arkaos 4.44.0 → 4.46.0

package/core/harness/manifest.py

@@ -0,0 +1,87 @@
+"""Ownership manifest schema for ``~/.arkaos/ownership.json`` (PR-C1).
+
+The manifest is the C2 manager's record of WHICH harness surfaces
+ArkaOS claims and UNDER WHICH policy. C1 ships only the schema and a
+tolerant loader — nothing here writes the file, and the default
+manifest is DERIVED from ``core.harness.spec`` so the two can never
+disagree about which surfaces exist.
+
+Policy vocabulary (decided in the 2026-07-26 campaign plan, C2):
+
+- ``own``        — ArkaOS replaces the surface wholesale on assert.
+- ``own-subset`` — ArkaOS guarantees its own entries exist; operator
+  entries on the same surface are never removed.
+- ``seed``       — written only when absent; an operator edit is
+  ADOPTED (drift reports it, assert never reverts it).
+- ``operator``   — ArkaOS never touches the surface.
+"""
+
+from __future__ import annotations
+
+from enum import StrEnum
+from pathlib import Path
+
+from pydantic import BaseModel, Field, ValidationError
+
+from core.harness import json_store
+from core.harness import spec as harness_spec
+
+
+class OwnershipPolicy(StrEnum):
+    """How ArkaOS treats one harness surface."""
+
+    OWN = "own"
+    OWN_SUBSET = "own-subset"
+    SEED = "seed"
+    OPERATOR = "operator"
+
+
+class SurfaceRecord(BaseModel):
+    """One claimed surface and the policy it is held under."""
+
+    surface: str = Field(description="Stable surface id, e.g. settings:hooks")
+    policy: OwnershipPolicy
+    last_asserted: str | None = Field(
+        default=None,
+        description="ISO-8601 timestamp of the last C2 assert; C1 never sets it",
+    )
+    content_sha256: str | None = Field(
+        default=None,
+        description="Digest of the ArkaOS-owned content at last assert",
+    )
+
+
+class OwnershipManifest(BaseModel):
+    """The full ownership manifest for one runtime."""
+
+    version: int = 1
+    runtime: str = "claude-code"
+    surfaces: list[SurfaceRecord] = Field(default_factory=list)
+
+    @classmethod
+    def default(cls, runtime: str = "claude-code") -> OwnershipManifest:
+        """Manifest derived from the runtime spec's surface table."""
+        runtime_spec = harness_spec.spec_for(runtime)
+        return cls(
+            runtime=runtime,
+            surfaces=[
+                SurfaceRecord(surface=s.surface, policy=OwnershipPolicy(s.policy))
+                for s in runtime_spec.surfaces
+            ],
+        )
+
+
+def load_manifest(path: Path) -> tuple[OwnershipManifest | None, str | None]:
+    """Tolerant manifest load: ``(manifest, None)`` or ``(None, error)``.
+
+    Error vocabulary extends ``json_store.LoadResult`` with
+    ``invalid-schema`` — a file that parses as JSON but does not
+    validate is reported, never raised.
+    """
+    result = json_store.load_json(path)
+    if not result.ok:
+        return None, result.error
+    try:
+        return OwnershipManifest.model_validate(result.data), None
+    except ValidationError:
+        return None, "invalid-schema"

package/core/harness/paths.py

@@ -0,0 +1,72 @@
+"""Canonical harness paths, resolved at call time.
+
+Every path here takes an explicit override — ``home`` for the
+user-tree paths (defaulting to ``Path.home()``), ``root`` for
+``hooks_dir`` — resolved at CALL time, so tests and the C2 manager can
+operate on an alternate tree without monkeypatching. Nothing here is a
+module-level constant: paths captured at import bind to whatever root
+the importing process started with, which is exactly the split-root
+failure mode PR-A2 closed (``ARKAOS_ROOT`` in the shell pointing one
+way, ``.repo-path`` another).
+"""
+
+from __future__ import annotations
+
+from pathlib import Path
+
+from core.hooks._shared import resolve_arkaos_root
+
+
+def claude_home(home: Path | None = None) -> Path:
+    """``~/.claude`` — the Claude Code configuration tree."""
+    return (home or Path.home()) / ".claude"
+
+
+def claude_settings_path(home: Path | None = None) -> Path:
+    """``~/.claude/settings.json`` — the executed harness surface."""
+    return claude_home(home) / "settings.json"
+
+
+def claude_global_md_path(home: Path | None = None) -> Path:
+    """``~/.claude/CLAUDE.md`` — global instructions (C5 managed block)."""
+    return claude_home(home) / "CLAUDE.md"
+
+
+def arkaos_home(home: Path | None = None) -> Path:
+    """``~/.arkaos`` — ArkaOS user-mutable data."""
+    return (home or Path.home()) / ".arkaos"
+
+
+def ownership_manifest_path(home: Path | None = None) -> Path:
+    """``~/.arkaos/ownership.json`` — the C2 ownership manifest."""
+    return arkaos_home(home) / "ownership.json"
+
+
+def audit_dir(home: Path | None = None) -> Path:
+    """``~/.arkaos/audit`` — mutation audit trails."""
+    return arkaos_home(home) / "audit"
+
+
+def harness_audit_log_path(home: Path | None = None) -> Path:
+    """``~/.arkaos/audit/harness-mutations.jsonl`` (written by C2)."""
+    return audit_dir(home) / "harness-mutations.jsonl"
+
+
+def hard_deny_extension_path(home: Path | None = None) -> Path:
+    """``~/.arkaos/hard-deny.json`` — operator hard-deny extensions."""
+    return arkaos_home(home) / "hard-deny.json"
+
+
+def arkaos_config_path(home: Path | None = None) -> Path:
+    """``~/.arkaos/config.json`` — feature flags (hardEnforcement, ...)."""
+    return arkaos_home(home) / "config.json"
+
+
+def hooks_dir(root: str | None = None) -> Path:
+    """``<arkaos-root>/config/hooks`` — the deployed hook scripts.
+
+    The root goes through the PR-A2 validated chain
+    (``core.hooks._shared.resolve_arkaos_root``) at call time; passing
+    ``root`` overrides it for tests.
+    """
+    return Path(root or resolve_arkaos_root()) / "config" / "hooks"

package/core/harness/spec.py

@@ -0,0 +1,182 @@
+"""Desired-state harness spec, keyed by runtime (PR-C1).
+
+Until now the desired state of the operator's harness lived only inside
+installer JavaScript: ``installer/hard-deny.js`` (the curated hard-deny
+rules) and ``installer/adapters/claude-code.js`` (which hook events get
+registered, with which scripts and timeouts). This module is the Python
+port that ``drift`` (C1) and the ``ClaudeConfigManager`` (C2) read.
+
+PARITY IS PINNED, NOT PROMISED: ``tests/python/test_harness_spec.py``
+parses both JS sources and asserts this module matches them — rule
+list in full, same content and order, hook registrations by
+event/script/timeout/matcher. Editing either side without the other
+fails the suite. The installer files remain the EXECUTED path until C4
+flips ownership.
+
+``config/settings-template.json`` is NOT a source here — the template
+is not the executed path (PR-B5 lesson: it declared agent-provision for
+months while the adapter never registered it).
+"""
+
+from __future__ import annotations
+
+from dataclasses import dataclass
+
+# Port of DEFAULT_HARD_DENY_RULES in installer/hard-deny.js — same
+# rules, same order. Parity-pinned by test_harness_spec.py.
+HARD_DENY_RULES: tuple[str, ...] = (
+    # Destructive git operations
+    "Bash(git push --force*)",
+    "Bash(git push -f*)",
+    "Bash(git reset --hard*)",
+    "Bash(git clean -fd*)",
+    "Bash(git branch -D*)",
+    # Filesystem destruction
+    "Bash(rm -rf /*)",
+    "Bash(rm -rf ~/*)",
+    "Bash(rm -rf ~)",
+    "Bash(rm -rf .*)",
+    # Secrets and credential paths
+    "Read(~/.ssh/*)",
+    "Read(~/.ssh/**)",
+    "Read(~/.aws/credentials)",
+    "Read(~/.aws/config)",
+    "Read(~/.gnupg/*)",
+    "Read(~/.gnupg/**)",
+    "Read(~/.npmrc)",
+    "Read(~/.docker/config.json)",
+    "Read(~/.config/gh/*)",
+    "Read(/etc/shadow)",
+    "Read(/etc/sudoers)",
+    # Writes to credential / config dirs
+    "Write(~/.ssh/*)",
+    "Write(~/.aws/credentials)",
+    "Write(~/.gnupg/*)",
+    "Write(~/.npmrc)",
+    # Process / privilege escalation
+    "Bash(sudo *)",
+    "Bash(su -*)",
+    "Bash(chmod 777*)",
+    "Bash(curl * | sh*)",  # arka:sec-ok(curl-pipe-shell): deny-rule literal
+    "Bash(curl * | bash*)",  # arka:sec-ok(curl-pipe-shell): deny-rule literal
+    "Bash(wget * | sh*)",
+    "Bash(wget * | bash*)",
+)
+
+
+@dataclass(frozen=True)
+class HookRegistration:
+    """One hook entry the adapter writes into ``settings.json``.
+
+    ``script`` is the basename without extension — the adapter picks
+    ``.sh`` / ``.ps1`` / ``.cjs`` per platform and fastpath, so drift
+    matching accepts any of the three.
+    """
+
+    event: str
+    script: str
+    timeout: int
+    matcher: str | None = None
+    posix_only: bool = False
+    conditional: bool = False
+
+
+# Port of the settings.hooks registrations in
+# installer/adapters/claude-code.js — parity-pinned.
+_CLAUDE_CODE_HOOKS: tuple[HookRegistration, ...] = (
+    HookRegistration("SessionStart", "session-start", 15),
+    HookRegistration("UserPromptSubmit", "user-prompt-submit", 20),
+    HookRegistration("PostToolUse", "post-tool-use", 5),
+    HookRegistration("PostToolUseFailure", "post-tool-use", 5),
+    HookRegistration("PreToolUse", "pre-tool-use", 10),
+    HookRegistration(
+        "PreToolUse",
+        "agent-provision",
+        10,
+        matcher="Task",
+        posix_only=True,
+        conditional=True,
+    ),
+    HookRegistration("Stop", "stop", 5),
+    HookRegistration("SubagentStop", "subagent-stop", 10),
+    HookRegistration("SessionEnd", "session-end", 15),
+    HookRegistration("PreCompact", "pre-compact", 30),
+    HookRegistration("CwdChanged", "cwd-changed", 5),
+)
+
+
+@dataclass(frozen=True)
+class SurfaceSpec:
+    """One harness surface ArkaOS claims, with its default policy.
+
+    ``policy`` values are the ``manifest.OwnershipPolicy`` vocabulary;
+    kept as strings here so ``spec`` stays import-light (manifest
+    imports spec, not the reverse).
+    """
+
+    surface: str
+    policy: str
+    detail: str
+
+
+_CLAUDE_CODE_SURFACES: tuple[SurfaceSpec, ...] = (
+    SurfaceSpec(
+        "settings:hooks",
+        "own-subset",
+        "ArkaOS hook entries per event; user hooks on the same events stay",
+    ),
+    SurfaceSpec(
+        "settings:autoMode.hard_deny",
+        "own-subset",
+        "Curated deny rules merged in; operator rules are never removed",
+    ),
+    SurfaceSpec(
+        "settings:statusLine",
+        "seed",
+        "Branded status bar; an operator replacement is adopted once "
+        "C2 owns the surface",
+    ),
+    SurfaceSpec(
+        "settings:worktree",
+        "seed",
+        "worktree.baseRef default; an operator change is adopted once "
+        "C2 owns the surface",
+    ),
+)
+
+
+@dataclass(frozen=True)
+class RuntimeSpec:
+    """The desired harness state for one runtime."""
+
+    runtime: str
+    hook_registrations: tuple[HookRegistration, ...]
+    hard_deny_rules: tuple[str, ...]
+    surfaces: tuple[SurfaceSpec, ...]
+
+
+_RUNTIME_SPECS: dict[str, RuntimeSpec] = {
+    "claude-code": RuntimeSpec(
+        runtime="claude-code",
+        hook_registrations=_CLAUDE_CODE_HOOKS,
+        hard_deny_rules=HARD_DENY_RULES,
+        surfaces=_CLAUDE_CODE_SURFACES,
+    ),
+}
+
+SUPPORTED_RUNTIMES: tuple[str, ...] = tuple(sorted(_RUNTIME_SPECS))
+
+
+def spec_for(runtime: str) -> RuntimeSpec:
+    """The :class:`RuntimeSpec` for ``runtime``.
+
+    Raises ``ValueError`` for an unknown runtime — a silent empty spec
+    would make drift report a perfectly-owned harness for a runtime
+    this package knows nothing about.
+    """
+    try:
+        return _RUNTIME_SPECS[runtime]
+    except KeyError:
+        raise ValueError(
+            f"unknown runtime {runtime!r}; supported: {', '.join(SUPPORTED_RUNTIMES)}"
+        ) from None

package/core/hooks/session_start.py

@@ -76,6 +76,22 @@ _EVIDENCE_CONTRACT = (
     " 10 lines."
 )
 
+# PR-A4: routing was fulfilled in PROSE — the model announced the squad
+# and never invoked the Skill tool, so the department's workflows and
+# contracts never entered context (the label without the payload). This
+# contract defines fulfilment; enforcement stays with A5a/A5b,
+# telemetry-gated.
+_SKILL_ROUTING_CONTRACT = (
+    "\n\n[ARKA:SKILL-CONTRACT] Routing IS tool invocation. A department"
+    " route is fulfilled by calling the department's hub skill — e.g."
+    " Skill(arka-dev), Skill(arka-brand), Skill(arka-content) — BEFORE"
+    " substantive work; announcing the squad in prose without invoking"
+    " the skill is not routing; it is the label without the payload."
+    "\nNever derive a hub name by concatenation — [arka:skill-hint] tags"
+    " name the exact call to make. The [arka:trivial] bypass is"
+    " unchanged."
+)
+
 _META_TAG_CONTRACT = (
     "\n\n[ARKA:META-TAG] Every substantive response ends with a single line:"
     "\n  [arka:meta] kb=N research=X persona=Y gap=Z critic=W"
@@ -348,6 +364,7 @@ def build_context(cwd: str) -> str:
     """
     parts = [
         _EVIDENCE_CONTRACT,
+        _SKILL_ROUTING_CONTRACT,
         _META_TAG_CONTRACT,
         _authority_brief(cwd),
         _model_fabric(),

package/core/runtime/opencode_hooks.py

@@ -31,7 +31,7 @@ import os
 import re
 import subprocess
 import sys
-from datetime import datetime, timezone
+from datetime import UTC, datetime
 from pathlib import Path
 
 _TELEMETRY_DIR = Path.home() / ".arkaos" / "telemetry"
@@ -135,7 +135,10 @@ def _load_commands_registry() -> list[dict]:
 
 def _routing_lines(prompt: str, session_id: str, cwd: str) -> list[str]:
     """UserPromptSubmit routing parity (core/hooks/user_prompt_submit.py):
-    [ARKA:ROUTE] on every prompt + L1 [dept:X] + L5 [hint:/cmd] +
+    [ARKA:ROUTE] on every prompt + L1 [dept:X] + L5 [arka:skill-hint]
+    Skill(<hub>) -> /cmd (PR-A4 imperative form; hub resolved by
+    layers._hub_skill, never by slug concatenation — a /mkt hint
+    renders Skill(arka-marketing)) +
     [ARKA:WORKFLOW-REQUIRED] on creation/implementation prompts. The
     directive strings and the verb regex are IMPORTED from the claude
     hook — one source of truth, zero drift."""
@@ -170,7 +173,7 @@ def _routing_lines(prompt: str, session_id: str, cwd: str) -> list[str]:
             hints = CommandHintsLayer(commands=commands).compute(ctx)
             if hints.tag:
                 lines.append(hints.tag)
-    except Exception:  # noqa: BLE001 — routing hints are a bonus, never a blocker
+    except Exception:
         pass
     if prompt[0] not in ("/", "!") and _WF_VERB_RE.search(prompt):
         lines.append(_WORKFLOW_DIRECTIVE.strip())
@@ -285,7 +288,7 @@ def _action_post_tool(payload: dict) -> dict:
     _append_jsonl(
         _TELEMETRY_DIR / "opencode-tools.jsonl",
         {
-            "ts": datetime.now(timezone.utc).isoformat(),
+            "ts": datetime.now(UTC).isoformat(),
             "session": session_id,
             "tool": mapped,
             "ok": bool(payload.get("ok", True)),
@@ -319,7 +322,7 @@ def _enqueue_turn_capture(session_id: str, text: str, cwd: str) -> None:
                 proc.stdin.close()
             except (BrokenPipeError, OSError):
                 pass
-    except Exception:  # noqa: BLE001 — a hook bridge never breaks a turn
+    except Exception:
         pass
 
 
@@ -347,7 +350,7 @@ def _action_idle(payload: dict) -> dict:
     _append_jsonl(
         _TELEMETRY_DIR / "opencode-compliance.jsonl",
         {
-            "ts": datetime.now(timezone.utc).isoformat(),
+            "ts": datetime.now(UTC).isoformat(),
             "session": session_id,
             "kb_cite": result.reason,
             "meta_tag": "[arka:meta]" in text,
@@ -388,7 +391,7 @@ def _handoff_line(session_id: str, project: str) -> str:
     try:
         _handoff_marker(session_id).parent.mkdir(parents=True, exist_ok=True)
         _handoff_marker(session_id).write_text(
-            json.dumps({"shown_at": datetime.now(timezone.utc).isoformat()}),
+            json.dumps({"shown_at": datetime.now(UTC).isoformat()}),
             encoding="utf-8",
         )
     except OSError:
@@ -440,7 +443,7 @@ def _action_memory(payload: dict) -> dict:
         handoff = _handoff_line(session_id, project)
         if handoff:
             lines.insert(0, handoff)
-    except Exception:  # noqa: BLE001 — memory is a bonus, never a blocker
+    except Exception:
         return {"context": []}
     return {"context": lines[:6]}
 
@@ -460,7 +463,7 @@ def _action_compact(payload: dict) -> dict:
         current = state.get_state()
         if current:
             context.append(f"Workflow activo: {json.dumps(current)[:400]}")
-    except Exception:  # noqa: BLE001 — fail-open
+    except Exception:
         pass
     return {"context": context}
 
@@ -488,7 +491,7 @@ def main() -> int:
     else:
         try:
             result = handler(payload)
-        except Exception as exc:  # noqa: BLE001 — fail-open, never block
+        except Exception as exc:
             result = {"error": f"{type(exc).__name__}: {exc}"}
     sys.stdout.write(json.dumps(result, ensure_ascii=False) + "\n")
     return 0

package/core/synapse/layers.py

@@ -386,8 +386,89 @@ class BranchLayer(Layer):
 # --- L5: Command Hints ---
 
 
+# PR-A4: department slug -> deployed hub-skill directory. Both slug
+# vocabularies reach this layer — the registry department field (which
+# says "leadership") and the command-prefix slugs (which say "lead") —
+# and both must resolve. Registry values need no key: identity already
+# yields the right hub (leadership -> arka-leadership). The keys exist
+# for the four prefix slugs whose hub directory differs (mkt, fin,
+# strat, lead — the same alias set
+# tests/python/test_skill_routing_integrity.py pins) plus the two
+# orchestrator entries ("arka" and "do" both belong to the main
+# orchestrator skill; /do is the universal router in arka/SKILL.md).
+# An unknown department falls back to the identity form — a
+# wrong-but-plausible hint beats a crashed layer.
+_DEPT_HUB_EXCEPTIONS = {
+    "mkt": "arka-marketing",
+    "fin": "arka-finance",
+    "strat": "arka-strategy",
+    "lead": "arka-leadership",
+    "arka": "arka",
+    "do": "arka",
+}
+
+
+def _hub_skill(department: str) -> str:
+    return _DEPT_HUB_EXCEPTIONS.get(department, f"arka-{department}")
+
+
+def _hint_department(cmd: dict) -> str:
+    """Department for the hint's hub skill.
+
+    Falls back to the command prefix ("/dev feature" -> "dev",
+    "/arka-do" -> "arka") for registry entries that predate the
+    department field — an approximate hub beats no hint.
+    """
+    dept = str(cmd.get("department", ""))
+    if dept:
+        return dept
+    prefix = str(cmd.get("command", "")).lstrip("/").split(" ")[0]
+    return prefix.split("-")[0]
+
+
+def _score_commands(
+    commands: list[dict], text: str
+) -> list[tuple[int, str, str]]:
+    """Keyword-score the registry commands against the prompt text,
+    best score first; zero-score commands never qualify."""
+    scored = []
+    for cmd in commands:
+        keywords = cmd.get("keywords", [])
+        score = sum(1 for kw in keywords if kw.lower() in text)
+        if score > 0:
+            scored.append((
+                score,
+                cmd.get("command", ""),
+                _hint_department(cmd),
+            ))
+    scored.sort(reverse=True)
+    return scored
+
+
+def _hint_tag(top: list[tuple[int, str, str]]) -> str:
+    """Render the imperative hint tag for the top-scored commands.
+
+    EACH hint pairs the command with ITS OWN department's hub — the
+    top-2 can legitimately span two departments ("standup color
+    palette" matches /brand colors AND /pm story on the live registry),
+    and a hint whose hub belongs to the other command is a dead
+    instruction (QG A4, Francisca B1).
+    """
+    return " ".join(
+        f"[arka:skill-hint] Skill({_hub_skill(dept)}) -> {command}"
+        for _, command, dept in top
+    )
+
+
 class CommandHintsLayer(Layer):
-    """L5: Matching commands from the registry for non-explicit requests."""
+    """L5: Matching commands from the registry for non-explicit requests.
+
+    PR-A4: hints are IMPERATIVE — `[arka:skill-hint] Skill(arka-dev) ->
+    /dev feature <description>` names the exact tool call that fulfils
+    the route. The old `[hint:/cmd]` form was declarative and routinely
+    ignored: the model announced the squad in prose and the skill's
+    content never entered context.
+    """
 
     def __init__(self, commands: list[dict] | None = None) -> None:
         self._commands = commands or []
@@ -429,18 +510,10 @@ class CommandHintsLayer(Layer):
                 cached=False,
             )
 
-        # Score commands by keyword match
-        scored = []
-        for cmd in self._commands:
-            keywords = cmd.get("keywords", [])
-            score = sum(1 for kw in keywords if kw.lower() in text)
-            if score > 0:
-                scored.append((score, cmd.get("command", "")))
-
-        scored.sort(reverse=True)
-        hints = [cmd for _, cmd in scored[:2]]
+        top = _score_commands(self._commands, text)[:2]
+        hints = [command for _, command, _ in top]
 
-        tags = " ".join(f"[hint:{h}]" for h in hints)
+        tags = _hint_tag(top)
         ms = int((time.time() - start) * 1000)
         return LayerResult(
             layer_id=self.id,

package/harness/codex/AGENTS.md

@@ -1,6 +1,6 @@
 # ArkaOS — The Operating System for AI Agent Teams
 
-> v4.44.0 — 89 agents, 17 departments, 332 skills. Generated by `scripts/harness_gen.py`; do not edit.
+> v4.46.0 — 89 agents, 17 departments, 332 skills. Generated by `scripts/harness_gen.py`; do not edit.
 
 You are operating within ArkaOS. Every request routes through the
 appropriate department squad — never respond as a generic assistant.

package/harness/copilot/copilot-instructions.md

@@ -1,6 +1,6 @@
 # ArkaOS — The Operating System for AI Agent Teams
 
-> v4.44.0 — 89 agents, 17 departments, 332 skills. Generated by `scripts/harness_gen.py`; do not edit.
+> v4.46.0 — 89 agents, 17 departments, 332 skills. Generated by `scripts/harness_gen.py`; do not edit.
 
 You are operating within ArkaOS. Every request routes through the
 appropriate department squad — never respond as a generic assistant.

package/harness/cursor/rules/arkaos.mdc

@@ -1,11 +1,11 @@
 ---
-description: ArkaOS v4.44.0 agent-team contract
+description: ArkaOS v4.46.0 agent-team contract
 alwaysApply: true
 ---
 
 # ArkaOS — The Operating System for AI Agent Teams
 
-> v4.44.0 — 89 agents, 17 departments, 332 skills. Generated by `scripts/harness_gen.py`; do not edit.
+> v4.46.0 — 89 agents, 17 departments, 332 skills. Generated by `scripts/harness_gen.py`; do not edit.
 
 You are operating within ArkaOS. Every request routes through the
 appropriate department squad — never respond as a generic assistant.

package/harness/gemini/GEMINI.md

@@ -1,6 +1,6 @@
 # ArkaOS — The Operating System for AI Agent Teams
 
-> v4.44.0 — 89 agents, 17 departments, 332 skills. Generated by `scripts/harness_gen.py`; do not edit.
+> v4.46.0 — 89 agents, 17 departments, 332 skills. Generated by `scripts/harness_gen.py`; do not edit.
 
 You are operating within ArkaOS. Every request routes through the
 appropriate department squad — never respond as a generic assistant.

package/harness/opencode/AGENTS.md

@@ -1,6 +1,6 @@
 # ArkaOS — The Operating System for AI Agent Teams
 
-> v4.44.0 — 89 agents, 17 departments, 332 skills. Generated by `scripts/harness_gen.py`; do not edit.
+> v4.46.0 — 89 agents, 17 departments, 332 skills. Generated by `scripts/harness_gen.py`; do not edit.
 
 You are operating within ArkaOS. Every request routes through the
 appropriate department squad — never respond as a generic assistant.

package/harness/opencode/agents/arka-architect-gabriel.md

@@ -3,7 +3,7 @@ description: "Software Architect — ArkaOS /dev department"
 mode: subagent
 ---
 
-You are Gabriel, Software Architect of the ArkaOS /dev department (v4.44.0; generated by scripts/harness_gen.py — do not edit).
+You are Gabriel, Software Architect of the ArkaOS /dev department (v4.46.0; generated by scripts/harness_gen.py — do not edit).
 
 Expertise: system design, system visualization via dev/diagram (architecture + dataflow diagrams delivered as browser artifacts), domain modeling (event storming, bounded contexts), design patterns (GoF, PoEAA), business / domain analysis, API design.
 

package/harness/opencode/agents/arka-brand-director-valentina.md

@@ -3,7 +3,7 @@ description: "Creative Director — ArkaOS /brand department"
 mode: subagent
 ---
 
-You are Valentina, Creative Director of the ArkaOS /brand department (v4.44.0; generated by scripts/harness_gen.py — do not edit).
+You are Valentina, Creative Director of the ArkaOS /brand department (v4.46.0; generated by scripts/harness_gen.py — do not edit).
 
 Expertise: brand identity creation, reference-video visual analysis via dev/watch (complete frames + transcript — motion and art direction judged on evidence, never on screenshots), visual design direction, UX/UI strategy, design systems, brand voice & tone.
 

package/harness/opencode/agents/arka-cfo-helena.md

@@ -3,7 +3,7 @@ description: "Chief Financial Officer — ArkaOS /fin department"
 mode: subagent
 ---
 
-You are Helena, Chief Financial Officer of the ArkaOS /fin department (v4.44.0; generated by scripts/harness_gen.py — do not edit).
+You are Helena, Chief Financial Officer of the ArkaOS /fin department (v4.46.0; generated by scripts/harness_gen.py — do not edit).
 
 Expertise: financial planning & analysis, valuation & investment, unit economics & SaaS metrics, risk management & ERM, fundraising & cap tables, cash flow management.
 

package/harness/opencode/agents/arka-chief-of-staff-afonso.md

@@ -3,7 +3,7 @@ description: "Chief of Staff & Governance Lead — ArkaOS /org department"
 mode: subagent
 ---
 
-You are Afonso, Chief of Staff & Governance Lead of the ArkaOS /org department (v4.44.0; generated by scripts/harness_gen.py — do not edit).
+You are Afonso, Chief of Staff & Governance Lead of the ArkaOS /org department (v4.46.0; generated by scripts/harness_gen.py — do not edit).
 
 Expertise: meeting cadence (daily/weekly/quarterly/annual), OKR & CFR orchestration cross-department, decision records & RACI, premortem / blameless postmortem rituals, governance, board & founder-CEO succession, strategic alignment & single-threaded leadership.