coding-agent-harness 1.0.4 → 1.0.6

package/scripts/lib/dashboard-workbench.mjs

@@ -1,257 +0,0 @@
-import crypto from "node:crypto";
-import { spawn } from "node:child_process";
-import fs from "node:fs";
-import http from "node:http";
-import path from "node:path";
-import { URL } from "node:url";
-import { confirmTaskReview } from "./task-lifecycle.mjs";
-import { createLessonSedimentationTask } from "./task-lesson-sedimentation.mjs";
-import { normalizeTarget } from "./core-shared.mjs";
-import { collectTasks } from "./task-scanner.mjs";
-import { writeDashboardFolder } from "./dashboard-data.mjs";
-
-const jsonHeaders = { "content-type": "application/json; charset=utf-8", "cache-control": "no-store" };
-
-export async function serveDashboardWorkbench(outDir, targetInput, { host = "127.0.0.1", port = 0, localeOverride = "", autoRefresh = false, open = false, label = "dashboard workbench", recoverGeneratedDashboard = false } = {}) {
-  if (host !== "127.0.0.1") throw new Error("dashboard workbench only supports --host 127.0.0.1");
-  const target = normalizeTarget(targetInput);
-  const outputDir = path.resolve(outDir);
-  const csrfToken = crypto.randomBytes(24).toString("hex");
-  const options = localeOverride ? { localeOverride } : {};
-  let snapshotVersion = Date.now();
-  const regenerate = () => {
-    writeDashboardFolder(outputDir, targetInput, { ...options, workbenchRuntime: true, recoverGeneratedDashboard });
-    snapshotVersion = Date.now();
-  };
-  regenerate();
-
-  const server = http.createServer(async (request, response) => {
-    try {
-      const address = server.address();
-      const actualPort = typeof address === "object" && address ? address.port : port;
-      const origin = `http://${host}:${actualPort}`;
-      const requestUrl = new URL(request.url || "/", origin);
-
-      if (requestUrl.pathname === "/api/runtime" && request.method === "GET") {
-        writeJson(response, 200, {
-          mode: "workbench",
-          csrfToken,
-          writableActions: ["review-complete", "lesson-sedimentation-task"],
-          target: target.projectRoot,
-          autoRefresh: autoRefresh === true,
-          snapshotVersion,
-        });
-        return;
-      }
-
-      if (requestUrl.pathname === "/api/tasks/review-complete" && request.method === "POST") {
-        assertTrustedWorkbenchRequest(request, { origin, csrfToken });
-        const body = await readJsonBody(request);
-        const taskId = String(body.taskId || "");
-        const task = collectTasks(target).find((item) => item.id === taskId);
-        if (!task) {
-          writeJson(response, 404, { error: "Task not found" });
-          return;
-        }
-        if (!isTaskInReviewQueue(task)) {
-          writeJson(response, 409, reviewQueueRejectionPayload(task));
-          return;
-        }
-        if (task.reviewStatus === "confirmed") {
-          writeJson(response, 409, { error: "Review is already confirmed." });
-          return;
-        }
-        const result = confirmTaskReview(target.projectRoot, taskId, {
-          reviewer: body.reviewer || "Human Reviewer",
-          message: body.message || "confirmed from dashboard workbench",
-          evidence: body.evidence || "",
-          confirmText: body.confirmText || "",
-        });
-        regenerate();
-        writeJson(response, 200, result);
-        return;
-      }
-
-      if (requestUrl.pathname === "/api/tasks/lesson-sedimentation" && request.method === "POST") {
-        assertTrustedWorkbenchRequest(request, { origin, csrfToken });
-        const body = await readJsonBody(request);
-        const taskId = String(body.taskId || "");
-        const candidateId = String(body.candidateId || "");
-        const task = collectTasks(target).find((item) => item.id === taskId);
-        if (!task) {
-          writeJson(response, 404, { error: "Task not found" });
-          return;
-        }
-        if (!candidateId) {
-          writeJson(response, 400, { error: "Missing lesson candidate id" });
-          return;
-        }
-        const result = createLessonSedimentationTask(target.projectRoot, taskId, candidateId, {
-          title: body.title || "",
-        });
-        regenerate();
-        writeJson(response, 200, result);
-        return;
-      }
-
-      if (request.method !== "GET" && request.method !== "HEAD") {
-        writeJson(response, 405, { error: "Method not allowed" });
-        return;
-      }
-      serveStaticFile(response, outputDir, requestUrl.pathname, request.method === "HEAD");
-    } catch (error) {
-      const status = error.status || (/CSRF|Origin|Host/.test(error.message) ? 403 : 400);
-      writeJson(response, status, errorPayload(error));
-    }
-  });
-
-  await new Promise((resolve, reject) => {
-    server.once("error", reject);
-    server.listen(Number(port), host, resolve);
-  });
-  const address = server.address();
-  const actualPort = typeof address === "object" && address ? address.port : port;
-  const url = `http://${host}:${actualPort}/`;
-  let watcher = null;
-  if (autoRefresh) watcher = startPollingWatch(target.docsRoot, regenerate);
-  console.log(`${label}: ${url} csrf=${csrfToken} outDir=${outputDir}`);
-  if (open) openBrowser(url);
-
-  const close = () => {
-    if (watcher) clearInterval(watcher);
-    server.close(() => process.exit(0));
-  };
-  process.once("SIGINT", close);
-  process.once("SIGTERM", close);
-  await new Promise(() => {});
-}
-
-function isTaskInReviewQueue(task) {
-  return task?.reviewQueueState === "ready-to-confirm" && Array.isArray(task?.taskQueues) && task.taskQueues.includes("review");
-}
-
-function reviewQueueRejectionPayload(task) {
-  return {
-    error: "Review completion is only available for tasks in the review queue.",
-    reviewQueueState: task?.reviewQueueState || "unknown",
-    taskQueues: Array.isArray(task?.taskQueues) ? task.taskQueues : [],
-    queueReasons: Array.isArray(task?.queueReasons) ? task.queueReasons : [],
-    repairPrompt: task?.repairPrompt || "",
-    reviewStatus: task?.reviewStatus || "unknown",
-    taskId: task?.id || "",
-  };
-}
-
-function startPollingWatch(root, regenerate) {
-  let lastMtime = latestTreeMtime(root);
-  let timer = null;
-  return setInterval(() => {
-    const nextMtime = latestTreeMtime(root);
-    if (nextMtime <= lastMtime) return;
-    lastMtime = nextMtime;
-    clearTimeout(timer);
-    timer = setTimeout(() => {
-      try {
-        regenerate();
-      } catch (error) {
-        console.error(`dashboard regeneration failed: ${error.message}`);
-      }
-    }, 250);
-  }, 1000);
-}
-
-function latestTreeMtime(root) {
-  let latest = 0;
-  if (!fs.existsSync(root)) return latest;
-  const visit = (dir) => {
-    for (const entry of fs.readdirSync(dir, { withFileTypes: true })) {
-      if ([".git", "node_modules", "tmp"].includes(entry.name)) continue;
-      const fullPath = path.join(dir, entry.name);
-      const stat = fs.statSync(fullPath);
-      latest = Math.max(latest, stat.mtimeMs);
-      if (entry.isDirectory()) visit(fullPath);
-    }
-  };
-  visit(root);
-  return latest;
-}
-
-function openBrowser(url) {
-  const command =
-    process.platform === "darwin" ? "open" :
-    process.platform === "win32" ? "cmd" :
-    "xdg-open";
-  const args = process.platform === "win32" ? ["/c", "start", "", url] : [url];
-  const child = spawn(command, args, { stdio: "ignore", detached: true });
-  child.on("error", () => {});
-  child.unref();
-}
-
-function assertTrustedWorkbenchRequest(request, { origin, csrfToken }) {
-  const host = request.headers.host || "";
-  if (host !== origin.replace(/^http:\/\//, "")) throw new Error("Host mismatch");
-  if (request.headers.origin !== origin) throw new Error("Origin mismatch");
-  if (request.headers["x-harness-csrf"] !== csrfToken) throw new Error("CSRF token mismatch");
-}
-
-function readJsonBody(request) {
-  return new Promise((resolve, reject) => {
-    let raw = "";
-    request.setEncoding("utf8");
-    request.on("data", (chunk) => {
-      raw += chunk;
-      if (raw.length > 32_768) {
-        reject(new Error("Request body too large"));
-        request.destroy();
-      }
-    });
-    request.on("end", () => {
-      try {
-        resolve(raw ? JSON.parse(raw) : {});
-      } catch {
-        reject(new Error("Invalid JSON body"));
-      }
-    });
-    request.on("error", reject);
-  });
-}
-
-function serveStaticFile(response, outputDir, urlPath, headOnly) {
-  const decoded = decodeURIComponent(urlPath);
-  const relative = decoded === "/" ? "index.html" : decoded.replace(/^\/+/, "");
-  const filePath = path.resolve(outputDir, relative);
-  if (!isPathInside(filePath, outputDir) || !fs.existsSync(filePath) || fs.statSync(filePath).isDirectory()) {
-    writeJson(response, 404, { error: "Not found" });
-    return;
-  }
-  response.writeHead(200, { "content-type": mimeType(filePath), "cache-control": "no-store" });
-  if (!headOnly) response.end(fs.readFileSync(filePath));
-  else response.end();
-}
-
-function writeJson(response, status, payload) {
-  response.writeHead(status, jsonHeaders);
-  response.end(`${JSON.stringify(payload)}\n`);
-}
-
-function errorPayload(error) {
-  const payload = { error: error.message };
-  if (error.code) payload.code = error.code;
-  if (Array.isArray(error.recovery) && error.recovery.length > 0) payload.recovery = error.recovery;
-  if (error.details) payload.details = error.details;
-  return payload;
-}
-
-function mimeType(filePath) {
-  if (filePath.endsWith(".html")) return "text/html; charset=utf-8";
-  if (filePath.endsWith(".js")) return "text/javascript; charset=utf-8";
-  if (filePath.endsWith(".css")) return "text/css; charset=utf-8";
-  if (filePath.endsWith(".json")) return "application/json; charset=utf-8";
-  if (filePath.endsWith(".md")) return "text/markdown; charset=utf-8";
-  return "application/octet-stream";
-}
-
-function isPathInside(candidate, parent) {
-  const relative = path.relative(path.resolve(parent), path.resolve(candidate));
-  return !relative.startsWith("..") && !path.isAbsolute(relative);
-}

package/scripts/lib/dashboard-writer.mjs

@@ -1,198 +0,0 @@
-import fs from "node:fs";
-import path from "node:path";
-
-const repoRoot = path.resolve(path.dirname(new URL(import.meta.url).pathname), "../..");
-const dashboardTemplateRoot = path.join(repoRoot, "templates/dashboard");
-const dashboardMarker = ".harness-dashboard";
-
-export function writeJsonFile(filePath, value) {
-  fs.mkdirSync(path.dirname(filePath), { recursive: true });
-  fs.writeFileSync(filePath, `${JSON.stringify(value, null, 2)}\n`);
-}
-
-export function copyDashboardAssets(outDir, options = {}) {
-  copyDirectory(dashboardTemplateRootForLocale(options.locale), outDir);
-}
-
-export function writeDashboardDirectory(outDir, bundle, options = {}) {
-  const target = path.resolve(outDir);
-  assertSafeDashboardTarget(target, options);
-  if (fs.existsSync(target)) fs.rmSync(target, { recursive: true, force: true });
-  fs.mkdirSync(target, { recursive: true });
-  fs.writeFileSync(path.join(target, dashboardMarker), "generated dashboard directory\n");
-  copyDashboardAssets(target, options);
-  fs.writeFileSync(path.join(target, "assets/app.js"), readDashboardApp(dashboardTemplateRootForLocale(options.locale)));
-  fs.writeFileSync(path.join(target, "index.html"), renderDashboardIndex(options.locale, options));
-  writeJsonFile(path.join(target, "data/status.json"), bundle.status);
-  writeJsonFile(path.join(target, "data/tables.json"), bundle.tables);
-  writeJsonFile(path.join(target, "data/documents.json"), bundle.documents);
-  writeJsonFile(path.join(target, "data/graph.json"), bundle.graph);
-  writeJsonFile(path.join(target, "data/adoption.json"), bundle.adoption);
-  fs.writeFileSync(
-    path.join(target, "assets/dashboard-data.js"),
-    `window.__HARNESS_DASHBOARD__ = ${JSON.stringify(bundle, null, 2)};\n`,
-  );
-  fs.writeFileSync(
-    path.join(target, "README.md"),
-    [
-      "# Harness Dashboard",
-      "",
-      "This is a read-only static snapshot generated by `harness dashboard --out-dir`.",
-      "Open `index.html` directly in a browser. No target project files are read at browser runtime.",
-      "",
-    ].join("\n"),
-  );
-  return target;
-}
-
-export function writeDashboardFile(outFile, bundle, options = {}) {
-  const target = path.resolve(outFile);
-  fs.mkdirSync(path.dirname(target), { recursive: true });
-  fs.writeFileSync(target, renderDashboardFile(bundle, options));
-  return target;
-}
-
-export function renderDashboardFile(bundle, options = {}) {
-  const templateRoot = dashboardTemplateRootForLocale(options.locale);
-  const readAsset = (relativePath) => fs.readFileSync(path.join(templateRoot, relativePath), "utf8");
-  const css = readAsset("assets/app.css");
-  const i18n = readAsset("assets/i18n.js");
-  const markdown = readAsset("assets/markdown-reader.js");
-  const mermaid = readAsset("assets/mermaid-renderer.js");
-  const app = readDashboardApp(templateRoot);
-  const title = options.locale === "zh-CN" ? "Harness 控制台" : "Harness Dashboard";
-  const payload = JSON.stringify(bundle).replace(/</g, "\\u003c");
-  const runtimeLocale = options.locale === "zh-CN" ? "zh" : "en";
-  return `<!doctype html>
-<html lang="${options.locale === "zh-CN" ? "zh-CN" : "en"}">
-<head>
-  <meta charset="utf-8">
-  <meta name="viewport" content="width=device-width, initial-scale=1">
-  <title>${title}</title>
-  <link rel="icon" href="data:,">
-  <style>${css}</style>
-</head>
-<body>
-  <div id="app" class="app-shell" aria-live="polite"></div>
-  <script>window.__HARNESS_DASHBOARD__ = ${payload};</script>
-  <script>window.__HARNESS_LOCALE__ = ${JSON.stringify(runtimeLocale)};</script>
-  <script>${i18n}</script>
-  <script>${markdown}</script>
-  <script>${mermaid}</script>
-  <script>${app}</script>
-</body>
-</html>`;
-}
-
-function renderDashboardIndex(locale = "en-US", options = {}) {
-  const normalizedLocale = locale === "zh-CN" ? "zh-CN" : "en";
-  const runtimeLocale = locale === "zh-CN" ? "zh" : "en";
-  const title = locale === "zh-CN" ? "Harness 控制台" : "Harness Dashboard";
-  const assetVersion = Date.now();
-  return `<!doctype html>
-<html lang="${normalizedLocale}">
-<head>
-  <meta charset="utf-8">
-  <meta name="viewport" content="width=device-width, initial-scale=1">
-  <title>${title}</title>
-  <link rel="icon" href="data:,">
-  <link rel="stylesheet" href="./assets/app.css?v=${assetVersion}">
-</head>
-<body>
-  <div id="app" class="app-shell" aria-live="polite"></div>
-  <script src="./assets/dashboard-data.js?v=${assetVersion}"></script>
-  <script>window.__HARNESS_LOCALE__ = ${JSON.stringify(runtimeLocale)};</script>
-  <script>window.__HARNESS_WORKBENCH__ = ${options.workbenchRuntime === true ? "true" : "false"};</script>
-  <script src="./assets/i18n.js?v=${assetVersion}"></script>
-  <script src="./assets/markdown-reader.js?v=${assetVersion}"></script>
-  <script src="./assets/mermaid-renderer.js?v=${assetVersion}"></script>
-  <script src="./assets/app.js?v=${assetVersion}"></script>
-</body>
-</html>`;
-}
-
-function readDashboardApp(templateRoot) {
-  const manifestPath = path.join(templateRoot, "assets/app.manifest.json");
-  if (!fs.existsSync(manifestPath)) return fs.readFileSync(path.join(templateRoot, "assets/app.js"), "utf8");
-  const manifest = JSON.parse(fs.readFileSync(manifestPath, "utf8"));
-  if (!Array.isArray(manifest) || manifest.length === 0) throw new Error(`Invalid dashboard app manifest: ${manifestPath}`);
-  return `${manifest.map((relativePath) => {
-    const source = path.join(templateRoot, "assets", relativePath);
-    if (!fs.existsSync(source)) throw new Error(`Dashboard app source missing: ${relativePath}`);
-    return fs.readFileSync(source, "utf8").trimEnd();
-  }).join("\n\n")}\n`;
-}
-
-function assertSafeDashboardTarget(target, options) {
-  const localizedDashboardTemplateRoot = dashboardTemplateRootForLocale(options.locale);
-  const sourceRepoRoot = options.repoRoot ? path.resolve(options.repoRoot) : "";
-  const projectRoot = options.projectRoot ? path.resolve(options.projectRoot) : "";
-  if (
-    sourceRepoRoot &&
-    projectRoot &&
-    isPathInside(projectRoot, sourceRepoRoot) &&
-    path.basename(projectRoot) === ".harness-private" &&
-    isPathInside(target, sourceRepoRoot) &&
-    !isPathInside(target, projectRoot)
-  ) {
-    throw new Error(`Refusing private dashboard output inside publishable source package: ${target}`);
-  }
-  const protectedRoots = [
-    path.parse(target).root,
-    process.env.HOME,
-    options.repoRoot,
-    options.projectRoot,
-    options.docsRoot,
-    dashboardTemplateRoot,
-    localizedDashboardTemplateRoot,
-  ].filter(Boolean).map((item) => path.resolve(item));
-  if (protectedRoots.includes(target)) {
-    throw new Error(`Refusing unsafe dashboard output directory: ${target}`);
-  }
-  for (const root of [options.docsRoot, dashboardTemplateRoot, localizedDashboardTemplateRoot].filter(Boolean).map((item) => path.resolve(item))) {
-    if (isPathInside(target, root)) {
-      throw new Error(`Refusing dashboard output inside protected directory: ${target}`);
-    }
-  }
-  if (fs.existsSync(target)) {
-    const entries = fs.readdirSync(target);
-    const hasMarker = fs.existsSync(path.join(target, dashboardMarker));
-    const canRecoverGeneratedDashboard = options.recoverGeneratedDashboard === true && looksLikeGeneratedDashboardDirectory(target);
-    if (entries.length > 0 && !hasMarker && !canRecoverGeneratedDashboard) {
-      throw new Error(`Refusing to overwrite non-dashboard directory: ${target}`);
-    }
-  }
-}
-
-function looksLikeGeneratedDashboardDirectory(target) {
-  return [
-    "index.html",
-    "README.md",
-    "assets/app.js",
-    "assets/dashboard-data.js",
-    "data/status.json",
-  ].every((relativePath) => fs.existsSync(path.join(target, relativePath)));
-}
-
-function dashboardTemplateRootForLocale(locale = "en-US") {
-  return dashboardTemplateRoot;
-}
-
-function isPathInside(candidate, parent) {
-  const relative = path.relative(parent, candidate);
-  return Boolean(relative) && !relative.startsWith("..") && !path.isAbsolute(relative);
-}
-
-function copyDirectory(from, to) {
-  if (!fs.existsSync(from)) throw new Error(`Missing dashboard template directory: ${from}`);
-  fs.mkdirSync(to, { recursive: true });
-  for (const entry of fs.readdirSync(from, { withFileTypes: true })) {
-    const source = path.join(from, entry.name);
-    const destination = path.join(to, entry.name);
-    if (entry.isDirectory()) {
-      copyDirectory(source, destination);
-    } else {
-      fs.copyFileSync(source, destination);
-    }
-  }
-}

package/scripts/lib/git-status-summary.mjs

@@ -1,46 +0,0 @@
-import fs from "node:fs";
-import path from "node:path";
-import { inspectGit } from "./governance-sync.mjs";
-
-export function summarizeGitState(target) {
-  const state = inspectGit(target.projectRoot);
-  if (!state.inGit) {
-    return {
-      summary: {
-        inGit: false,
-        root: "",
-        dirty: false,
-        entries: [],
-        blocksCliAutoCommit: false,
-      },
-      warnings: [],
-    };
-  }
-  const targetRoot = real(target.projectRoot);
-  const gitRoot = real(state.gitRoot);
-  const rootMatches = gitRoot === targetRoot;
-  const entries = rootMatches ? state.entries.map((entry) => ({
-    path: entry.path,
-    index: entry.index,
-    worktree: entry.worktree,
-  })) : [];
-  const dirty = entries.length > 0;
-  const warnings = [];
-  if (dirty) {
-    warnings.push(`dirty-state: ${entries.length} uncommitted Git path(s) will block CLI-owned auto-commit; commit them or record owner/no-commit reason before lifecycle commands.`);
-  }
-  return {
-    summary: {
-      inGit: true,
-      root: rootMatches ? "TARGET:." : "outside-target",
-      dirty,
-      entries,
-      blocksCliAutoCommit: !rootMatches || dirty,
-    },
-    warnings,
-  };
-}
-
-function real(filePath) {
-  return fs.realpathSync(filePath);
-}

package/scripts/lib/governance-index-generator.mjs

@@ -1,174 +0,0 @@
-import fs from "node:fs";
-import path from "node:path";
-import {
-  normalizeTarget,
-  readBundledTemplate,
-  todayDate,
-  toPosix,
-} from "./core-shared.mjs";
-import { splitMarkdownRow } from "./markdown-utils.mjs";
-import { collectTasks } from "./task-scanner.mjs";
-import {
-  beginGovernanceSync,
-  commitGovernanceSync,
-  moduleGeneratedIndexSurfaces,
-  releaseGovernanceSync,
-} from "./governance-sync.mjs";
-import { markdownCell } from "./task-lifecycle/text-utils.mjs";
-
-export function rebuildGovernanceIndexes(targetInput, { dryRun = false, archive = false, apply = false } = {}) {
-  const target = normalizeTarget(targetInput);
-  const effectiveApply = Boolean(apply && !dryRun);
-  const context = beginGovernanceSync(target, { operation: "governance rebuild", dryRun: !effectiveApply });
-  try {
-    const tasks = collectTasks(target)
-      .filter((task) => task.deletionState !== "deleted")
-      .sort((a, b) => String(a.id).localeCompare(String(b.id)));
-    const surfaces = [...governanceSurfaces(target, tasks), ...moduleGeneratedIndexSurfaces(target, tasks)];
-    const archiveDir = archive ? uniqueArchiveDir(target) : "";
-    const changes = surfaces.map((surface) => ({
-      surface: surface.surface,
-      destination: surface.relative,
-      action: surface.archiveOnly
-        ? apply ? "archive-legacy-governance-table" : "would-archive-legacy-governance-table"
-        : apply ? "rebuild-governance-index" : "would-rebuild-governance-index",
-      generatedRows: surface.rows.length,
-      archive: archive ? `${archiveDir}/${surface.relative}` : "",
-    }));
-
-    if (!effectiveApply) {
-      return { dryRun: true, archive, applied: false, archiveDir, changes };
-    }
-
-    const allowed = [];
-    for (const surface of surfaces) {
-      if (archive && fs.existsSync(surface.absolute)) {
-        const archivePath = path.join(target.projectRoot, archiveDir, surface.relative);
-        fs.mkdirSync(path.dirname(archivePath), { recursive: true });
-        fs.copyFileSync(surface.absolute, archivePath);
-        allowed.push(toPosix(path.relative(target.projectRoot, archivePath)));
-      }
-      if (surface.archiveOnly) {
-        if (archive && fs.existsSync(surface.absolute)) {
-          fs.rmSync(surface.absolute);
-          allowed.push(surface.relative);
-        }
-        continue;
-      }
-      fs.mkdirSync(path.dirname(surface.absolute), { recursive: true });
-      fs.writeFileSync(surface.absolute, surface.content);
-      allowed.push(surface.relative);
-    }
-
-    const commit = commitGovernanceSync(context, allowed, { message: "chore(harness): rebuild generated governance indexes" });
-    return { dryRun: false, archive, applied: true, archiveDir, changes, commit };
-  } finally {
-    releaseGovernanceSync(context);
-  }
-}
-
-function governanceSurfaces(target, tasks) {
-  return [
-    {
-      surface: "harness-ledger",
-      absolute: path.join(target.docsRoot, "Harness-Ledger.md"),
-      relative: toPosix(path.relative(target.projectRoot, path.join(target.docsRoot, "Harness-Ledger.md"))),
-      rows: tasks.map(ledgerRow),
-      content: replaceTableRows(readBundledTemplate("templates/ledger/Harness-Ledger.md"), /^ID$/i, tasks.map(ledgerRow)),
-    },
-    ...legacyFeatureSurfaces(target),
-  ];
-}
-
-function legacyFeatureSurfaces(target) {
-  return [
-    ["legacy-feature-ssot", path.join(target.docsRoot, "09-PLANNING/Feature-SSoT.md")],
-    ["legacy-private-feature-ssot", path.join(target.docsRoot, "09-PLANNING/Private-Feature-SSoT.md")],
-  ].filter(([, absolute]) => fs.existsSync(absolute)).map(([surface, absolute]) => ({
-    surface,
-    absolute,
-    relative: toPosix(path.relative(target.projectRoot, absolute)),
-    rows: [],
-    content: "",
-    archiveOnly: true,
-  }));
-}
-
-function replaceTableRows(content, headerPattern, rows) {
-  const lines = String(content || "").split(/\r?\n/);
-  for (let index = 0; index < lines.length - 1; index += 1) {
-    if (!lines[index].trim().startsWith("|")) continue;
-    const header = splitMarkdownRow(lines[index]);
-    if (!header.some((cell) => headerPattern.test(cell))) continue;
-    const separator = splitMarkdownRow(lines[index + 1]);
-    if (!separator.every((cell) => /^:?-{3,}:?$/.test(cell))) continue;
-    let end = index + 2;
-    while (end < lines.length && lines[end].trim().startsWith("|")) end += 1;
-    const fitted = rows.map((row) => fitRow(row, header.length));
-    lines.splice(index + 2, end - index - 2, ...fitted.map((row) => `| ${row.join(" | ")} |`));
-    return `${lines.join("\n").trimEnd()}\n`;
-  }
-  return `${String(content || "").trimEnd()}\n\n${rows.map((row) => `| ${row.join(" | ")} |`).join("\n")}\n`;
-}
-
-function fitRow(row, length) {
-  const next = row.map((cell) => markdownCell(cell));
-  while (next.length < length) next.push("");
-  return next.slice(0, length);
-}
-
-function ledgerRow(task) {
-  const plan = stripTarget(task.taskPlanPath || `${stripTarget(task.path)}/task_plan.md`);
-  const scope = task.module ? "module" : "task";
-  const moduleKey = task.module || "none";
-  return [
-    taskLedgerId(task),
-    scope,
-    moduleKey,
-    task.title || task.shortId || task.id,
-    mapLedgerState(task.state),
-    Array.isArray(task.taskQueues) && task.taskQueues.length ? task.taskQueues.join(",") : "none",
-    plan,
-    task.reviewStatus === "confirmed" ? stripTarget(task.reviewPath) : (task.reviewStatus || "pending"),
-    task.lessonCandidateDecisionComplete ? "checked" : (task.lessonCandidateStatus || "pending"),
-    task.walkthroughPath ? stripTarget(task.walkthroughPath) : (task.closeoutStatus || "pending"),
-    residual(task),
-    todayDate(),
-  ];
-}
-
-function residual(task) {
-  if (Array.isArray(task.stateConflicts) && task.stateConflicts.length) return `state-conflicts:${task.stateConflicts.length}`;
-  if (Array.isArray(task.materialIssues) && task.materialIssues.length) return `material-issues:${task.materialIssues.length}`;
-  return "none";
-}
-
-function taskLedgerId(task) {
-  return `HL-${taskSlug(task)}`;
-}
-
-function taskSlug(task) {
-  return String(task.shortId || task.id || "task").replace(/^TASKS\//, "").replace(/^MODULES\//, "").replace(/[^A-Za-z0-9-]+/g, "-").slice(0, 72);
-}
-
-function stripTarget(value) {
-  return String(value || "").replace(/^TARGET:/, "");
-}
-
-function mapLedgerState(state) {
-  if (state === "in_progress") return "active";
-  if (state === "review") return "review";
-  if (state === "done") return "closed";
-  if (state === "blocked") return "blocked";
-  return "planned";
-}
-
-function uniqueArchiveDir(target) {
-  const stamp = new Date().toISOString().replace(/[-:]/g, "").replace(".", "-");
-  const base = `docs/01-GOVERNANCE/archive/generated-governance-tables/${stamp}`;
-  for (let index = 0; index < 100; index += 1) {
-    const candidate = index === 0 ? base : `${base}-${String(index).padStart(2, "0")}`;
-    if (!fs.existsSync(path.join(target.projectRoot, candidate))) return candidate;
-  }
-  throw new Error("Unable to allocate a unique governance table archive directory");
-}