AAAA,EACjB,oBAAoB;AAAA;AAAA,EACpB,UAAU;AAAA;AAAA,EACV,eAAe;AAAA;AACjB;AAGO,SAAS,cAAc,QAA+B;AAC3D,QAAM,WAAW,OAAO,QAAQ,8BAA8B,EAAE;AAChE,QAAM,IAAI,SAAS,MAAM,qBAAqB;AAC9C,SAAO,IAAI,CAAC,KAAK;AACnB;AAGO,SAAS,aAAa,OAAqC;AAChE,QAAM,WAAW,cAAc,MAAM,EAAE;AACvC,MAAI,SAAU,QAAO;AACrB,QAAM,IAAI,MAAM;AAChB,MAAI,EAAE,SAAS,QAAS,QAAO,cAAc,EAAE,MAAM;AACrD,MAAI,EAAE,SAAS,SAAU,QAAO,cAAc,EAAE,WAAW;AAC3D,SAAO;AACT;AASO,SAAS,aACd,SAAuC,iBACxB;AACf,QAAM,MAAqB,CAAC;AAC5B,aAAW,KAAK,QAAQ;AACtB,UAAM,OAAO,WAAW,EAAE,EAAE;AAC5B,QAAI,SAAS,YAAY,SAAS,eAAgB;AAClD,UAAM,OAAO,aAAa,CAAC;AAC3B,QAAI,CAAC,KAAM;AACX,QAAI,KAAK,EAAE,IAAI,EAAE,IAAI,MAAM,KAAK,CAAC;AAAA,EACnC;AACA,SAAO;AACT;AAGO,SAAS,cAAc,MAAgB,OAA6B;AACzE,MAAI,SAAS,YAAY,QAAQ,eAAgB,QAAO;AACxD,MAAI,SAAS,kBAAkB,SAAS,eAAgB,QAAO;AAC/D,SAAO;AACT;","names":[]}
+{"version":3,"sources":["../src/trust-tier-drift.ts"],"sourcesContent":["/**\n * A1 — Trust Tier star-drift 검출 데이터 + 순수 로직.\n *\n * TRUST_TIER 의 star 기반 라벨(vetted ≥ 1000★ / experimental < 1000★)이 실제 GitHub\n * star 와 어긋났는지(drift) 판정한다. `official` 은 star 무관(Anthropic 공식·하네스 자체)\n * 이라 검사 제외.\n *\n * repo 출처 = 각 자산 method (in-code authoritative — 주석이 아니라 실제 설치 source):\n *   skill  → method.source     (\"owner/repo\" 또는 github URL)\n *   plugin → method.marketplace (\"owner/repo\")\n *   npm    → NPM_REPO_OVERRIDE[id] (pkg 는 npm 명이므로 GitHub repo 를 별도 명시)\n *\n * fetch/네트워크는 본 모듈에 없음 — 순수 로직만(테스트 가능). 실 fetch 는\n * `scripts/trust-tier-drift.mjs` 가 담당.\n */\nimport { EXTERNAL_ASSETS, type ExternalAsset, TRUST_TIER } from \"./external-assets.js\";\n\n// v26.79.0 — gen-compatibility 의 카테고리 exhaustiveness 가드용 SSOT (하드코딩 drift 차단).\nexport { CATEGORIES } from \"./categories.js\";\n// v26.76.0 — gen-compatibility.mjs 가 dist 에서 자산 카탈로그+tier 를 읽도록 re-export.\n// v26.93.0 — DEV_METHOD_SKILL_IDS 추가: gen-compatibility 의 CLI scope override 를\n//   하드코딩 id 목록 대신 SSOT 에서 derive (no-false-ship drift 구조 차단).\n// v26.95.0 — INTERNAL_BUNDLED_SKILL_IDS (dev-method + opt-in gemini-consult) 로 CLI scope derive.\nexport {\n  DEV_METHOD_SKILL_IDS,\n  EXTERNAL_ASSETS,\n  INTERNAL_BUNDLED_SKILL_IDS,\n  TRUST_TIER,\n} from \"./external-assets.js\";\n\n/** vetted 경계 (NORTH_STAR / PRD v26-71 D2). */\nexport const STAR_THRESHOLD = 1000;\n\nexport type StarTier = \"vetted\" | \"experimental\";\nexport type DriftVerdict = \"ok\" | \"promote\" | \"demote\";\n\n/**\n * method 가 GitHub repo 를 안 담는 자산(npm.pkg / npx-run.cmd 는 npm 명) → 트러스트 근거가\n * 된 GitHub repo 를 명시 매핑. override 가 method 도출보다 우선.\n */\nconst REPO_OVERRIDE: Record<string, string> = {\n  \"vercel-cli\": \"vercel/vercel\", // npm\n  \"netlify-cli\": \"netlify/cli\", // npm\n  \"supabase-cli\": \"supabase/cli\", // npm\n  \"agent-browser\": \"vercel-labs/agent-browser\", // npm\n  openspec: \"Fission-AI/OpenSpec\", // npm (v26.75.0)\n  \"bmad-method\": \"bmad-code-org/BMAD-METHOD\", // npx-run (v26.75.0)\n};\n\n/** \"https://github.com/owner/repo\" 또는 \"owner/repo[/...]\" → \"owner/repo\". 실패 시 null. */\nexport function normalizeRepo(source: string): string | null {\n  const stripped = source.replace(/^https?:\\/\\/github\\.com\\//i, \"\");\n  const m = stripped.match(/^([^/\\s]+\\/[^/\\s]+)/);\n  return m?.[1] ?? null;\n}\n\n/** 자산의 GitHub owner/repo 도출. override 우선 → skill/plugin method. 도출 불가 시 null. */\nexport function repoForAsset(asset: ExternalAsset): string | null {\n  const override = REPO_OVERRIDE[asset.id];\n  if (override) return override;\n  const m = asset.method;\n  if (m.kind === \"skill\") return normalizeRepo(m.source);\n  if (m.kind === \"plugin\") return normalizeRepo(m.marketplace);\n  return null;\n}\n\nexport interface DriftTarget {\n  id: string;\n  tier: StarTier;\n  repo: string;\n}\n\n/** star 기반(vetted/experimental) 자산만 + repo 도출 가능한 것만 검사 대상. */\nexport function driftTargets(\n  assets: ReadonlyArray<ExternalAsset> = EXTERNAL_ASSETS,\n): DriftTarget[] {\n  const out: DriftTarget[] = [];\n  for (const a of assets) {\n    const tier = TRUST_TIER[a.id];\n    if (tier !== \"vetted\" && tier !== \"experimental\") continue;\n    const repo = repoForAsset(a);\n    if (!repo) continue; // 도출 불가 — 테스트가 0건을 강제하므로 정상 경로에선 발생 안 함\n    out.push({ id: a.id, tier, repo });\n  }\n  return out;\n}\n\n/** 정적 tier 가 실제 star 와 어긋났는지 판정. */\nexport function classifyDrift(tier: StarTier, stars: number): DriftVerdict {\n  if (tier === \"vetted\" && stars < STAR_THRESHOLD) return \"demote\";\n  if (tier === \"experimental\" && stars >= STAR_THRESHOLD) return \"promote\";\n  return \"ok\";\n}\n"],"mappings":";;;;;;;;;;;AAAA;AA+BO,IAAM,iBAAiB;AAS9B,IAAM,gBAAwC;AAAA,EAC5C,cAAc;AAAA;AAAA,EACd,eAAe;AAAA;AAAA,EACf,gBAAgB;AAAA;AAAA,EAChB,iBAAiB;AAAA;AAAA,EACjB,UAAU;AAAA;AAAA,EACV,eAAe;AAAA;AACjB;AAGO,SAAS,cAAc,QAA+B;AAC3D,QAAM,WAAW,OAAO,QAAQ,8BAA8B,EAAE;AAChE,QAAM,IAAI,SAAS,MAAM,qBAAqB;AAC9C,SAAO,IAAI,CAAC,KAAK;AACnB;AAGO,SAAS,aAAa,OAAqC;AAChE,QAAM,WAAW,cAAc,MAAM,EAAE;AACvC,MAAI,SAAU,QAAO;AACrB,QAAM,IAAI,MAAM;AAChB,MAAI,EAAE,SAAS,QAAS,QAAO,cAAc,EAAE,MAAM;AACrD,MAAI,EAAE,SAAS,SAAU,QAAO,cAAc,EAAE,WAAW;AAC3D,SAAO;AACT;AASO,SAAS,aACd,SAAuC,iBACxB;AACf,QAAM,MAAqB,CAAC;AAC5B,aAAW,KAAK,QAAQ;AACtB,UAAM,OAAO,WAAW,EAAE,EAAE;AAC5B,QAAI,SAAS,YAAY,SAAS,eAAgB;AAClD,UAAM,OAAO,aAAa,CAAC;AAC3B,QAAI,CAAC,KAAM;AACX,QAAI,KAAK,EAAE,IAAI,EAAE,IAAI,MAAM,KAAK,CAAC;AAAA,EACnC;AACA,SAAO;AACT;AAGO,SAAS,cAAc,MAAgB,OAA6B;AACzE,MAAI,SAAS,YAAY,QAAQ,eAAgB,QAAO;AACxD,MAAI,SAAS,kBAAkB,SAAS,eAAgB,QAAO;AAC/D,SAAO;AACT;","names":[]}

package/package.json

@@ -1,6 +1,6 @@
 {
   "name": "@uzysjung/agent-harness",
-  "version": "26.95.0",
+  "version": "26.97.0",
   "description": "Curate vetted AI-coding skills & plugins by your tech stack — install only what you need, across Claude Code, Codex, OpenCode & Antigravity",
   "type": "module",
   "publishConfig": {

package/templates/antigravity/AGENTS.md.template

@@ -4,6 +4,10 @@
 > **Antigravity**: 2.0+ (`agy` CLI + desktop IDE)
 > **Location**: workspace rule — `.agents/rules/uzys-harness.md`
 
+## Project Context
+
+{PROJECT_CONTEXT}
+
 ## Project Rules
 
 {PROJECT_RULES}

package/templates/codex/AGENTS.md.template

@@ -4,6 +4,10 @@
 > **Codex Version**: 0.124.0+
 > **Linked SPEC**: `docs/specs/codex-compat.md`
 
+## Project Context
+
+{PROJECT_CONTEXT}
+
 ## Project Rules
 
 {PROJECT_RULES}

package/templates/opencode/AGENTS.md.template

@@ -4,6 +4,10 @@
 > **OpenCode Version**: 0.x (anomalyco/opencode)
 > **Linked SPEC**: `docs/specs/opencode-compat.md`
 
+## Project Context
+
+{PROJECT_CONTEXT}
+
 ## Project Rules
 
 {PROJECT_RULES}

package/templates/skills/compaction-handoff/SKILL.md

@@ -1,178 +1,312 @@
 ---
 name: compaction-handoff
 description: >-
-  Execute a structured handoff right before a context compaction so no state is lost — persist
-  durable facts to memory, take an atomic git snapshot (clean tree + open-PR check), and emit a
-  fixed-field resume anchor (current state / verified / what's left / next action) plus a suggested
-  custom /compact summary line. Use when the user says "컴팩션 준비해줘", "컴팩션하고 이어서
-  진행할 수 있게 준비해줘", "핸드오프 준비해줘", or in English "prepare for compaction",
-  "get ready to compact and continue", "hand off before /compact", "checkpoint before compacting".
-  Also fire proactively when context is nearing the window limit and an auto-compact is imminent.
+  Create a compact, reconstructible checkpoint immediately before context compaction. Persist only
+  durable facts and decisions, overwrite one current resume anchor, verify Git and open-PR state,
+  and emit one concrete next action plus a short /compact line. Use for "컴팩션 준비해줘",
+  "컴팩션하고 이어서 진행할 수 있게 준비해줘", "핸드오프 준비해줘", or "prepare for
+  compaction", or equivalent. Repeated execution must be idempotent and must not grow state files
+  without bound.
 ---
 
 # Compaction Handoff Protocol
 
-A context window is about to be summarized and reinitialized. The model is stateless, so **only
-what you write out survives** — the new window starts from a lossy summary, not the live history.
-This skill runs the handoff deliberately so the resumed session can pick up without re-deriving
-lost state.
+Context compaction is lossy. Create a deliberate checkpoint that lets the next session resume from
+verified state without replaying the full conversation.
 
-> Sibling skill `strategic-compact` decides **WHEN** to compact (phase boundaries, token pressure).
-> This skill is the **HOW**: it executes the handoff at that moment. Run `strategic-compact`'s
-> decision first if you're unsure whether to compact at all; run this when the answer is "yes".
+This protocol is **snapshot-based, not append-based**:
 
-## When to use
+- `MEMORY.md`: durable facts and pointers only.
+- `docs/decisions/`: durable, load-bearing decisions only.
+- `.handoff/CURRENT.md`: current resumable state; overwrite on every handoff.
+- Git and PR state: authoritative implementation snapshot.
+- `/compact` line: short pointer to the anchor, not another summary.
 
-The user works in Korean and triggers this repeatedly. Treat any of these as a fire signal:
+> `strategic-compact` decides **when** to compact. This skill defines **how** to checkpoint.
 
-- **"컴팩션 준비해줘"** / **"컴팩션하고 이어서 진행할 수 있게 준비해줘"** / **"핸드오프 준비해줘"**
-- English equivalents: "prepare for compaction", "get ready to compact and continue", "hand off".
-- **Proactively, before the cliff.** Don't wait for auto-compact at 100%. Auto-compaction fires
-  near the window limit; a common practice is to trigger the handoff earlier (around ~80% of the
-  window) so there's still budget to write a clean anchor — a rushed handoff at the cliff is exactly
-  where load-bearing context gets dropped.
+## Goals
 
-Why proactive matters: auto-compact optimizes for *generic* continuity, not for THIS task's
-load-bearing facts (an open PR, a chosen-but-unwritten decision). If you skip the handoff because
-the task "looks finished," you risk silent information loss — the resumed agent assumes work
-shipped that did not.
+A valid handoff is:
 
-## The model: three legs of a checkpoint
+- **Recoverable:** the next session can start from one exact action.
+- **Atomic:** the anchor refers to one coherent repository state.
+- **Evidence-based:** verified results are distinct from claims and pending work.
+- **Compact:** only load-bearing information survives.
+- **Idempotent:** rerunning updates existing state instead of duplicating it.
+- **Bounded:** state files remain within fixed size limits.
 
-Treat the handoff as a deliberate checkpoint, not a passive summary. Three legs, each grounded in
-an established practice:
+## Trigger
 
-1. **Persist durable facts to external memory** *(before compacting, never after)*.
-   The window will be wiped; structured note-taking exists precisely because the summary alone
-   can't be trusted to carry everything. Route load-bearing *decisions* to ADRs (`docs/decisions/`)
-   so the *why* survives every future compaction, not just this one.
-2. **Take an atomic, reconstructible snapshot** — git clean (or a `savepoint` commit) plus an
-   **open-PR check**. A dirty/half-committed tree is a corrupt checkpoint; an open PR is itself
-   critical state that belongs in "what's left." This is the Checkpoint **Atomicity** and **State
-   Completeness** principles applied to the working tree.
-3. **Emit a fixed-field resume anchor** — current state / verified / what's left / next action —
-   framed *working backwards* from the next concrete step so a freshly-compacted agent re-orients
-   instantly instead of replaying history forward.
+Run on explicit compaction or handoff requests, or proactively before automatic compaction while
+there is still enough context to write a clean checkpoint.
 
-### Preserve-list, not a prose blob
+Do not run after compaction without first reconstructing the best available state.
 
-Use an explicit preserve-list rather than a free-form paragraph (Anthropic's stated preserve/discard
-split):
+## State and retention rules
 
-| Preserve (high-value) | Discard (low-value) |
+### `.handoff/CURRENT.md` — transient resume SSOT
+
+- Single source of truth for current resumable state.
+- Overwrite; never append old anchors.
+- No raw logs, full file contents, or conversation replay.
+- Reference commits, PRs, tests, files, and ADRs instead of copying them.
+- Target: **120 lines / 12 KB maximum**.
+- Write atomically through a temporary file when practical.
+- Historical archives are disabled by default. If explicitly required, keep them under
+  `.handoff/archive/`, apply a retention limit, and never auto-load them on resume.
+
+### `MEMORY.md` — durable facts only
+
+Keep:
+
+- stable purpose, scope, constraints, invariants, and operating principles;
+- durable repository or user preferences;
+- pointers to active ADRs and `.handoff/CURRENT.md`.
+
+Remove or exclude:
+
+- current branch, test failure, task progress, temporary blocker, raw output;
+- completed session history, old anchors, duplicated repository content.
+
+Update or replace existing entries; do not append near-duplicates. Remove superseded facts. Target:
+**200 lines / 20 KB maximum**, unless the repository defines another limit.
+
+### `docs/decisions/` — durable decisions only
+
+Create or update an ADR only for expensive-to-reverse decisions such as:
+
+- architecture or major dependency choices;
+- API, data-model, compatibility, or migration contracts;
+- security trust boundaries and control ownership;
+- deployment topology, operational responsibility, or deliberate breaking changes.
+
+Do not create ADRs for branch status, task order, temporary workarounds, test failures, or today's
+remaining work. Search existing ADRs first; update or supersede rather than duplicate.
+
+### Git and PR state — implementation authority
+
+Inspect:
+
+```bash
+git status --short
+git branch --show-current
+git rev-parse --short HEAD
+git log -1 --oneline
+```
+
+When GitHub CLI is available:
+
+```bash
+gh pr list --state open
+gh pr status
+```
+
+Never assume a PR is merged. Surface open PR number, CI/review status, and mergeability when
+available. Never merge or modify a PR unless separately requested.
+
+## Preserve versus discard
+
+| Preserve | Discard |
 |---|---|
-| Architectural decisions + their *why* (link ADR) | Redundant tool outputs, raw logs |
-| Unresolved bugs / blockers | Intermediate reasoning already acted on |
-| Processed-vs-remaining boundary | File contents you can re-read from disk |
-| Open PRs / unpushed branches | Tool-call counts and history |
-| Verified-vs-merely-claimed evidence | Restated CLAUDE.md / rules (already loaded) |
+| Current objective and processed/remaining boundary | Full conversation replay |
+| Durable decisions via ADR reference | Intermediate reasoning already acted on |
+| Unresolved blockers and exact impact | Raw logs and repetitive tool output |
+| Branch, commit, dirty state, open PRs | Re-readable file contents |
+| Test/build evidence | Unsupported "done" claims |
+| One exact next action | Broad speculative future work |
+
+When uncertain, preserve a concise reference rather than duplicated content.
 
 ## Workflow
 
-Run these in order. Each writes durable state *before* the window is touched.
+### 1. Inspect existing state
+
+```bash
+test -f MEMORY.md && sed -n '1,240p' MEMORY.md
+test -f .handoff/CURRENT.md && sed -n '1,180p' .handoff/CURRENT.md
+find docs/decisions -maxdepth 1 -type f 2>/dev/null | sort
+```
+
+Use existing files to update and prune. Never blindly append.
+
+### 2. Classify each item
+
+Route each fact once:
+
+1. durable fact → `MEMORY.md`;
+2. durable decision with rationale → ADR;
+3. transient resumable state → `.handoff/CURRENT.md`;
+4. reconstructible or low-value detail → discard.
+
+A fact should not exist in multiple places unless one location contains only a pointer.
 
-**1. Memory — persist durable facts.**
-Update the auto-memory (`MEMORY.md`) and any session-summary entry with the preserve-list items.
-For a load-bearing decision (architecture, dependency, data model, breaking change), write or update
-an ADR in `docs/decisions/` — this is the one place "the why behind the constraint" survives lossy
-compaction. Don't rely on the `/compact` summary to carry a decision; it strips provenance.
+### 3. Update durable state
+
+For `MEMORY.md`:
+
+- merge duplicates;
+- replace superseded facts;
+- remove completed transient state;
+- add only genuinely durable information;
+- keep a pointer to `.handoff/CURRENT.md`.
+
+For ADRs:
+
+- confirm the decision is durable;
+- search for an equivalent ADR;
+- update or supersede when possible;
+- create a new ADR only when necessary.
+
+If there are no durable changes, leave these files unchanged.
+
+### 4. Make Git state reconstructible
+
+Preferred order:
+
+1. reuse the current meaningful commit if the tree is clean;
+2. make a normal semantic commit for a coherent completed unit when authorized;
+3. otherwise use a named stash when safe and authorized;
+4. use a temporary savepoint commit only as a last resort;
+5. if no safe write action is authorized, leave the tree unchanged and record dirty files and risk.
+
+Do not stage unrelated files. Do not create another savepoint when state has not materially changed.
+
+### 5. Overwrite `.handoff/CURRENT.md`
+
+Use this structure:
+
+```markdown
+# Compaction Resume Anchor
+
+- Updated: <ISO-8601 timestamp with timezone>
+- Repository: <name or path>
+- Branch: <branch or n/a>
+- Commit: <short SHA or n/a>
+- Working tree: <clean | concise dirty-file summary>
+- Open PRs: <none | concise status>
+
+## Current state
+<Active objective, completed work, and processed-vs-remaining boundary.>
+
+## Verified
+<Evidence only: command and exit status, reviewed diff, artifact, merged PR, or "not verified".>
+
+## What's left
+<Pending work, blockers, dirty or unpushed state, open PRs, and unresolved decisions.>
+
+## Next action
+<Exactly one executable next step, preferably naming the file, command, or decision target.>
+
+## References
+- <Only directly useful plan/spec/ADR/PR/file references>
+```
+
+Requirements:
+
+- `Next action` is mandatory and singular.
+- `Verified` must name evidence; assumptions are not passes.
+- `What's left` must expose relevant uncommitted, unpushed, unmerged, failed, or blocked state.
+- Keep references minimal.
+
+Atomic write example:
 
-**2. Git — atomic snapshot + open-PR check.**
-Make the working tree reflect a consistent state. The `gh pr list` step is **not optional** — it is
-the git-policy **Session Cleanup** gate, which is mandatory before any `/clear` or `/compact`. Run it
-every handoff:
 ```bash
-git status --short                 # is the tree clean?
-# IF tree is dirty AND the work is worth keeping:
-git add -A && git commit -m "chore: savepoint before compaction handoff"
-gh pr list --state open            # list open PRs — each open PR is what's-left state to surface, not necessarily an anomaly
-git branch --show-current          # note unpushed branch state
+mkdir -p .handoff
+cat > .handoff/CURRENT.md.tmp <<'ANCHOR'
+...
+ANCHOR
+mv .handoff/CURRENT.md.tmp .handoff/CURRENT.md
 ```
-This folds the git-policy **Session Cleanup** gate into the handoff. An open PR is not a
-loose end to hide — surface it in the anchor's "what's left" with its number, CI status, and
-mergeability, and let the user decide (no auto-merge).
 
-**3. Resume anchor — four fixed fields.**
-Emit the anchor. Keep "verified" distinct from "done": *done* is a claim, *verified* encodes the
-evidence (test PASS output, exit 0, a merged PR). The resumed agent re-trusts only what's verified.
-Make **next action** mandatory and singular — it's the entry point the resumed session executes
-first, so the anchor is self-serve (Recovery Automation), not a note to re-interpret.
+### 6. Validate
 
-**4. Suggested /compact line.**
-Hand the user a one-line custom summary to pass to `/compact` (e.g.
-`/compact Resume: finish ADR-022 flag removal; PR #160 merged, branches drift test failing`). This
-is a pointer to the durable anchor, not a replacement for it.
+```bash
+wc -l -c MEMORY.md .handoff/CURRENT.md 2>/dev/null
+git status --short
+git diff --check
+```
+
+Confirm:
 
-## Handoff report format
+- anchor matches current branch and commit;
+- no old anchor was appended;
+- no transient state leaked into `MEMORY.md`;
+- no duplicate ADR was created;
+- open PR state is visible;
+- `Verified` is evidence-backed;
+- `Next action` is singular and executable.
 
-Present a compact status table, then the anchor:
+If size limits are exceeded, prune. Do not create another summary file to hide the problem.
 
+### 7. Report and suggest `/compact`
+
+```markdown
+| Check | Result | Status |
+|---|---|---|
+| Durable memory | unchanged / updated and pruned | ✓ / ⚠ |
+| ADRs | none / updated / created | ✓ / ⚠ |
+| Git snapshot | branch, commit, clean/dirty | ✓ / ⚠ |
+| Open PRs | none / concise status | ✓ / ⚠ |
+| Resume anchor | overwritten and validated | ✓ / ⚠ |
 ```
-| Check          | Result                                  | Status |
-|----------------|-----------------------------------------|--------|
-| Memory         | MEMORY.md + ADR-022 updated             | ✓      |
-| Git            | tree clean, savepoint a1b2c3d           | ✓      |
-| Open PRs       | gh pr list → 0 open                      | ✓      |
-| Files          | resume anchor written, plan SSOT synced | ✓      |
+
+Then give the four resume fields in concise form and one short pointer:
+
+```text
+/compact Resume from .handoff/CURRENT.md; next: <single action>; <branch>@<sha>; <PR or dirty-state warning if material>
 ```
 
-## Worked example
+## Resume protocol
 
-**Input** (user, at ~78% context):
-> 컴팩션하고 이어서 진행할 수 있게 준비해줘
+After compaction, load only:
 
-**Output:**
+1. repository instructions (`CLAUDE.md` or equivalent);
+2. `MEMORY.md`;
+3. `.handoff/CURRENT.md`;
+4. ADRs referenced by the anchor;
+5. current Git and open-PR state;
+6. source files required for the next action.
 
-Handoff checks:
+Do not auto-load archives, old summaries, raw logs, or the full prior conversation. If Git conflicts
+with the anchor, Git wins; report the discrepancy before continuing.
 
-| Check    | Result                                          | Status |
-|----------|-------------------------------------------------|--------|
-| Memory   | MEMORY.md code-quality-cycle entry refreshed    | ✓      |
-| Git      | tree clean (no savepoint needed)                | ✓      |
-| Open PRs | `gh pr list` → **1 open: #165** CI pass, mergeable | ⚠ surfaced |
-| Files    | resume anchor below; persona-feedback SSOT synced | ✓      |
+## Idempotency checks
 
-**Resume anchor**
-- **Current state:** Persona P0 fixes in progress on branch `fix/persona-p0`. 2 of 4 fixes landed.
-- **Verified:** `npm run ci` exit 0 on current HEAD (typecheck + lint + coverage branches 88.4% + build). Docker scenario for `--with <id>` exit 0.
-- **What's left:** Fixes 3 & 4 (wizard copy + COMPATIBILITY honesty). **Open PR #165 is not merged** — publishing is blocked until P0 complete (per persona-feedback-improvements.md). Branch `fix/persona-p0` unpushed for the last 2 commits.
-- **Next action:** Implement fix 3 (wizard understanding-category copy), then re-run `npm run ci`.
+Every rerun must satisfy:
 
-**Suggested /compact line:**
-`/compact Resume fix/persona-p0: do fix 3 (wizard copy) next, then ci; PR #165 open & blocks publish until all 4 P0 done`
+- `CURRENT.md` replaced, not appended;
+- memory facts updated, not duplicated;
+- ADRs reused, updated, or superseded rather than cloned;
+- no new savepoint without material repository change;
+- one open PR represented once;
+- completed work removed from `What's left`;
+- file sizes remain stable.
 
-Notice what the anchor does deliberately: it leads with the **next action** (working-backwards), keeps
-the open PR visible in "what's left" instead of assuming it shipped, and separates the *verified* CI
-evidence from the *unverified* remaining fixes.
+## Failure handling
 
-## Pitfalls this guards against
+If tools or repository access are unavailable:
 
-- **Lossy summary-stripping** — a headline-only handoff looks complete but is unrecoverable because
-  the evidence and reasoning chains are gone. Fix: preserve-list + ADR provenance, not a prose blob.
-- **Lost-in-the-Middle over-stuffing** — dumping full history into the new window doesn't help;
-  buried facts follow a U-shaped accuracy curve. The anchor stays short and structured.
-- **Telephone-game decay** — fidelity erodes across successive compactions. Routing load-bearing
-  facts to stable memory/ADRs breaks the degradation chain a chain of summaries can't.
-- **Non-atomic snapshot** — handing off with a half-committed tree reconstructs an inconsistent
-  state. The git leg forces a clean or savepoint-committed tree.
-- **Incomplete state save** — omitting the processed-vs-remaining boundary forces duplicate work or
-  silent re-execution of irreversible actions. The "what's left" field is mandatory.
+- do not fabricate Git, PR, CI, or test status;
+- mark unavailable evidence as `not verified`;
+- create the best available anchor from known state;
+- identify missing verification as a blocker or next action when material;
+- do not claim an atomic checkpoint when repository state could not be inspected.
 
-## References
+If durable files cannot be written, do not claim that compaction is safe. Report the failure and emit
+a minimal manual resume anchor in the response.
+
+## Anti-patterns
 
-- Anthropic — *Effective context engineering for AI agents* (Compaction; Structured Note-Taking /
-  Agentic Memory): https://www.anthropic.com/engineering/effective-context-engineering-for-ai-agents
-- Hendricks.ai — Checkpoint patterns (State Completeness, Atomicity, Recovery Automation):
-  https://hendricks.ai/insights/checkpoint-patterns-long-running-ai-agent-tasks
-- XTrace — AI agent context handoff (Decisions / Artifacts / Preferences / Timeline; decision
-  provenance): https://xtrace.ai/blog/ai-agent-context-handoff
-- Architectural Decision Records (ADR) — append-only single-decision records; route load-bearing
-  decisions here so the *why* survives compaction.
-- Amazon *Working Backwards* — lead the anchor with the end state and the single next action.
+- Appending each handoff to `MEMORY.md`.
+- Keeping multiple active anchors.
+- Creating ADRs for routine task progress.
+- Copying complete logs into the anchor.
+- Loading all historical handoffs after compaction.
+- Creating a savepoint commit on every run.
+- Hiding dirty files, failed CI, unpushed commits, or open PRs.
+- Listing several possible next actions instead of one entry point.
 
 ## Related skills
 
-- **strategic-compact** — decides WHEN to compact (phase boundaries, token pressure). Pair with it:
-  it answers "compact now?", this skill executes the handoff when the answer is yes.
-- **git-policy Session Cleanup** — the open-PR check (leg 2) is the same gate; this skill folds it
-  into the pre-compaction moment.
+- **strategic-compact** — decides when to compact.
+- **git-policy Session Cleanup** — defines repository and PR cleanup expectations.

package/templates/project-claude/_base.md

@@ -1,23 +0,0 @@
-# [Project Name]
-
-> 활성 Track(s): <!-- INSERT: track-list -->
->
-> <!-- INSERT: tagline -->
-
-<!-- INSERT: stack -->
-
-<!-- INSERT: workflow -->
-
-<!-- INSERT: active-rules -->
-
-<!-- INSERT: agents -->
-
-<!-- INSERT: skills -->
-
-<!-- INSERT: plugins -->
-
-<!-- INSERT: commands -->
-
-<!-- INSERT: boundaries -->
-
-<!-- INSERT: supabase-auth -->

package/templates/project-claude/fragments/csr-fastapi/active-rules.md

@@ -1,13 +0,0 @@
-| Rule | 설명 |
-|------|------|
-| git-policy | 브랜치 전략, PR 필수, main 직접 커밋 금지 |
-| change-management | 변경 영향 분석, DO NOT CHANGE 영역 보호 |
-| test-policy | 단위/통합/E2E (pytest + Playwright). 커버리지 80% 이상 |
-| ship-checklist | 배포 전 최종 점검 체크리스트 |
-| code-style | 불변성(Pydantic 모델), 소형 파일, 함수 50줄 이하 |
-| error-handling | 명시적 에러 처리. HTTPException 계층화 |
-| design-workflow | UI/UX 설계 프로세스. shape -> build -> polish |
-| tauri | Tauri IPC, 보안 설정, 빌드 구성 |
-| shadcn | shadcn/ui 컴포넌트 사용 규칙, 커스터마이징 패턴 |
-| api-contract | REST API 계약. Pydantic 스키마, OpenAPI 자동 생성 |
-| database | Alembic 마이그레이션, 쿼리 최적화, 인덱스 전략 |

package/templates/project-claude/fragments/csr-fastapi/agents.md

@@ -1,5 +0,0 @@
-| Agent | Scope | Model | 역할 |
-|-------|-------|-------|------|
-| reviewer | global | opus | 검증 전용 (SOD). 코드/문서/UI 관점 전환 |
-| code-reviewer | project | sonnet | 일상적 코드 리뷰. CRITICAL -> LOW 분류 |
-| security-reviewer | project | sonnet | OWASP Top 10, FastAPI 보안 미들웨어 검증 |

package/templates/project-claude/fragments/csr-fastapi/boundaries.md

@@ -1,17 +0,0 @@
-**Always (자동 실행)**:
-- 코드 변경 후 code-reviewer 실행
-- 커밋 전 보안 체크 (하드코딩된 시크릿 탐지)
-- FastAPI 엔드포인트 추가 시 Pydantic 스키마 검증
-- git pull로 세션 시작
-
-**Ask First (확인 후 실행)**:
-- Alembic 마이그레이션 실행 (되돌리기 어려움)
-- Railway 배포
-- Tauri 빌드/릴리스
-- main 브랜치 머지
-
-**Never (금지)**:
-- main 직접 커밋
-- 시크릿 하드코딩
-- 프로덕션 DB 직접 조작
-- DO NOT CHANGE 영역 수정

package/templates/project-claude/fragments/csr-fastapi/commands.md

@@ -1,5 +0,0 @@
-| Namespace | Command | 용도 |
-|-----------|---------|------|
-| ecc: | security-scan, instinct-status, evolve, promote | 보안 스캔, 학습 관리 |
-| imm: | teach, polish, critique, audit, shape, adapt | 디자인 품질 관리 |
-| gsd: | (선택 설치) | 대형 프로젝트 오케스트레이션 |

package/templates/project-claude/fragments/csr-fastapi/plugins.md

@@ -1,2 +0,0 @@
-- **agent-skills**: 개발 워크플로우 백본
-- **Railway**: 배포 자동화 (FastAPI 서비스 + PostgreSQL)

package/templates/project-claude/fragments/csr-fastapi/skills.md

@@ -1,5 +0,0 @@
-- **agent-skills**: 워크플로우 백본 (spec-driven-development, idea-refine)
-- **ECC CL-v2**: instinct 기반 학습. 세션 관찰 -> 패턴 축적
-- **Impeccable**: 프론트엔드 디자인 품질 (polish, critique, audit)
-- **react-best-practices**: React 패턴, 훅 규칙, 상태 관리
-- **shadcn-ui**: shadcn/ui 컴포넌트 가이드, 테마 커스터마이징

package/templates/project-claude/fragments/csr-fastapi/stack.md

@@ -1,6 +0,0 @@
-- **Backend**: FastAPI + Python 3.12+ (uvicorn)
-- **Database**: PostgreSQL (SQLAlchemy / SQLModel)
-- **Frontend**: React + TypeScript + Vite
-- **UI**: shadcn/ui + Tailwind CSS
-- **Desktop**: Tauri (Rust shell)
-- **Infra**: Railway

package/templates/project-claude/fragments/csr-fastapi/tagline.md

@@ -1 +0,0 @@
-FastAPI + React + Tauri 데스크탑 앱을 위한 클라이언트 사이드 렌더링 풀스택 트랙.