easy-coding-harness 0.6.0 → 0.7.0

package/dist/cli.js

@@ -1,7 +1,7 @@
 #!/usr/bin/env node
 
 // src/cli.ts
-import chalk8 from "chalk";
+import chalk9 from "chalk";
 import { Command } from "commander";
 
 // src/commands/add-agent.ts
@@ -103,9 +103,11 @@ async function isDirectory(filePath) {
 }
 
 // src/utils/config-yaml.ts
+var CONFIG_SCHEMA_VERSION = 2;
+var CONFIRM_MODES = ["approve", "guard", "auto"];
 function createDefaultConfig(params) {
-  const config = {
-    version: 1,
+  const config2 = {
+    version: CONFIG_SCHEMA_VERSION,
     harness_version: params.harnessVersion,
     agents: params.agents,
     project: {
@@ -121,20 +123,19 @@ function createDefaultConfig(params) {
       auto_archive_days: 30
     },
     behavior: {
-      strict_confirm: true,
-      auto_mode: false
+      confirm_mode: "guard"
     }
   };
   if (params.supermodule) {
-    config.supermodule = params.supermodule;
+    config2.supermodule = params.supermodule;
   }
-  return config;
+  return config2;
 }
-function stringifyConfig(config) {
-  return YAML.stringify(config);
+function stringifyConfig(config2) {
+  return YAML.stringify(config2);
 }
-async function writeConfigYaml(filePath, config) {
-  await writeTextFile(filePath, stringifyConfig(config));
+async function writeConfigYaml(filePath, config2) {
+  await writeTextFile(filePath, stringifyConfig(config2));
 }
 async function readConfigYaml(filePath) {
   const content = await readFile2(filePath, "utf8");
@@ -142,8 +143,8 @@ async function readConfigYaml(filePath) {
 }
 async function readProjectIdIfExists(filePath) {
   try {
-    const config = await readConfigYaml(filePath);
-    return typeof config.project?.id === "string" && config.project.id.trim() ? config.project.id : null;
+    const config2 = await readConfigYaml(filePath);
+    return typeof config2.project?.id === "string" && config2.project.id.trim() ? config2.project.id : null;
   } catch {
     return null;
   }
@@ -151,41 +152,74 @@ async function readProjectIdIfExists(filePath) {
 async function updateConfigYaml(filePath, updater) {
   const content = await readFile2(filePath, "utf8");
   const document = parseDocument(content);
-  const config = document.toJSON();
-  updater(config);
-  for (const [key, value] of Object.entries(config)) {
+  const config2 = document.toJSON();
+  updater(config2);
+  for (const [key, value] of Object.entries(config2)) {
     document.set(key, value);
   }
   await writeTextFile(filePath, document.toString());
-  return config;
+  return config2;
 }
 async function addAgentsToConfig(filePath, agents) {
-  return updateConfigYaml(filePath, (config) => {
-    const merged = /* @__PURE__ */ new Set([...config.agents ?? [], ...agents]);
-    config.agents = [...merged];
+  return updateConfigYaml(filePath, (config2) => {
+    const merged = /* @__PURE__ */ new Set([...config2.agents ?? [], ...agents]);
+    config2.agents = [...merged];
   });
 }
 async function updateHarnessVersion(filePath, version) {
-  return updateConfigYaml(filePath, (config) => {
-    config.harness_version = version;
+  return updateConfigYaml(filePath, (config2) => {
+    config2.harness_version = version;
+  });
+}
+function isConfirmMode(value) {
+  return typeof value === "string" && CONFIRM_MODES.includes(value);
+}
+function resolveLegacyConfirmMode(config2) {
+  const behavior = config2.behavior ?? {};
+  if (isConfirmMode(behavior.confirm_mode)) {
+    return behavior.confirm_mode;
+  }
+  if (behavior.auto_mode === true) {
+    return "auto";
+  }
+  if (behavior.strict_confirm === true) {
+    return "approve";
+  }
+  return "guard";
+}
+async function setConfirmMode(filePath, mode) {
+  return updateConfigYaml(filePath, (config2) => {
+    const legacyBehavior = config2.behavior ?? {};
+    const behavior = Object.fromEntries(
+      Object.entries(legacyBehavior).filter(
+        ([key]) => key !== "strict_confirm" && key !== "auto_mode"
+      )
+    );
+    behavior.confirm_mode = mode;
+    config2.behavior = behavior;
+    config2.version = CONFIG_SCHEMA_VERSION;
   });
 }
+async function migrateConfirmModeConfig(filePath) {
+  const config2 = await readConfigYaml(filePath);
+  return setConfirmMode(filePath, resolveLegacyConfirmMode(config2));
+}
 async function ensureProjectId(filePath) {
   let projectId = "";
-  await updateConfigYaml(filePath, (config) => {
-    if (!config.project || typeof config.project !== "object") {
-      config.project = { id: createProjectId(), name: "" };
+  await updateConfigYaml(filePath, (config2) => {
+    if (!config2.project || typeof config2.project !== "object") {
+      config2.project = { id: createProjectId(), name: "" };
     }
-    if (typeof config.project.id !== "string" || !config.project.id.trim()) {
-      config.project.id = createProjectId();
+    if (typeof config2.project.id !== "string" || !config2.project.id.trim()) {
+      config2.project.id = createProjectId();
     }
-    projectId = config.project.id;
+    projectId = config2.project.id;
   });
   return projectId;
 }
 async function updateSupermoduleConfig(filePath, supermodule) {
-  return updateConfigYaml(filePath, (config) => {
-    config.supermodule = supermodule;
+  return updateConfigYaml(filePath, (config2) => {
+    config2.supermodule = supermodule;
   });
 }
 function createProjectId() {
@@ -1800,11 +1834,11 @@ async function listParentManagedSubmodulePaths(cwd) {
     return [];
   }
   try {
-    const config = await readConfigYaml(parentConfigPath);
-    if (config.supermodule?.role !== "super-parent" || !Array.isArray(config.supermodule.submodules)) {
+    const config2 = await readConfigYaml(parentConfigPath);
+    if (config2.supermodule?.role !== "super-parent" || !Array.isArray(config2.supermodule.submodules)) {
       return [];
     }
-    return config.supermodule.submodules.filter((submodulePath) => typeof submodulePath === "string").sort();
+    return config2.supermodule.submodules.filter((submodulePath) => typeof submodulePath === "string").sort();
   } catch {
     return [];
   }
@@ -1889,9 +1923,9 @@ async function addAgent(opts) {
     if (!await pathExists(target.configPath)) {
       continue;
     }
-    const config = await readConfigYaml(target.configPath);
-    const toInstall = platforms.filter((platform) => !config.agents.includes(platform));
-    const agents = [...config.agents, ...toInstall];
+    const config2 = await readConfigYaml(target.configPath);
+    const toInstall = platforms.filter((platform) => !config2.agents.includes(platform));
+    const agents = [...config2.agents, ...toInstall];
     if (toInstall.length > 0) {
       const projectId = await writeRuntimeScaffold(target.dir, agents, {
         supermodule: target.supermodule
@@ -2000,18 +2034,18 @@ async function refreshParentAfterChildClear(cwd, targetPlans) {
   if (!parent || parent.label !== ".") {
     return;
   }
-  const config = await readConfigYaml(parent.configPath);
-  if (!Array.isArray(config.agents) || config.agents.length === 0) {
+  const config2 = await readConfigYaml(parent.configPath);
+  if (!Array.isArray(config2.agents) || config2.agents.length === 0) {
     return;
   }
-  await refreshSupermoduleParent(cwd, config.agents, parent.supermodule.submodules ?? []);
+  await refreshSupermoduleParent(cwd, config2.agents, parent.supermodule.submodules ?? []);
 }
 async function resolveInstalledAgents(cwd) {
   const configPath2 = path16.join(cwd, EASY_CODING_DIR, CONFIG_FILE);
   if (await pathExists(configPath2)) {
     try {
-      const config = await readConfigYaml(configPath2);
-      const listed = Array.isArray(config.agents) ? config.agents.filter(isAgentPlatform) : [];
+      const config2 = await readConfigYaml(configPath2);
+      const listed = Array.isArray(config2.agents) ? config2.agents.filter(isAgentPlatform) : [];
       if (listed.length > 0) {
         return listed;
       }
@@ -2352,8 +2386,8 @@ async function executeClearPlan(plan) {
   for (const target of plan.remove) {
     await rm(target, { recursive: true, force: true });
   }
-  for (const config of plan.pruneHookConfigs) {
-    await pruneHookConfig(config);
+  for (const config2 of plan.pruneHookConfigs) {
+    await pruneHookConfig(config2);
   }
   for (const constraint of plan.constraints) {
     await stripConstraintRegion(constraint);
@@ -2362,8 +2396,8 @@ async function executeClearPlan(plan) {
     await removeIfEmpty(dir);
   }
 }
-async function pruneHookConfig(config) {
-  const { filePath, managedHookCommands, managedHookPaths } = config;
+async function pruneHookConfig(config2) {
+  const { filePath, managedHookCommands, managedHookPaths } = config2;
   const content = await readTextIfExists(filePath);
   if (content === null) {
     return;
@@ -2538,21 +2572,163 @@ function renderTargetPlans(targetPlans) {
   ).join("\n\n");
 }
 
-// src/commands/init.ts
+// src/commands/config.ts
 import path18 from "path";
-import { note, outro as outro3 } from "@clack/prompts";
+import { cancel as cancel4, confirm as confirm3, outro as outro3, select } from "@clack/prompts";
 import chalk4 from "chalk";
 
+// src/utils/compare-versions.ts
+import path17 from "path";
+function parseVersion(version) {
+  const withoutBuild = String(version ?? "").split("+", 1)[0];
+  const separator = withoutBuild.indexOf("-");
+  const coreText = separator === -1 ? withoutBuild : withoutBuild.slice(0, separator);
+  const prereleaseText = separator === -1 ? "" : withoutBuild.slice(separator + 1);
+  const core = coreText.split(".").map((part) => {
+    const parsed = Number.parseInt(part, 10);
+    return Number.isNaN(parsed) ? 0 : parsed;
+  });
+  return {
+    core,
+    prerelease: prereleaseText ? prereleaseText.split(".") : null
+  };
+}
+function comparePrerelease(left, right) {
+  if (left === null && right === null) return 0;
+  if (left === null) return 1;
+  if (right === null) return -1;
+  const length = Math.max(left.length, right.length);
+  for (let index = 0; index < length; index += 1) {
+    const leftPart = left[index];
+    const rightPart = right[index];
+    if (leftPart === void 0) return -1;
+    if (rightPart === void 0) return 1;
+    if (leftPart === rightPart) continue;
+    const leftNumeric = /^\d+$/.test(leftPart);
+    const rightNumeric = /^\d+$/.test(rightPart);
+    if (leftNumeric && rightNumeric) {
+      const leftNumber = Number.parseInt(leftPart, 10);
+      const rightNumber = Number.parseInt(rightPart, 10);
+      return leftNumber < rightNumber ? -1 : 1;
+    }
+    if (leftNumeric) return -1;
+    if (rightNumeric) return 1;
+    return leftPart < rightPart ? -1 : 1;
+  }
+  return 0;
+}
+function compareVersions(a, b) {
+  const left = parseVersion(a);
+  const right = parseVersion(b);
+  const length = Math.max(left.core.length, right.core.length);
+  for (let index = 0; index < length; index += 1) {
+    const leftPart = left.core[index] ?? 0;
+    const rightPart = right.core[index] ?? 0;
+    if (leftPart < rightPart) return -1;
+    if (leftPart > rightPart) return 1;
+  }
+  return comparePrerelease(left.prerelease, right.prerelease);
+}
+function isVersionBehind(installed, current = VERSION) {
+  return compareVersions(installed, current) === -1;
+}
+async function checkForUpgrade(cwd) {
+  const configPath2 = path17.join(cwd, EASY_CODING_DIR, CONFIG_FILE);
+  if (!await pathExists(configPath2)) {
+    return;
+  }
+  let config2;
+  try {
+    config2 = await readConfigYaml(configPath2);
+  } catch {
+    return;
+  }
+  const installed = String(config2.harness_version ?? "");
+  if (installed && isVersionBehind(installed)) {
+    process.stderr.write(
+      `easy-coding harness ${installed} is older than CLI ${VERSION}. Run easy-coding upgrade when ready.
+`
+    );
+  }
+}
+
+// src/commands/config.ts
+async function config() {
+  renderBanner();
+  const configPath2 = path18.join(process.cwd(), EASY_CODING_DIR, CONFIG_FILE);
+  if (!await pathExists(configPath2)) {
+    throw new Error("No easy-coding harness found in this project.");
+  }
+  const projectConfig = await readConfigYaml(configPath2);
+  if (projectConfig.harness_version !== VERSION) {
+    const relation = compareVersions(projectConfig.harness_version, VERSION);
+    if (relation === -1) {
+      throw new Error(
+        `Project harness ${projectConfig.harness_version} is older than CLI ${VERSION}. Run easy-coding upgrade first.`
+      );
+    }
+    if (relation === 1) {
+      throw new Error(
+        `Project harness ${projectConfig.harness_version} is newer than CLI ${VERSION}. Update the CLI first.`
+      );
+    }
+    throw new Error(
+      `Project harness ${projectConfig.harness_version} does not exactly match CLI ${VERSION}. Upgrade the harness or update the CLI before changing config.`
+    );
+  }
+  const current = resolveLegacyConfirmMode(projectConfig);
+  const selected = await select({
+    message: `Select project confirm mode (current: ${current})`,
+    initialValue: current,
+    options: [
+      {
+        value: "approve",
+        label: "approve \u2014 confirm every stage transition",
+        hint: "except INIT -> ANALYSIS and MEMORY -> COMPLETE"
+      },
+      {
+        value: "guard",
+        label: "guard \u2014 confirm critical gates (default)",
+        hint: "ANALYSIS -> IMPLEMENT and VERIFICATION -> MEMORY"
+      },
+      {
+        value: "auto",
+        label: "auto \u2014 advance workflow stages automatically",
+        hint: "task closure remains explicit"
+      }
+    ]
+  });
+  if (typeof selected === "symbol") {
+    cancel4("Configuration cancelled.");
+    return;
+  }
+  const shouldSave = await confirm3({
+    message: `Set behavior.confirm_mode to ${selected}?`,
+    initialValue: true
+  });
+  if (typeof shouldSave === "symbol" || !shouldSave) {
+    cancel4("Configuration cancelled.");
+    return;
+  }
+  await setConfirmMode(configPath2, selected);
+  outro3(chalk4.green(`Project confirm mode updated to ${selected}.`));
+}
+
+// src/commands/init.ts
+import path20 from "path";
+import { note, outro as outro4 } from "@clack/prompts";
+import chalk5 from "chalk";
+
 // src/utils/install-state.ts
 import { readdir as readdir5 } from "fs/promises";
-import path17 from "path";
+import path19 from "path";
 var LEGACY_ROOT_FILES = ["SOUL.md", "RULES.md", "ABSTRACT.md"];
 async function detectEasyCodingInstallState(cwd) {
-  const easyCodingDir = path17.join(cwd, EASY_CODING_DIR);
+  const easyCodingDir = path19.join(cwd, EASY_CODING_DIR);
   if (!await pathExists(easyCodingDir)) {
     return { kind: "fresh", easyCodingDir };
   }
-  const configPath2 = path17.join(easyCodingDir, CONFIG_FILE);
+  const configPath2 = path19.join(easyCodingDir, CONFIG_FILE);
   if (await pathExists(configPath2)) {
     return { kind: "installed", easyCodingDir, configPath: configPath2 };
   }
@@ -2570,17 +2746,17 @@ async function detectEasyCodingInstallState(cwd) {
 async function detectLegacyAssets(easyCodingDir) {
   const assets = [];
   for (const file of LEGACY_ROOT_FILES) {
-    if (await pathExists(path17.join(easyCodingDir, file))) {
+    if (await pathExists(path19.join(easyCodingDir, file))) {
       assets.push(relativeEasyCodingPath(file));
     }
   }
-  if (await pathExists(path17.join(easyCodingDir, "memory", "long", "MEMORY.md"))) {
+  if (await pathExists(path19.join(easyCodingDir, "memory", "long", "MEMORY.md"))) {
     assets.push(relativeEasyCodingPath("memory", "long", "MEMORY.md"));
   }
-  const shortMemoryFiles = await listMarkdownFiles(path17.join(easyCodingDir, "memory", "short"));
+  const shortMemoryFiles = await listMarkdownFiles(path19.join(easyCodingDir, "memory", "short"));
   assets.push(...shortMemoryFiles.map((file) => relativeEasyCodingPath("memory", "short", file)));
   for (const dir of ["spec", "prototype"]) {
-    if (await hasAnyDirectoryEntry(path17.join(easyCodingDir, dir))) {
+    if (await hasAnyDirectoryEntry(path19.join(easyCodingDir, dir))) {
       assets.push(relativeEasyCodingPath(dir));
     }
   }
@@ -2600,13 +2776,13 @@ async function hasAnyDirectoryEntry(dir) {
   return (await readdir5(dir)).length > 0;
 }
 function relativeEasyCodingPath(...segments) {
-  return path17.posix.join(EASY_CODING_DIR, ...segments);
+  return path19.posix.join(EASY_CODING_DIR, ...segments);
 }
 function relativeConfigPath() {
-  return path17.posix.join(EASY_CODING_DIR, CONFIG_FILE);
+  return path19.posix.join(EASY_CODING_DIR, CONFIG_FILE);
 }
 function relativeProjectInitTaskPath() {
-  return path17.posix.join(EASY_CODING_DIR, TASKS_DIR, PROJECT_INIT_TASK_ID, "task.json");
+  return path19.posix.join(EASY_CODING_DIR, TASKS_DIR, PROJECT_INIT_TASK_ID, "task.json");
 }
 
 // src/commands/init.ts
@@ -2626,7 +2802,7 @@ async function init(opts) {
       const platforms2 = await resolveInitPlatforms(cwd, opts, true);
       await refreshParentTopologyIfNeeded(cwd, parentTarget2, platforms2);
     }
-    outro3(chalk4.yellow("All selected easy-coding harness targets are already installed."));
+    outro4(chalk5.yellow("All selected easy-coding harness targets are already installed."));
     return;
   }
   const platforms = await resolveInitPlatforms(cwd, opts, Boolean(parentTarget2?.installed));
@@ -2641,8 +2817,8 @@ async function init(opts) {
     (platform) => `${PLATFORM_META[platform].label}: ${PLATFORM_META[platform].skillTrigger}ec-init`
   ).join("\n");
   note(triggers, "Next step");
-  outro3(
-    chalk4.green(
+  outro4(
+    chalk5.green(
       `easy-coding harness installed in ${installableTargets.map((target) => target.label).join(", ")}. Open your agent and run ec-init.`
     )
   );
@@ -2687,7 +2863,7 @@ async function supermoduleTargets(cwd, opts, submodules) {
     if (!targetSubmodulePaths.has(entry.path)) {
       continue;
     }
-    const dir = path18.join(cwd, entry.path);
+    const dir = path20.join(cwd, entry.path);
     targets.push(
       await targetFromState(dir, entry.path, "submodule-child", {
         parent: toPosixRelative2(dir, cwd)
@@ -2734,25 +2910,25 @@ function contextFromState(role, installState) {
   };
 }
 function toPosixRelative2(from, to) {
-  const relative = path18.relative(from, to);
-  return relative ? relative.split(path18.sep).join("/") : ".";
+  const relative = path20.relative(from, to);
+  return relative ? relative.split(path20.sep).join("/") : ".";
 }
 async function resolveInitPlatforms(cwd, opts, parentInstalled) {
   if (opts.agent || !parentInstalled) {
     return resolvePlatforms(opts, ["claude-code"]);
   }
-  const config = await readConfigYaml(path18.join(cwd, EASY_CODING_DIR, CONFIG_FILE));
-  if (Array.isArray(config.agents) && config.agents.length > 0) {
-    return config.agents;
+  const config2 = await readConfigYaml(path20.join(cwd, EASY_CODING_DIR, CONFIG_FILE));
+  if (Array.isArray(config2.agents) && config2.agents.length > 0) {
+    return config2.agents;
   }
   return resolvePlatforms(opts, ["claude-code"]);
 }
 async function refreshParentTopologyIfNeeded(cwd, parentTarget2, installPlatforms) {
-  if (!await pathExists(path18.join(cwd, EASY_CODING_DIR, CONFIG_FILE))) {
+  if (!await pathExists(path20.join(cwd, EASY_CODING_DIR, CONFIG_FILE))) {
     return;
   }
-  const config = parentTarget2.installed ? await readConfigYaml(path18.join(cwd, EASY_CODING_DIR, CONFIG_FILE)) : { agents: installPlatforms };
-  const platforms = Array.isArray(config.agents) && config.agents.length > 0 ? config.agents : installPlatforms;
+  const config2 = parentTarget2.installed ? await readConfigYaml(path20.join(cwd, EASY_CODING_DIR, CONFIG_FILE)) : { agents: installPlatforms };
+  const platforms = Array.isArray(config2.agents) && config2.agents.length > 0 ? config2.agents : installPlatforms;
   await refreshSupermoduleParent(cwd, platforms, parentTarget2.context.submodulePaths ?? []);
 }
 async function refreshInstalledChildTopologies(targets) {
@@ -2760,7 +2936,7 @@ async function refreshInstalledChildTopologies(targets) {
     if (!target.installed || target.context.role !== "submodule-child") {
       continue;
     }
-    const configPath2 = path18.join(target.dir, EASY_CODING_DIR, CONFIG_FILE);
+    const configPath2 = path20.join(target.dir, EASY_CODING_DIR, CONFIG_FILE);
     if (!await pathExists(configPath2)) {
       continue;
     }
@@ -2769,63 +2945,19 @@ async function refreshInstalledChildTopologies(targets) {
 }
 
 // src/commands/status.ts
-import path21 from "path";
-import chalk5 from "chalk";
-
-// src/utils/compare-versions.ts
-import path19 from "path";
-function normalize(version) {
-  const [core] = String(version ?? "").split("-");
-  return core.split(".").map((part) => {
-    const parsed = Number.parseInt(part, 10);
-    return Number.isNaN(parsed) ? 0 : parsed;
-  });
-}
-function compareVersions(a, b) {
-  const left = normalize(a);
-  const right = normalize(b);
-  const length = Math.max(left.length, right.length);
-  for (let index = 0; index < length; index += 1) {
-    const leftPart = left[index] ?? 0;
-    const rightPart = right[index] ?? 0;
-    if (leftPart < rightPart) return -1;
-    if (leftPart > rightPart) return 1;
-  }
-  return 0;
-}
-function isVersionBehind(installed, current = VERSION) {
-  return compareVersions(installed, current) === -1;
-}
-async function checkForUpgrade(cwd) {
-  const configPath2 = path19.join(cwd, EASY_CODING_DIR, CONFIG_FILE);
-  if (!await pathExists(configPath2)) {
-    return;
-  }
-  let config;
-  try {
-    config = await readConfigYaml(configPath2);
-  } catch {
-    return;
-  }
-  const installed = String(config.harness_version ?? "");
-  if (installed && isVersionBehind(installed)) {
-    process.stderr.write(
-      `easy-coding harness ${installed} is older than CLI ${VERSION}. Run easy-coding upgrade when ready.
-`
-    );
-  }
-}
+import path22 from "path";
+import chalk6 from "chalk";
 
 // src/utils/session.ts
 import { readdir as readdir6 } from "fs/promises";
-import path20 from "path";
+import path21 from "path";
 var STALE_THRESHOLD_MS = 24 * 60 * 60 * 1e3;
 function getSessionDir(cwd) {
-  return path20.join(cwd, EASY_CODING_DIR, SESSIONS_DIR);
+  return path21.join(cwd, EASY_CODING_DIR, SESSIONS_DIR);
 }
 function getSessionFilePath(cwd, ppid) {
   const pid = ppid ?? process.ppid;
-  return path20.join(getSessionDir(cwd), `${pid}.json`);
+  return path21.join(getSessionDir(cwd), `${pid}.json`);
 }
 async function readSessionFile(cwd, ppid) {
   const content = await readTextIfExists(getSessionFilePath(cwd, ppid));
@@ -2839,30 +2971,36 @@ async function readSessionFile(cwd, ppid) {
 async function status() {
   renderBanner();
   const cwd = process.cwd();
-  const configPath2 = path21.join(cwd, EASY_CODING_DIR, CONFIG_FILE);
+  const configPath2 = path22.join(cwd, EASY_CODING_DIR, CONFIG_FILE);
   if (!await pathExists(configPath2)) {
     throw new Error("No easy-coding harness found in this project.");
   }
-  const config = await readConfigYaml(configPath2);
+  const config2 = await readConfigYaml(configPath2);
   const tasks = await listTasks(cwd);
   const taskCounts = summarizeTaskStatuses(tasks);
   const activeTasks = tasks.filter((item) => isActiveTask(item.task));
   const session = await readSessionFile(cwd);
-  const versionRelation = compareVersions(config.harness_version, VERSION);
-  console.log(chalk5.bold("Harness"));
-  console.log(`  version: ${config.harness_version}`);
+  const versionRelation = compareVersions(config2.harness_version, VERSION);
+  console.log(chalk6.bold("Harness"));
+  console.log(`  version: ${config2.harness_version}`);
   console.log(`  cli: ${VERSION}`);
-  if (versionRelation === -1) {
-    console.log(chalk5.yellow("  upgrade: available"));
+  if (versionRelation === -1 || versionRelation === 0 && config2.harness_version !== VERSION) {
+    console.log(chalk6.yellow("  upgrade: available"));
   } else if (versionRelation === 1) {
-    console.log(chalk5.red("  upgrade: CLI is older than project harness"));
+    console.log(chalk6.red("  upgrade: CLI is older than project harness"));
   } else {
     console.log("  upgrade: up to date");
   }
-  console.log(`  agents: ${config.agents.join(", ") || "(none)"}`);
-  console.log(`  project: ${config.project.name}`);
+  console.log(`  agents: ${config2.agents.join(", ") || "(none)"}`);
+  console.log(`  project: ${config2.project.name}`);
+  const projectConfirmMode = isConfirmMode(config2.behavior?.confirm_mode) ? config2.behavior.confirm_mode : "guard";
+  console.log(`  confirm_mode: ${projectConfirmMode}`);
   console.log("");
-  console.log(chalk5.bold("Session"));
+  console.log(chalk6.bold("Session"));
+  const sessionConfirmMode = session?.confirm_mode;
+  console.log(`  confirm_mode: ${sessionConfirmMode ?? "project default"}`);
+  console.log(`  effective_confirm_mode: ${sessionConfirmMode ?? projectConfirmMode}`);
+  console.log(`  harness: ${session?.harness_disabled ? "disabled for this session" : "enabled"}`);
   if (session?.current_task) {
     const taskPath = getTaskJsonPath(cwd, session.current_task);
     if (await pathExists(taskPath)) {
@@ -2877,7 +3015,7 @@ async function status() {
     console.log("  no active session");
   }
   console.log("");
-  console.log(chalk5.bold("Tasks"));
+  console.log(chalk6.bold("Tasks"));
   console.log(`  total: ${tasks.length}`);
   for (const [taskStatus, count] of Object.entries(taskCounts)) {
     console.log(`  ${taskStatus}: ${count}`);
@@ -2893,8 +3031,8 @@ async function status() {
 
 // src/commands/update.ts
 import { execFileSync } from "child_process";
-import { cancel as cancel4, confirm as confirm3, outro as outro4 } from "@clack/prompts";
-import chalk6 from "chalk";
+import { cancel as cancel5, confirm as confirm4, outro as outro5 } from "@clack/prompts";
+import chalk7 from "chalk";
 async function update(opts) {
   renderBanner();
   const tag = opts.tag ?? "latest";
@@ -2907,24 +3045,24 @@ async function update(opts) {
     return;
   }
   if (!opts.yes) {
-    const confirmed = await confirm3({
+    const confirmed = await confirm4({
       message: `Update the global CLI to ${spec}?`,
       initialValue: true
     });
     if (typeof confirmed === "symbol" || !confirmed) {
-      cancel4("Update cancelled.");
+      cancel5("Update cancelled.");
       return;
     }
   }
-  console.log(chalk6.cyan(`\u2192 npm install -g ${spec}`));
+  console.log(chalk7.cyan(`\u2192 npm install -g ${spec}`));
   execFileSync("npm", ["install", "-g", spec], { stdio: "inherit" });
-  outro4(chalk6.green("Global CLI updated."));
+  outro5(chalk7.green("Global CLI updated."));
 }
 
 // src/commands/upgrade.ts
-import path22 from "path";
-import { cancel as cancel5, confirm as confirm4, outro as outro5 } from "@clack/prompts";
-import chalk7 from "chalk";
+import path23 from "path";
+import { cancel as cancel6, confirm as confirm5, outro as outro6 } from "@clack/prompts";
+import chalk8 from "chalk";
 var EXPECTED_HOOK_REGISTRATION_SCRIPTS = {
   "claude-code": [
     { event: "SessionStart", scriptName: "session-start.py" },
@@ -2962,13 +3100,13 @@ async function upgrade(opts) {
   const parentTopologyRefresh = await resolveParentTopologyRefresh(targets, pending);
   const childTopologyRefreshes = await resolveChildTopologyRefreshes(targets, pending);
   if (pending.length === 0 && !parentTopologyRefresh && childTopologyRefreshes.length === 0) {
-    outro5(chalk7.green(`easy-coding harness is already up to date (${VERSION}).`));
+    outro6(chalk8.green(`easy-coding harness is already up to date (${VERSION}).`));
     return;
   }
   const summary = [
     "Upgrade targets:",
     ...pending.length > 0 ? pending.map(
-      ({ target, config }) => `- ${target.label}: ${String(config.harness_version ?? "unknown")} -> ${VERSION}; agents: ${config.agents.join(", ")}`
+      ({ target, config: config2 }) => `- ${target.label}: ${String(config2.harness_version ?? "unknown")} -> ${VERSION}; agents: ${config2.agents.join(", ")}`
     ) : ["- (none)"],
     ...parentTopologyRefresh ? [
       "Supermodule topology refresh:",
@@ -2980,6 +3118,7 @@ async function upgrade(opts) {
     ].filter(Boolean) : [],
     "Will overwrite managed skills, hooks, agents, templates, and generated main-constraint regions.",
     "Will update project-init task to recommend ec-init re-run for version adaptation.",
+    "Will migrate behavior.strict_confirm/auto_mode to behavior.confirm_mode and remove the old keys.",
     "Will migrate legacy workflow stage metadata; memory content, spec, and project knowledge files remain untouched."
   ].join("\n");
   if (opts.dryRun) {
@@ -2987,31 +3126,32 @@ async function upgrade(opts) {
     return;
   }
   if (!opts.yes) {
-    const shouldUpgrade = await confirm4({
+    const shouldUpgrade = await confirm5({
       message: "Apply this harness upgrade?",
       initialValue: true
     });
     if (typeof shouldUpgrade === "symbol" || !shouldUpgrade) {
-      cancel5("Upgrade cancelled.");
+      cancel6("Upgrade cancelled.");
       return;
     }
   }
-  for (const { target, config } of pending) {
-    const projectId = await writeRuntimeScaffold(target.dir, config.agents, {
+  for (const { target, config: config2 } of pending) {
+    const projectId = await writeRuntimeScaffold(target.dir, config2.agents, {
       supermodule: target.supermodule
     });
-    const artifacts = await configurePlatformsForDir(target.dir, config.agents, {
+    const artifacts = await configurePlatformsForDir(target.dir, config2.agents, {
       supermodule: target.boundary,
       projectId
     });
     await writeInstallManifest(target.dir, {
       harnessVersion: VERSION,
-      agents: config.agents,
+      agents: config2.agents,
       artifacts
     });
     await ensureEasyCodingSessionsIgnored(target.dir);
     await ensureHookBytecodeIgnored(target.dir);
     await migrateLegacyWorkflowState(target.dir);
+    await migrateConfirmModeConfig(target.configPath);
     await updateHarnessVersion(target.configPath, VERSION);
     await updateSupermoduleConfig(target.configPath, target.supermodule);
     await setPendingInitSince(target.dir, VERSION);
@@ -3027,8 +3167,8 @@ async function upgrade(opts) {
   for (const { target } of childTopologyRefreshes) {
     await updateSupermoduleConfig(target.configPath, target.supermodule);
   }
-  outro5(
-    chalk7.green(
+  outro6(
+    chalk8.green(
       pending.length > 0 ? `easy-coding harness upgraded to ${VERSION}.` : "easy-coding supermodule topology refreshed."
     )
   );
@@ -3039,9 +3179,9 @@ async function resolvePendingUpgradeTargets(targets) {
     if (!await pathExists(target.configPath)) {
       continue;
     }
-    const config = await readConfigYaml(target.configPath);
-    const installedVersion = String(config.harness_version ?? "");
-    const hasAgents = Array.isArray(config.agents) && config.agents.length > 0;
+    const config2 = await readConfigYaml(target.configPath);
+    const installedVersion = String(config2.harness_version ?? "");
+    const hasAgents = Array.isArray(config2.agents) && config2.agents.length > 0;
     if (!installedVersion || !hasAgents) {
       throw new Error(
         `${target.label} config.yaml is missing required harness fields (harness_version / agents). This project predates the current config layout. Run \`easy-coding clear\` then \`easy-coding init\` to migrate \u2014 your tasks, spec, and memory are preserved.`
@@ -3053,21 +3193,21 @@ async function resolvePendingUpgradeTargets(targets) {
         `${target.label} harness version ${installedVersion} is newer than CLI ${VERSION}. Update the CLI first.`
       );
     }
-    if (relation === -1 || relation === 0 && (await needsHookConfigRefresh(target, config) || await hasLegacyWorkflowState(target.dir))) {
-      pending.push({ target, config });
+    if (relation === -1 || relation === 0 && (installedVersion !== VERSION || await needsHookConfigRefresh(target, config2) || await hasLegacyWorkflowState(target.dir))) {
+      pending.push({ target, config: config2 });
     }
   }
   return pending;
 }
-async function needsHookConfigRefresh(target, config) {
-  const projectId = typeof config.project?.id === "string" ? config.project.id.trim() : "";
+async function needsHookConfigRefresh(target, config2) {
+  const projectId = typeof config2.project?.id === "string" ? config2.project.id.trim() : "";
   if (!projectId) {
     return true;
   }
   const manifest = await readInstallManifest(target.dir);
-  for (const agent of config.agents) {
+  for (const agent of config2.agents) {
     const meta = resolvePlatformMeta(target.dir, agent);
-    const configPath2 = path22.join(target.dir, meta.hookConfigFile);
+    const configPath2 = path23.join(target.dir, meta.hookConfigFile);
     const content = await readTextIfExists(configPath2);
     if (content === null) {
       return true;
@@ -3184,7 +3324,7 @@ function isCurrentProjectManagedHookPath(cwd, hookPath, meta, platform) {
       return true;
     }
     return pathAliases(
-      normalizePathForHookComparison(path22.resolve(cwd, relativeHookPath))
+      normalizePathForHookComparison(path23.resolve(cwd, relativeHookPath))
     ).includes(normalizedHookPath);
   });
 }
@@ -3210,19 +3350,19 @@ async function resolveParentTopologyRefresh(targets, pending) {
   if (!await pathExists(parent.configPath)) {
     return null;
   }
-  const config = await readConfigYaml(parent.configPath);
-  if (!Array.isArray(config.agents) || config.agents.length === 0) {
+  const config2 = await readConfigYaml(parent.configPath);
+  if (!Array.isArray(config2.agents) || config2.agents.length === 0) {
     return null;
   }
   const submodulePaths = parent.supermodule.submodules ?? [];
-  const configuredSubmodules = Array.isArray(config.supermodule?.submodules) ? config.supermodule.submodules : [];
-  const needsRefresh = config.supermodule?.role !== "super-parent" || !sameStringList(configuredSubmodules, submodulePaths);
+  const configuredSubmodules = Array.isArray(config2.supermodule?.submodules) ? config2.supermodule.submodules : [];
+  const needsRefresh = config2.supermodule?.role !== "super-parent" || !sameStringList(configuredSubmodules, submodulePaths);
   if (!needsRefresh) {
     return null;
   }
   return {
     target: parent,
-    agents: config.agents,
+    agents: config2.agents,
     submodulePaths
   };
 }
@@ -3233,8 +3373,8 @@ async function resolveChildTopologyRefreshes(targets, pending) {
     if (target.supermodule.role !== "submodule-child" || pendingLabels.has(target.label) || !await pathExists(target.configPath)) {
       continue;
     }
-    const config = await readConfigYaml(target.configPath);
-    if (config.supermodule?.role === "submodule-child" && config.supermodule.parent === target.supermodule.parent) {
+    const config2 = await readConfigYaml(target.configPath);
+    if (config2.supermodule?.role === "submodule-child" && config2.supermodule.parent === target.supermodule.parent) {
       continue;
     }
     refreshes.push({ target });
@@ -3256,7 +3396,7 @@ function withErrorHandling(fn) {
     try {
       await fn(opts);
     } catch (error) {
-      console.error(chalk8.red("Error:"), error instanceof Error ? error.message : error);
+      console.error(chalk9.red("Error:"), error instanceof Error ? error.message : error);
       if (process.env.EC_DEBUG && error instanceof Error) {
         console.error(error.stack);
       }
@@ -3274,6 +3414,7 @@ program.command("init").description("Initialize easy-coding harness in current p
 program.command("add-agent").description("Add agent platform support to an existing project").option("--agent <list>", "Comma-separated platforms to add").option("--submodules <list>", "Comma-separated initialized submodule paths or names to update").option("--no-submodules", "Add the agent only to the current directory").action(withErrorHandling(addAgent));
 program.command("upgrade").description("Upgrade harness files to current CLI version").option("--dry-run", "Preview changes without applying").option("-y, --yes", "Skip confirmation").action(withErrorHandling(upgrade));
 program.command("update").description("Refresh the global CLI to the latest published version").option("--tag <tag>", "npm dist-tag or version to install", "latest").option("--dry-run", "Preview the install command without running it").option("-y, --yes", "Skip confirmation").action(withErrorHandling(update));
+program.command("config").description("Interactively configure project-level harness behavior").action(withErrorHandling(config));
 program.command("status").description("Show installed agents, version, and tasks").action(withErrorHandling(status));
 program.command("clear").description("Remove installed harness files (skills, hooks, config); keep tasks, spec, memory").option("--submodules <list>", "Comma-separated initialized submodule paths or names to clear").option("--no-submodules", "Clear only the current directory").option("--dry-run", "Preview what would be removed without deleting").option("-y, --yes", "Skip confirmation").action(withErrorHandling(clear));
 program.parse();