coding-agent-harness 1.0.1 → 1.0.4

package/scripts/lib/dashboard-workbench.mjs

@@ -0,0 +1,257 @@
+import crypto from "node:crypto";
+import { spawn } from "node:child_process";
+import fs from "node:fs";
+import http from "node:http";
+import path from "node:path";
+import { URL } from "node:url";
+import { confirmTaskReview } from "./task-lifecycle.mjs";
+import { createLessonSedimentationTask } from "./task-lesson-sedimentation.mjs";
+import { normalizeTarget } from "./core-shared.mjs";
+import { collectTasks } from "./task-scanner.mjs";
+import { writeDashboardFolder } from "./dashboard-data.mjs";
+
+const jsonHeaders = { "content-type": "application/json; charset=utf-8", "cache-control": "no-store" };
+
+export async function serveDashboardWorkbench(outDir, targetInput, { host = "127.0.0.1", port = 0, localeOverride = "", autoRefresh = false, open = false, label = "dashboard workbench", recoverGeneratedDashboard = false } = {}) {
+  if (host !== "127.0.0.1") throw new Error("dashboard workbench only supports --host 127.0.0.1");
+  const target = normalizeTarget(targetInput);
+  const outputDir = path.resolve(outDir);
+  const csrfToken = crypto.randomBytes(24).toString("hex");
+  const options = localeOverride ? { localeOverride } : {};
+  let snapshotVersion = Date.now();
+  const regenerate = () => {
+    writeDashboardFolder(outputDir, targetInput, { ...options, workbenchRuntime: true, recoverGeneratedDashboard });
+    snapshotVersion = Date.now();
+  };
+  regenerate();
+
+  const server = http.createServer(async (request, response) => {
+    try {
+      const address = server.address();
+      const actualPort = typeof address === "object" && address ? address.port : port;
+      const origin = `http://${host}:${actualPort}`;
+      const requestUrl = new URL(request.url || "/", origin);
+
+      if (requestUrl.pathname === "/api/runtime" && request.method === "GET") {
+        writeJson(response, 200, {
+          mode: "workbench",
+          csrfToken,
+          writableActions: ["review-complete", "lesson-sedimentation-task"],
+          target: target.projectRoot,
+          autoRefresh: autoRefresh === true,
+          snapshotVersion,
+        });
+        return;
+      }
+
+      if (requestUrl.pathname === "/api/tasks/review-complete" && request.method === "POST") {
+        assertTrustedWorkbenchRequest(request, { origin, csrfToken });
+        const body = await readJsonBody(request);
+        const taskId = String(body.taskId || "");
+        const task = collectTasks(target).find((item) => item.id === taskId);
+        if (!task) {
+          writeJson(response, 404, { error: "Task not found" });
+          return;
+        }
+        if (!isTaskInReviewQueue(task)) {
+          writeJson(response, 409, reviewQueueRejectionPayload(task));
+          return;
+        }
+        if (task.reviewStatus === "confirmed") {
+          writeJson(response, 409, { error: "Review is already confirmed." });
+          return;
+        }
+        const result = confirmTaskReview(target.projectRoot, taskId, {
+          reviewer: body.reviewer || "Human Reviewer",
+          message: body.message || "confirmed from dashboard workbench",
+          evidence: body.evidence || "",
+          confirmText: body.confirmText || "",
+        });
+        regenerate();
+        writeJson(response, 200, result);
+        return;
+      }
+
+      if (requestUrl.pathname === "/api/tasks/lesson-sedimentation" && request.method === "POST") {
+        assertTrustedWorkbenchRequest(request, { origin, csrfToken });
+        const body = await readJsonBody(request);
+        const taskId = String(body.taskId || "");
+        const candidateId = String(body.candidateId || "");
+        const task = collectTasks(target).find((item) => item.id === taskId);
+        if (!task) {
+          writeJson(response, 404, { error: "Task not found" });
+          return;
+        }
+        if (!candidateId) {
+          writeJson(response, 400, { error: "Missing lesson candidate id" });
+          return;
+        }
+        const result = createLessonSedimentationTask(target.projectRoot, taskId, candidateId, {
+          title: body.title || "",
+        });
+        regenerate();
+        writeJson(response, 200, result);
+        return;
+      }
+
+      if (request.method !== "GET" && request.method !== "HEAD") {
+        writeJson(response, 405, { error: "Method not allowed" });
+        return;
+      }
+      serveStaticFile(response, outputDir, requestUrl.pathname, request.method === "HEAD");
+    } catch (error) {
+      const status = error.status || (/CSRF|Origin|Host/.test(error.message) ? 403 : 400);
+      writeJson(response, status, errorPayload(error));
+    }
+  });
+
+  await new Promise((resolve, reject) => {
+    server.once("error", reject);
+    server.listen(Number(port), host, resolve);
+  });
+  const address = server.address();
+  const actualPort = typeof address === "object" && address ? address.port : port;
+  const url = `http://${host}:${actualPort}/`;
+  let watcher = null;
+  if (autoRefresh) watcher = startPollingWatch(target.docsRoot, regenerate);
+  console.log(`${label}: ${url} csrf=${csrfToken} outDir=${outputDir}`);
+  if (open) openBrowser(url);
+
+  const close = () => {
+    if (watcher) clearInterval(watcher);
+    server.close(() => process.exit(0));
+  };
+  process.once("SIGINT", close);
+  process.once("SIGTERM", close);
+  await new Promise(() => {});
+}
+
+function isTaskInReviewQueue(task) {
+  return task?.reviewQueueState === "ready-to-confirm" && Array.isArray(task?.taskQueues) && task.taskQueues.includes("review");
+}
+
+function reviewQueueRejectionPayload(task) {
+  return {
+    error: "Review completion is only available for tasks in the review queue.",
+    reviewQueueState: task?.reviewQueueState || "unknown",
+    taskQueues: Array.isArray(task?.taskQueues) ? task.taskQueues : [],
+    queueReasons: Array.isArray(task?.queueReasons) ? task.queueReasons : [],
+    repairPrompt: task?.repairPrompt || "",
+    reviewStatus: task?.reviewStatus || "unknown",
+    taskId: task?.id || "",
+  };
+}
+
+function startPollingWatch(root, regenerate) {
+  let lastMtime = latestTreeMtime(root);
+  let timer = null;
+  return setInterval(() => {
+    const nextMtime = latestTreeMtime(root);
+    if (nextMtime <= lastMtime) return;
+    lastMtime = nextMtime;
+    clearTimeout(timer);
+    timer = setTimeout(() => {
+      try {
+        regenerate();
+      } catch (error) {
+        console.error(`dashboard regeneration failed: ${error.message}`);
+      }
+    }, 250);
+  }, 1000);
+}
+
+function latestTreeMtime(root) {
+  let latest = 0;
+  if (!fs.existsSync(root)) return latest;
+  const visit = (dir) => {
+    for (const entry of fs.readdirSync(dir, { withFileTypes: true })) {
+      if ([".git", "node_modules", "tmp"].includes(entry.name)) continue;
+      const fullPath = path.join(dir, entry.name);
+      const stat = fs.statSync(fullPath);
+      latest = Math.max(latest, stat.mtimeMs);
+      if (entry.isDirectory()) visit(fullPath);
+    }
+  };
+  visit(root);
+  return latest;
+}
+
+function openBrowser(url) {
+  const command =
+    process.platform === "darwin" ? "open" :
+    process.platform === "win32" ? "cmd" :
+    "xdg-open";
+  const args = process.platform === "win32" ? ["/c", "start", "", url] : [url];
+  const child = spawn(command, args, { stdio: "ignore", detached: true });
+  child.on("error", () => {});
+  child.unref();
+}
+
+function assertTrustedWorkbenchRequest(request, { origin, csrfToken }) {
+  const host = request.headers.host || "";
+  if (host !== origin.replace(/^http:\/\//, "")) throw new Error("Host mismatch");
+  if (request.headers.origin !== origin) throw new Error("Origin mismatch");
+  if (request.headers["x-harness-csrf"] !== csrfToken) throw new Error("CSRF token mismatch");
+}
+
+function readJsonBody(request) {
+  return new Promise((resolve, reject) => {
+    let raw = "";
+    request.setEncoding("utf8");
+    request.on("data", (chunk) => {
+      raw += chunk;
+      if (raw.length > 32_768) {
+        reject(new Error("Request body too large"));
+        request.destroy();
+      }
+    });
+    request.on("end", () => {
+      try {
+        resolve(raw ? JSON.parse(raw) : {});
+      } catch {
+        reject(new Error("Invalid JSON body"));
+      }
+    });
+    request.on("error", reject);
+  });
+}
+
+function serveStaticFile(response, outputDir, urlPath, headOnly) {
+  const decoded = decodeURIComponent(urlPath);
+  const relative = decoded === "/" ? "index.html" : decoded.replace(/^\/+/, "");
+  const filePath = path.resolve(outputDir, relative);
+  if (!isPathInside(filePath, outputDir) || !fs.existsSync(filePath) || fs.statSync(filePath).isDirectory()) {
+    writeJson(response, 404, { error: "Not found" });
+    return;
+  }
+  response.writeHead(200, { "content-type": mimeType(filePath), "cache-control": "no-store" });
+  if (!headOnly) response.end(fs.readFileSync(filePath));
+  else response.end();
+}
+
+function writeJson(response, status, payload) {
+  response.writeHead(status, jsonHeaders);
+  response.end(`${JSON.stringify(payload)}\n`);
+}
+
+function errorPayload(error) {
+  const payload = { error: error.message };
+  if (error.code) payload.code = error.code;
+  if (Array.isArray(error.recovery) && error.recovery.length > 0) payload.recovery = error.recovery;
+  if (error.details) payload.details = error.details;
+  return payload;
+}
+
+function mimeType(filePath) {
+  if (filePath.endsWith(".html")) return "text/html; charset=utf-8";
+  if (filePath.endsWith(".js")) return "text/javascript; charset=utf-8";
+  if (filePath.endsWith(".css")) return "text/css; charset=utf-8";
+  if (filePath.endsWith(".json")) return "application/json; charset=utf-8";
+  if (filePath.endsWith(".md")) return "text/markdown; charset=utf-8";
+  return "application/octet-stream";
+}
+
+function isPathInside(candidate, parent) {
+  const relative = path.relative(path.resolve(parent), path.resolve(candidate));
+  return !relative.startsWith("..") && !path.isAbsolute(relative);
+}

package/scripts/lib/dashboard-writer.mjs

@@ -18,8 +18,11 @@ export function writeDashboardDirectory(outDir, bundle, options = {}) {
   const target = path.resolve(outDir);
   assertSafeDashboardTarget(target, options);
   if (fs.existsSync(target)) fs.rmSync(target, { recursive: true, force: true });
-  copyDashboardAssets(target, options);
+  fs.mkdirSync(target, { recursive: true });
   fs.writeFileSync(path.join(target, dashboardMarker), "generated dashboard directory\n");
+  copyDashboardAssets(target, options);
+  fs.writeFileSync(path.join(target, "assets/app.js"), readDashboardApp(dashboardTemplateRootForLocale(options.locale)));
+  fs.writeFileSync(path.join(target, "index.html"), renderDashboardIndex(options.locale, options));
   writeJsonFile(path.join(target, "data/status.json"), bundle.status);
   writeJsonFile(path.join(target, "data/tables.json"), bundle.tables);
   writeJsonFile(path.join(target, "data/documents.json"), bundle.documents);
@@ -42,8 +45,98 @@ export function writeDashboardDirectory(outDir, bundle, options = {}) {
   return target;
 }
 
+export function writeDashboardFile(outFile, bundle, options = {}) {
+  const target = path.resolve(outFile);
+  fs.mkdirSync(path.dirname(target), { recursive: true });
+  fs.writeFileSync(target, renderDashboardFile(bundle, options));
+  return target;
+}
+
+export function renderDashboardFile(bundle, options = {}) {
+  const templateRoot = dashboardTemplateRootForLocale(options.locale);
+  const readAsset = (relativePath) => fs.readFileSync(path.join(templateRoot, relativePath), "utf8");
+  const css = readAsset("assets/app.css");
+  const i18n = readAsset("assets/i18n.js");
+  const markdown = readAsset("assets/markdown-reader.js");
+  const mermaid = readAsset("assets/mermaid-renderer.js");
+  const app = readDashboardApp(templateRoot);
+  const title = options.locale === "zh-CN" ? "Harness 控制台" : "Harness Dashboard";
+  const payload = JSON.stringify(bundle).replace(/</g, "\\u003c");
+  const runtimeLocale = options.locale === "zh-CN" ? "zh" : "en";
+  return `<!doctype html>
+<html lang="${options.locale === "zh-CN" ? "zh-CN" : "en"}">
+<head>
+  <meta charset="utf-8">
+  <meta name="viewport" content="width=device-width, initial-scale=1">
+  <title>${title}</title>
+  <link rel="icon" href="data:,">
+  <style>${css}</style>
+</head>
+<body>
+  <div id="app" class="app-shell" aria-live="polite"></div>
+  <script>window.__HARNESS_DASHBOARD__ = ${payload};</script>
+  <script>window.__HARNESS_LOCALE__ = ${JSON.stringify(runtimeLocale)};</script>
+  <script>${i18n}</script>
+  <script>${markdown}</script>
+  <script>${mermaid}</script>
+  <script>${app}</script>
+</body>
+</html>`;
+}
+
+function renderDashboardIndex(locale = "en-US", options = {}) {
+  const normalizedLocale = locale === "zh-CN" ? "zh-CN" : "en";
+  const runtimeLocale = locale === "zh-CN" ? "zh" : "en";
+  const title = locale === "zh-CN" ? "Harness 控制台" : "Harness Dashboard";
+  const assetVersion = Date.now();
+  return `<!doctype html>
+<html lang="${normalizedLocale}">
+<head>
+  <meta charset="utf-8">
+  <meta name="viewport" content="width=device-width, initial-scale=1">
+  <title>${title}</title>
+  <link rel="icon" href="data:,">
+  <link rel="stylesheet" href="./assets/app.css?v=${assetVersion}">
+</head>
+<body>
+  <div id="app" class="app-shell" aria-live="polite"></div>
+  <script src="./assets/dashboard-data.js?v=${assetVersion}"></script>
+  <script>window.__HARNESS_LOCALE__ = ${JSON.stringify(runtimeLocale)};</script>
+  <script>window.__HARNESS_WORKBENCH__ = ${options.workbenchRuntime === true ? "true" : "false"};</script>
+  <script src="./assets/i18n.js?v=${assetVersion}"></script>
+  <script src="./assets/markdown-reader.js?v=${assetVersion}"></script>
+  <script src="./assets/mermaid-renderer.js?v=${assetVersion}"></script>
+  <script src="./assets/app.js?v=${assetVersion}"></script>
+</body>
+</html>`;
+}
+
+function readDashboardApp(templateRoot) {
+  const manifestPath = path.join(templateRoot, "assets/app.manifest.json");
+  if (!fs.existsSync(manifestPath)) return fs.readFileSync(path.join(templateRoot, "assets/app.js"), "utf8");
+  const manifest = JSON.parse(fs.readFileSync(manifestPath, "utf8"));
+  if (!Array.isArray(manifest) || manifest.length === 0) throw new Error(`Invalid dashboard app manifest: ${manifestPath}`);
+  return `${manifest.map((relativePath) => {
+    const source = path.join(templateRoot, "assets", relativePath);
+    if (!fs.existsSync(source)) throw new Error(`Dashboard app source missing: ${relativePath}`);
+    return fs.readFileSync(source, "utf8").trimEnd();
+  }).join("\n\n")}\n`;
+}
+
 function assertSafeDashboardTarget(target, options) {
   const localizedDashboardTemplateRoot = dashboardTemplateRootForLocale(options.locale);
+  const sourceRepoRoot = options.repoRoot ? path.resolve(options.repoRoot) : "";
+  const projectRoot = options.projectRoot ? path.resolve(options.projectRoot) : "";
+  if (
+    sourceRepoRoot &&
+    projectRoot &&
+    isPathInside(projectRoot, sourceRepoRoot) &&
+    path.basename(projectRoot) === ".harness-private" &&
+    isPathInside(target, sourceRepoRoot) &&
+    !isPathInside(target, projectRoot)
+  ) {
+    throw new Error(`Refusing private dashboard output inside publishable source package: ${target}`);
+  }
   const protectedRoots = [
     path.parse(target).root,
     process.env.HOME,
@@ -64,15 +157,25 @@ function assertSafeDashboardTarget(target, options) {
   if (fs.existsSync(target)) {
     const entries = fs.readdirSync(target);
     const hasMarker = fs.existsSync(path.join(target, dashboardMarker));
-    if (entries.length > 0 && !hasMarker) {
+    const canRecoverGeneratedDashboard = options.recoverGeneratedDashboard === true && looksLikeGeneratedDashboardDirectory(target);
+    if (entries.length > 0 && !hasMarker && !canRecoverGeneratedDashboard) {
       throw new Error(`Refusing to overwrite non-dashboard directory: ${target}`);
     }
   }
 }
 
+function looksLikeGeneratedDashboardDirectory(target) {
+  return [
+    "index.html",
+    "README.md",
+    "assets/app.js",
+    "assets/dashboard-data.js",
+    "data/status.json",
+  ].every((relativePath) => fs.existsSync(path.join(target, relativePath)));
+}
+
 function dashboardTemplateRootForLocale(locale = "en-US") {
-  const localized = locale === "zh-CN" ? path.join(repoRoot, "templates-zh-CN/dashboard") : dashboardTemplateRoot;
-  return fs.existsSync(localized) ? localized : dashboardTemplateRoot;
+  return dashboardTemplateRoot;
 }
 
 function isPathInside(candidate, parent) {

package/scripts/lib/git-status-summary.mjs

@@ -0,0 +1,46 @@
+import fs from "node:fs";
+import path from "node:path";
+import { inspectGit } from "./governance-sync.mjs";
+
+export function summarizeGitState(target) {
+  const state = inspectGit(target.projectRoot);
+  if (!state.inGit) {
+    return {
+      summary: {
+        inGit: false,
+        root: "",
+        dirty: false,
+        entries: [],
+        blocksCliAutoCommit: false,
+      },
+      warnings: [],
+    };
+  }
+  const targetRoot = real(target.projectRoot);
+  const gitRoot = real(state.gitRoot);
+  const rootMatches = gitRoot === targetRoot;
+  const entries = rootMatches ? state.entries.map((entry) => ({
+    path: entry.path,
+    index: entry.index,
+    worktree: entry.worktree,
+  })) : [];
+  const dirty = entries.length > 0;
+  const warnings = [];
+  if (dirty) {
+    warnings.push(`dirty-state: ${entries.length} uncommitted Git path(s) will block CLI-owned auto-commit; commit them or record owner/no-commit reason before lifecycle commands.`);
+  }
+  return {
+    summary: {
+      inGit: true,
+      root: rootMatches ? "TARGET:." : "outside-target",
+      dirty,
+      entries,
+      blocksCliAutoCommit: !rootMatches || dirty,
+    },
+    warnings,
+  };
+}
+
+function real(filePath) {
+  return fs.realpathSync(filePath);
+}

package/scripts/lib/governance-index-generator.mjs

@@ -0,0 +1,174 @@
+import fs from "node:fs";
+import path from "node:path";
+import {
+  normalizeTarget,
+  readBundledTemplate,
+  todayDate,
+  toPosix,
+} from "./core-shared.mjs";
+import { splitMarkdownRow } from "./markdown-utils.mjs";
+import { collectTasks } from "./task-scanner.mjs";
+import {
+  beginGovernanceSync,
+  commitGovernanceSync,
+  moduleGeneratedIndexSurfaces,
+  releaseGovernanceSync,
+} from "./governance-sync.mjs";
+import { markdownCell } from "./task-lifecycle/text-utils.mjs";
+
+export function rebuildGovernanceIndexes(targetInput, { dryRun = false, archive = false, apply = false } = {}) {
+  const target = normalizeTarget(targetInput);
+  const effectiveApply = Boolean(apply && !dryRun);
+  const context = beginGovernanceSync(target, { operation: "governance rebuild", dryRun: !effectiveApply });
+  try {
+    const tasks = collectTasks(target)
+      .filter((task) => task.deletionState !== "deleted")
+      .sort((a, b) => String(a.id).localeCompare(String(b.id)));
+    const surfaces = [...governanceSurfaces(target, tasks), ...moduleGeneratedIndexSurfaces(target, tasks)];
+    const archiveDir = archive ? uniqueArchiveDir(target) : "";
+    const changes = surfaces.map((surface) => ({
+      surface: surface.surface,
+      destination: surface.relative,
+      action: surface.archiveOnly
+        ? apply ? "archive-legacy-governance-table" : "would-archive-legacy-governance-table"
+        : apply ? "rebuild-governance-index" : "would-rebuild-governance-index",
+      generatedRows: surface.rows.length,
+      archive: archive ? `${archiveDir}/${surface.relative}` : "",
+    }));
+
+    if (!effectiveApply) {
+      return { dryRun: true, archive, applied: false, archiveDir, changes };
+    }
+
+    const allowed = [];
+    for (const surface of surfaces) {
+      if (archive && fs.existsSync(surface.absolute)) {
+        const archivePath = path.join(target.projectRoot, archiveDir, surface.relative);
+        fs.mkdirSync(path.dirname(archivePath), { recursive: true });
+        fs.copyFileSync(surface.absolute, archivePath);
+        allowed.push(toPosix(path.relative(target.projectRoot, archivePath)));
+      }
+      if (surface.archiveOnly) {
+        if (archive && fs.existsSync(surface.absolute)) {
+          fs.rmSync(surface.absolute);
+          allowed.push(surface.relative);
+        }
+        continue;
+      }
+      fs.mkdirSync(path.dirname(surface.absolute), { recursive: true });
+      fs.writeFileSync(surface.absolute, surface.content);
+      allowed.push(surface.relative);
+    }
+
+    const commit = commitGovernanceSync(context, allowed, { message: "chore(harness): rebuild generated governance indexes" });
+    return { dryRun: false, archive, applied: true, archiveDir, changes, commit };
+  } finally {
+    releaseGovernanceSync(context);
+  }
+}
+
+function governanceSurfaces(target, tasks) {
+  return [
+    {
+      surface: "harness-ledger",
+      absolute: path.join(target.docsRoot, "Harness-Ledger.md"),
+      relative: toPosix(path.relative(target.projectRoot, path.join(target.docsRoot, "Harness-Ledger.md"))),
+      rows: tasks.map(ledgerRow),
+      content: replaceTableRows(readBundledTemplate("templates/ledger/Harness-Ledger.md"), /^ID$/i, tasks.map(ledgerRow)),
+    },
+    ...legacyFeatureSurfaces(target),
+  ];
+}
+
+function legacyFeatureSurfaces(target) {
+  return [
+    ["legacy-feature-ssot", path.join(target.docsRoot, "09-PLANNING/Feature-SSoT.md")],
+    ["legacy-private-feature-ssot", path.join(target.docsRoot, "09-PLANNING/Private-Feature-SSoT.md")],
+  ].filter(([, absolute]) => fs.existsSync(absolute)).map(([surface, absolute]) => ({
+    surface,
+    absolute,
+    relative: toPosix(path.relative(target.projectRoot, absolute)),
+    rows: [],
+    content: "",
+    archiveOnly: true,
+  }));
+}
+
+function replaceTableRows(content, headerPattern, rows) {
+  const lines = String(content || "").split(/\r?\n/);
+  for (let index = 0; index < lines.length - 1; index += 1) {
+    if (!lines[index].trim().startsWith("|")) continue;
+    const header = splitMarkdownRow(lines[index]);
+    if (!header.some((cell) => headerPattern.test(cell))) continue;
+    const separator = splitMarkdownRow(lines[index + 1]);
+    if (!separator.every((cell) => /^:?-{3,}:?$/.test(cell))) continue;
+    let end = index + 2;
+    while (end < lines.length && lines[end].trim().startsWith("|")) end += 1;
+    const fitted = rows.map((row) => fitRow(row, header.length));
+    lines.splice(index + 2, end - index - 2, ...fitted.map((row) => `| ${row.join(" | ")} |`));
+    return `${lines.join("\n").trimEnd()}\n`;
+  }
+  return `${String(content || "").trimEnd()}\n\n${rows.map((row) => `| ${row.join(" | ")} |`).join("\n")}\n`;
+}
+
+function fitRow(row, length) {
+  const next = row.map((cell) => markdownCell(cell));
+  while (next.length < length) next.push("");
+  return next.slice(0, length);
+}
+
+function ledgerRow(task) {
+  const plan = stripTarget(task.taskPlanPath || `${stripTarget(task.path)}/task_plan.md`);
+  const scope = task.module ? "module" : "task";
+  const moduleKey = task.module || "none";
+  return [
+    taskLedgerId(task),
+    scope,
+    moduleKey,
+    task.title || task.shortId || task.id,
+    mapLedgerState(task.state),
+    Array.isArray(task.taskQueues) && task.taskQueues.length ? task.taskQueues.join(",") : "none",
+    plan,
+    task.reviewStatus === "confirmed" ? stripTarget(task.reviewPath) : (task.reviewStatus || "pending"),
+    task.lessonCandidateDecisionComplete ? "checked" : (task.lessonCandidateStatus || "pending"),
+    task.walkthroughPath ? stripTarget(task.walkthroughPath) : (task.closeoutStatus || "pending"),
+    residual(task),
+    todayDate(),
+  ];
+}
+
+function residual(task) {
+  if (Array.isArray(task.stateConflicts) && task.stateConflicts.length) return `state-conflicts:${task.stateConflicts.length}`;
+  if (Array.isArray(task.materialIssues) && task.materialIssues.length) return `material-issues:${task.materialIssues.length}`;
+  return "none";
+}
+
+function taskLedgerId(task) {
+  return `HL-${taskSlug(task)}`;
+}
+
+function taskSlug(task) {
+  return String(task.shortId || task.id || "task").replace(/^TASKS\//, "").replace(/^MODULES\//, "").replace(/[^A-Za-z0-9-]+/g, "-").slice(0, 72);
+}
+
+function stripTarget(value) {
+  return String(value || "").replace(/^TARGET:/, "");
+}
+
+function mapLedgerState(state) {
+  if (state === "in_progress") return "active";
+  if (state === "review") return "review";
+  if (state === "done") return "closed";
+  if (state === "blocked") return "blocked";
+  return "planned";
+}
+
+function uniqueArchiveDir(target) {
+  const stamp = new Date().toISOString().replace(/[-:]/g, "").replace(".", "-");
+  const base = `docs/01-GOVERNANCE/archive/generated-governance-tables/${stamp}`;
+  for (let index = 0; index < 100; index += 1) {
+    const candidate = index === 0 ? base : `${base}-${String(index).padStart(2, "0")}`;
+    if (!fs.existsSync(path.join(target.projectRoot, candidate))) return candidate;
+  }
+  throw new Error("Unable to allocate a unique governance table archive directory");
+}