freeharness 0.4.1 → 0.4.2

package/dist/infra/fsutil.js

@@ -73,8 +73,45 @@ export function copyExecutable(src, dst, dryRun) {
     }
     return dst;
 }
-/** Additive, deduped by command; never removes existing entries, so claude-mem stays intact. */
-export function mergeClaudeHook(settingsPath, eventName, entry, dryRun) {
+/** Shell operators that chain, pipe or redirect: after the owner key a foreign command runs too. */
+const CHAINED = /[;&|<>`\n\r]|\$\(/;
+/** "owned": the key alone or with flags only; a hook without a string command is "foreign". */
+function ownership(hook, ownerKey) {
+    const command = hook.command;
+    if (ownerKey === undefined || typeof command !== "string")
+        return "foreign";
+    if (command === ownerKey)
+        return "owned";
+    if (!command.startsWith(`${ownerKey} `))
+        return "foreign";
+    return CHAINED.test(command.slice(ownerKey.length)) ? "chained" : "owned";
+}
+function isOwnedEntry(e, ownerKey) {
+    return e.hooks.length > 0 && e.hooks.every((h) => ownership(h, ownerKey) === "owned");
+}
+function runsInEntry(e, ownerKey) {
+    return e.hooks.some((h) => ownership(h, ownerKey) !== "foreign");
+}
+function runsCommand(e, command) {
+    return e.hooks.some((h) => h.command === command);
+}
+/**
+ * Merges one hook entry into a settings event, deduped by command.
+ *
+ * Without `ownerKey` the merge is purely additive. With it, entries whose every command
+ * runs the owned script with flags only are FreeHarness's own: the first is replaced in
+ * place when its command or `onFailure` differs and the rest are dropped, so a flag change
+ * never leaves a stale copy running beside the new one and an older install gains the
+ * fail-closed field. Every other entry, claude-mem's included,
+ * stays as is, even one that mixes the owned script with a foreign command or chains one
+ * to it; that one is only reported.
+ * @param entry Entry to merge; its first command is the dedupe key.
+ * @param dryRun Computes the result without writing.
+ * @param ownerKey Command prefix that runs the owned script, without flags.
+ * @returns What the merge appended, replaced or left running in a shared entry; `collapsed` when
+ *   several owned copies became one, so the note names a collapse rather than a reset.
+ */
+export function mergeClaudeHook(settingsPath, eventName, entry, dryRun, ownerKey) {
     let settings = {};
     if (fs.existsSync(settingsPath)) {
         settings = JSON.parse(fs.readFileSync(settingsPath, "utf8"));
@@ -83,14 +120,40 @@ export function mergeClaudeHook(settingsPath, eventName, entry, dryRun) {
     settings.hooks[eventName] ??= [];
     const arr = settings.hooks[eventName];
     const ourCmd = entry.hooks[0].command;
-    const exists = arr.some((e) => e.hooks.some((h) => h.command === ourCmd));
-    if (!exists)
+    const ourOnFailure = entry.hooks[0].onFailure;
+    const owned = (e) => isOwnedEntry(e, ownerKey);
+    const ownedAt = arr.flatMap((e, i) => (owned(e) ? [i] : []));
+    const ownedHooks = ownedAt.flatMap((i) => arr[i].hooks);
+    const current = ownedAt.length === 1 && ownedHooks.length === 1 && ownedHooks[0].command === ourCmd && ownedHooks[0].onFailure === ourOnFailure;
+    const shared = arr.some((e) => runsInEntry(e, ownerKey) && !owned(e));
+    let result;
+    if (ownedAt.length > 0 && !current) {
+        const stale = ownedHooks.find((h) => h.command !== ourCmd)?.command;
+        // A current copy already ran fail-closed, so dropping a stale one beside it resets nothing.
+        const hasCurrent = ownedHooks.some((h) => h.command === ourCmd && h.onFailure === ourOnFailure);
+        const onFailureChanged = !hasCurrent && ownedHooks.some((h) => h.onFailure !== ourOnFailure);
+        settings.hooks[eventName] = arr.flatMap((e, i) => (i === ownedAt[0] ? [entry] : owned(e) ? [] : [e]));
+        result = {
+            outcome: "replaced",
+            ...(typeof stale === "string" ? { replacedCommand: stale } : {}),
+            ...(onFailureChanged ? { onFailureChanged: true } : {}),
+            ...(ownedHooks.length > 1 ? { collapsed: true } : {}),
+        };
+    }
+    else if (!arr.some((e) => runsCommand(e, ourCmd))) {
         arr.push(entry);
-    if (!dryRun && !exists) {
+        result = { outcome: "added" };
+    }
+    else {
+        result = { outcome: "present" };
+    }
+    if (!dryRun && result.outcome !== "present") {
         ensureDir(path.dirname(settingsPath), false);
         fs.writeFileSync(settingsPath, JSON.stringify(settings, null, 2), "utf8");
     }
-    return { added: !exists };
+    // A shared entry already running the current command, with no entry of our own, is the only copy.
+    const hasSharedCopy = shared && (result.outcome === "added" || ownedAt.length > 0);
+    return { ...result, hasSharedCopy };
 }
 /** A key is written only when absent, so a value the user (or another tool) set is never overwritten; `$comment` keys are never copied. */
 export function mergeSettingsKeys(settingsPath, entries, dryRun) {

package/dist/infra/manifest.d.ts

@@ -39,9 +39,10 @@ export interface ProfileRecord {
  * Resolves the manifest path for a scope.
  * @param scope user | project.
  * @param projectRoot Project root (project scope).
+ * @param home Home whose `.claude` holds the user-scope manifest.
  * @returns Absolute manifest path.
  */
-export declare function manifestPath(scope: Scope, projectRoot: string): string;
+export declare function manifestPath(scope: Scope, projectRoot: string, home?: string): string;
 /**
  * Reads a manifest when present.
  * @param file Manifest path.

package/dist/infra/manifest.js

@@ -10,10 +10,11 @@ import { spawnSync } from "node:child_process";
  * Resolves the manifest path for a scope.
  * @param scope user | project.
  * @param projectRoot Project root (project scope).
+ * @param home Home whose `.claude` holds the user-scope manifest.
  * @returns Absolute manifest path.
  */
-export function manifestPath(scope, projectRoot) {
-    const claudeDir = scope === "user" ? path.join(os.homedir(), ".claude") : path.join(projectRoot, ".claude");
+export function manifestPath(scope, projectRoot, home = os.homedir()) {
+    const claudeDir = scope === "user" ? path.join(home, ".claude") : path.join(projectRoot, ".claude");
     return path.join(claudeDir, "freeharness", "install-manifest.json");
 }
 /**

package/dist/infra/prices.d.ts

@@ -0,0 +1,18 @@
+/** One installed value moved from a previously shipped price to the current one. */
+export interface PriceCorrection {
+    row: string;
+    field: string;
+    from: number;
+    to: number;
+}
+/**
+ * Adds shipped rows missing from the installed table, in shipped order, and corrects a value
+ * only while it still equals one the shipped history lists, so an owner edit is never touched.
+ */
+export declare function mergePriceTable(installed: string, shipped: string): {
+    text: string;
+    added: string[];
+    corrected: PriceCorrection[];
+} | {
+    warning: string;
+};

package/dist/infra/prices.js

@@ -0,0 +1,64 @@
+function isPlainObject(value) {
+    return typeof value === "object" && value !== null && !Array.isArray(value);
+}
+/** True when `history[row][field]` is an array listing `value` as a number; malformed entries never match. */
+function wasShipped(history, row, field, value) {
+    if (!isPlainObject(history) || !Object.prototype.hasOwnProperty.call(history, row))
+        return false;
+    const fields = history[row];
+    if (!isPlainObject(fields) || !Object.prototype.hasOwnProperty.call(fields, field))
+        return false;
+    const values = fields[field];
+    return Array.isArray(values) && values.some((v) => typeof v === "number" && v === value);
+}
+/**
+ * Adds shipped rows missing from the installed table, in shipped order, and corrects a value
+ * only while it still equals one the shipped history lists, so an owner edit is never touched.
+ */
+export function mergePriceTable(installed, shipped) {
+    let installedObj;
+    try {
+        installedObj = JSON.parse(installed);
+    }
+    catch {
+        return { warning: "installed price table is not valid JSON" };
+    }
+    if (!isPlainObject(installedObj))
+        return { warning: "installed price table is not a JSON object" };
+    if (!isPlainObject(installedObj.prices))
+        return { warning: "installed price table has no `prices` object" };
+    const shippedObj = JSON.parse(shipped);
+    const shippedPrices = shippedObj.prices;
+    const history = shippedObj.shipped_history;
+    const mergedPrices = { ...installedObj.prices };
+    const corrected = [];
+    for (const row of Object.keys(mergedPrices)) {
+        const current = mergedPrices[row];
+        const shippedRow = Object.prototype.hasOwnProperty.call(shippedPrices, row) ? shippedPrices[row] : undefined;
+        if (!isPlainObject(current) || !isPlainObject(shippedRow))
+            continue;
+        let next;
+        for (const field of Object.keys(current)) {
+            const from = current[field];
+            const to = shippedRow[field];
+            if (typeof from !== "number" || typeof to !== "number" || from === to)
+                continue;
+            if (!wasShipped(history, row, field, from))
+                continue;
+            next ??= { ...current };
+            next[field] = to;
+            corrected.push({ row, field, from, to });
+        }
+        if (next)
+            mergedPrices[row] = next;
+    }
+    const added = [];
+    for (const key of Object.keys(shippedPrices)) {
+        if (Object.prototype.hasOwnProperty.call(mergedPrices, key))
+            continue;
+        mergedPrices[key] = shippedPrices[key];
+        added.push(key);
+    }
+    const merged = { ...installedObj, prices: mergedPrices };
+    return { text: `${JSON.stringify(merged, null, 2)}\n`, added, corrected };
+}

package/node_modules/@freeharness/core/dist/tiers.d.ts

@@ -3,11 +3,20 @@ export type Tier = "strong" | "standard" | "fast";
 /** OpenCode ids are provider-specific: emitted as env placeholders, not concrete models. */
 export declare const TIER_MODEL: Record<HarnessTarget, Record<Tier, string>>;
 export declare function mapTier(target: HarnessTarget, tier: Tier): string;
+/** Reached only by escalation. */
+export type EscalationTier = "frontier";
+export declare const ESCALATION_MODEL: Record<HarnessTarget, string>;
+/** Frontier escalates via `ESCALATION_MODEL`; other tiers via `mapTier`. */
+export declare function mapModel(target: HarnessTarget, tier: Tier | EscalationTier): string;
+/** Neutral effort vocabulary; adapters decide emission. */
+export declare const EFFORT_LEVELS: readonly ["low", "medium", "high", "xhigh", "max"];
+export type EffortLevel = (typeof EFFORT_LEVELS)[number];
+export declare function isEffortLevel(v: unknown): v is EffortLevel;
 /** Body text of the leading frontmatter block, or undefined without one. */
 export declare function frontmatterBody(content: string): string | undefined;
 /** Rebuilds a file's frontmatter fence around `fn`'s rewrite of the body; content unchanged without a fence or when `fn` returns the same body. */
 export declare function replaceFrontmatterBody(content: string, fn: (body: string) => string): string;
-/** Rewrites the frontmatter `model:` tier to its target concrete id (`[ \t]*`, never `\s*`: `\r` is a JS line terminator). */
+/** Maps the frontmatter `model:` tier and, for Claude Code, `cache_ttl:` (`[ \t]*`, never `\s*`: `\r` is a JS line terminator). */
 export declare function rewriteAgentModel(content: string, target: HarnessTarget): string;
 /** True when the frontmatter block declares the key at column 0. */
 export declare function frontmatterHasKey(content: string, key: string): boolean;

package/node_modules/@freeharness/core/dist/tiers.js

@@ -13,6 +13,20 @@ const TIERS = new Set(["strong", "standard", "fast"]);
 export function mapTier(target, tier) {
     return TIER_MODEL[target][tier];
 }
+export const ESCALATION_MODEL = {
+    "claude-code": "fable",
+    plugin: "fable",
+    opencode: "${OPENCODE_FRONTIER_MODEL}",
+};
+/** Frontier escalates via `ESCALATION_MODEL`; other tiers via `mapTier`. */
+export function mapModel(target, tier) {
+    return tier === "frontier" ? ESCALATION_MODEL[target] : mapTier(target, tier);
+}
+/** Neutral effort vocabulary; adapters decide emission. */
+export const EFFORT_LEVELS = ["low", "medium", "high", "xhigh", "max"];
+export function isEffortLevel(v) {
+    return typeof v === "string" && EFFORT_LEVELS.includes(v);
+}
 // Frontmatter block, CRLF-tolerant, closing fence may lack a trailing newline: preserves a
 // file's own line endings for every caller below.
 const FRONTMATTER_RE = /^---(\r?\n)([\s\S]*?)(\r?\n)---(\r?\n|$)/;
@@ -39,9 +53,17 @@ export function replaceFrontmatterBody(content, fn) {
     const fenceEndIndex = m.index + m.whole.length;
     return content.slice(0, m.index) + `---${m.openNl}${body}${m.closeNl}---${m.afterNl}` + content.slice(fenceEndIndex);
 }
-/** Rewrites the frontmatter `model:` tier to its target concrete id (`[ \t]*`, never `\s*`: `\r` is a JS line terminator). */
+// Claude Code reads the TTL only as nested `experimental.cacheTtl`; other adapters strip it.
+const CACHE_TTL_TARGETS = new Set(["claude-code", "plugin"]);
+/** Maps the frontmatter `model:` tier and, for Claude Code, `cache_ttl:` (`[ \t]*`, never `\s*`: `\r` is a JS line terminator). */
 export function rewriteAgentModel(content, target) {
-    return replaceFrontmatterBody(content, (body) => body.replace(/^(model:[ \t]*)(\w+)[ \t]*$/m, (line, prefix, value) => TIERS.has(value) ? `${prefix}${mapTier(target, value)}` : line));
+    return replaceFrontmatterBody(content, (body) => {
+        const mapped = body.replace(/^(model:[ \t]*)(\w+)[ \t]*$/m, (line, prefix, value) => TIERS.has(value) ? `${prefix}${mapTier(target, value)}` : line);
+        if (!CACHE_TTL_TARGETS.has(target))
+            return mapped;
+        const nl = mapped.includes("\r\n") ? "\r\n" : "\n";
+        return mapped.replace(/^cache_ttl:[ \t]*(\S+)[ \t]*(\r?)$/m, (_line, value, cr) => `experimental:${nl}  cacheTtl: ${value}${cr}`);
+    });
 }
 // Column-0 key of one frontmatter line, or undefined.
 function frontmatterKey(line) {

package/node_modules/@freeharness/core/package.json

@@ -1,6 +1,6 @@
 {
   "name": "@freeharness/core",
-  "version": "0.4.1",
+  "version": "0.4.2",
   "private": true,
   "description": "FreeHarness pure domain: capability registry, install planner, model tiers, install context, and ports. No I/O, zero runtime dependencies.",
   "type": "module",

package/node_modules/@freeharness/sdd/PROVENANCE.yaml

@@ -4,8 +4,8 @@ upstream:
   name: "@fission-ai/openspec"
   repo: https://github.com/Fission-AI/OpenSpec
   fork: https://github.com/anegrelli/OpenSpec
-  baseline_version: "1.13.0"
-  baseline_commit: "9d4e5974"
+  baseline_version: "1.15.0"
+  baseline_commit: "6d04a1b5"
 
 vendored:
   assets:
@@ -83,6 +83,8 @@ patches:
   - "task-progress.ts disposition kinds: `countTasksFromContent` resolves a task only for the documented kinds (superseded, moved, external); any other kind leaves the task open, matching the converge hook and the ERROR `validate --strict` reports for it"
   - "formatTaskStatus (task-progress.ts): accepts the optional disposition-aware counts, reporting a change complete when `open` is zero and naming the dispositioned count while tasks are still open; a caller passing only `total`/`completed` keeps the upstream reading"
   - "shim disposition rules (validate/status/archive, FreeHarness addition): validate.ts adds an ERROR for a disposition under a checked task, an unknown kind, an unresolved `superseded`/`moved` target, or an empty `external` reference; status.ts exposes `done`/`open`/`dispositioned` in `--json`, with the tasks resolved (never open) exactly when `open` is zero; archive.ts excludes a dispositioned task from the unchecked-task blocker and prints the dispositioned tasks grouped by kind after the other archive output"
+  - "spec-discovery.ts (divergence from the #1870 port of src/utils/spec-discovery.ts, see ports_1_13_2): findUnreadDeltaFiles and findUnreadDeltaFilesSync drive one generator walker (walkUnreadDeltaFiles) that yields each readdir/stat/read call, so the async and sync twins share one set of walk rules and return the same list; the results are unchanged"
+  - "specs-apply.ts comment: the RENAMED-vs-REMOVED conflict comment in buildUpdatedSpec is restated as a present-tense counterfactual (a missing REMOVED target is a no-op, so without the explicit rejection the REMOVED silently does nothing); code unchanged"
 
 skipped:
   - "telemetry (PostHog); store/worksets; shell completions; version-check/self-update"
@@ -167,7 +169,282 @@ ports_1_13_ignored:
   - pr: "#1782"
     note: "retire_capabilities — capability retirement (retire_capabilities marker + retireSpec deletion path) was not reconstructed in P3 inc.4c's archive shim; retireSpec/finalizeRetiredSpec are vendored in specs-apply.ts but unused by the shim orchestration"
 
+# vendor-sync-2026-10 ports from upstream 9d4e5974 (1.13.0) -> db230978 (1.13.2, MIT).
+# Each entry names the upstream file(s), the PR, and the vendored target;
+# `sync adopt sdd` never touches these (tracked assets only).
+ports_1_13_2:
+  - upstream: src/core/templates/workflows/explore.ts, src/core/templates/workflows/update-change.ts
+    pr: "#1731"
+    target: vendor/openspec/generation/templates/workflows/{explore,update-change}.ts
+    note: "explore and update-change describe an `openspec list --json` entry by name and task status only; the schema field this text once cited is gone from that output"
+  - upstream: src/core/templates/workflows/archive-change.ts
+    pr: "#1795"
+    target: vendor/openspec/generation/templates/workflows/archive-change.ts
+    note: "archive-change counts incomplete tasks from the selected change's `totalTasks`/`completedTasks` in `openspec list --json` rather than reading tasks.md directly, so a schema's custom-named or glob task files are counted; a missing or duplicate change entry, invalid JSON, or an inconsistent count stops the workflow before syncing or archiving, and a zero `totalTasks` skips the warning instead of a missing tasks.md doing so"
+  - upstream: src/core/templates/workflows/update-change.ts
+    pr: "#1733"
+    target: vendor/openspec/generation/templates/workflows/update-change.ts
+    note: "update-change treats a `skipped` artifact as untouched rather than missing, defers only a `ready`/`blocked` artifact with empty `existingOutputPaths` to the continue workflow, and adds a confirmed, re-verified procedure (fresh instructions, a path inside changeRoot that does not already exist, a create that fails on collision) for adding one concrete file under a glob artifact that already has other files"
+  - upstream: schemas/spec-driven/schema.yaml
+    pr: "#1955"
+    target: "canonical/openspec/schema.spec-driven.yaml (override) + assets/schema.upstream.yaml"
+    note: "the tasks instruction requires each task group to land the tests and documentation its own work calls for, reserving a final group for integration checks only, so a group's deferred verification never cascades failures back through the groups after it; FreeHarness addition: the final group may also hold the whole-change gates (full suite, simulate, matrix coverage, baseline bumps)"
+  - upstream: src/core/parsers/requirement-blocks.ts, src/core/specs-apply.ts, src/core/validation/validator.ts
+    pr: "#1809"
+    target: vendor/openspec/validation/parsers/requirement-blocks.ts, vendor/openspec/apply/specs-apply.ts, vendor/openspec/validation/validator.ts
+    note: "diffScenarioNames reports both the scenario names a MODIFIED block drops and the ones it introduces, plus both counts, alongside the existing scenario-loss guard; findMissingCurrentScenarios becomes the guard's missing-half read of the same comparison, so archive and validate cannot drift on what they report any more than on what they refuse"
+  - upstream: src/core/templates/workflows/{apply-change,archive-change,explore,project-root,propose,sync-specs,update-change}.ts, src/commands/workflow/new-change.ts
+    pr: "#1787"
+    target: vendor/openspec/generation/templates/workflows/{apply-change,archive-change,explore,project-root,propose,sync-specs,update-change}.ts, src/shim/new-change.ts
+    note: "the six emitted workflows carry the shared project-check text (project-root.ts): before the first write, confirm `openspec list --json` reports a root; with none, an auto-selected workflow drops OpenSpec silently while an explicit OpenSpec request stops and asks, and neither branch runs `openspec init` or hand-creates openspec/ as a side effect; `openspec new change` prints a dimmed notice naming the directory when it fell back to an implicit root"
+  - upstream: schemas/spec-driven/schema.yaml, src/core/templates/workflows/archive-change.ts, src/utils/task-progress.ts
+    pr: "#1773"
+    target: canonical/openspec/schema.spec-driven.yaml (override), vendor/openspec/generation/templates/workflows/archive-change.ts, vendor/openspec/engine/task-progress.ts, vendor/openspec/validation/task-lines.ts
+    note: "a checkbox is done only when its bracket holds `x`/`X` (any spacing, any case); every other marker, including `- [~]`, `- [-]` and an empty `- []`, counts as open, and a line with no checkbox is not tracked at all"
+  - upstream: src/core/templates/workflows/explore.ts
+    pr: "#1788"
+    target: vendor/openspec/generation/templates/workflows/explore.ts
+    note: "explore names the propose workflow at the implement-request handoff, the capture-done handoff, the discovery-end offer, the summary next step, and the don't-implement guardrail; upstream resolves each against the installed workflow set, while explore.ts hardcodes the shipped-workflow wording (`/opsx:propose`, `/opsx:apply`) because FreeHarness always emits both workflows, so no CLI-only fallback is rendered"
+  - upstream: src/core/command-generation/generator.ts, src/core/shared/skill-generation.ts, src/core/templates/optional-workflow.ts, src/core/templates/workflows/{apply-change,archive-change,propose,update-change}.ts
+    pr: "#1775"
+    target: vendor/openspec/generation/templates/workflows/{apply-change,update-change}.ts
+    note: "adapted: upstream templates author an `[[opsx:if-workflow <id>]]...[[opsx:else]]...[[opsx:end]]` conditional that generation resolves against the installed workflow set; FreeHarness vendors no resolver and no optional-workflow.ts. The templates are hand-edited with each conditional already resolved for the fixed six-workflow set: continue and new are not emitted, so their handoffs render the CLI fallback, and no emitted text names a workflow FreeHarness does not ship"
+  - upstream: src/core/parsers/requirement-blocks.ts, src/core/specs-apply.ts, src/core/validation/validator.ts
+    pr: "#1804"
+    target: vendor/openspec/validation/parsers/requirement-blocks.ts, vendor/openspec/apply/specs-apply.ts, vendor/openspec/validation/validator.ts
+    note: "a well-formed requirement block written outside every delta section is reported as a WARNING naming where it sits, instead of being silently ignored by the section reader"
+  - upstream: src/core/templates/workflows/update-change.ts
+    pr: "#1840"
+    target: vendor/openspec/generation/templates/workflows/update-change.ts
+    note: "update-change drafts the requested edit in the conversation during step 4 and performs every artifact write in step 5; no earlier step edits a file, and step 5 shows the drafted edit alongside each proposed revision"
+  - upstream: src/utils/task-progress.ts
+    pr: "#1862"
+    target: vendor/openspec/engine/task-progress.ts, vendor/openspec/validation/task-lines.ts
+    note: "the task-line pattern accepts `-`, `*`, `+` and an ordered `1.`/`1)` marker (up to nine digits) ahead of the checkbox, so an unchecked task under a marker other than `-`/`*` is counted instead of read as untracked"
+  - upstream: "(FreeHarness, not upstream)"
+    pr: "diverges from #1862, #1773"
+    target: vendor/openspec/engine/task-progress.ts, vendor/openspec/validation/task-lines.ts, canonical/hooks/freeharness-converge.mjs, canonical/hooks/freeharness-session-start
+    note: "the task-line pattern is rewritten in a linear form (`\\[(?:\\s*([^\\]\\s])\\s*\\](?![([])|\\](?![([])|\\s+\\])`): upstream's `\\s*([^\\]\\s]?)\\s*` puts two whitespace runs around an optional token and backtracks quadratically, so one `- [` line of spaces stalls every reader for seconds to minutes. Matches are unchanged except that group 1 is undefined for a blank box, which every done check reads as `(match[1] ?? '').toLowerCase() === 'x'`. The session-start hook also skips lines longer than 10,000 characters before matching"
+  - upstream: src/core/templates/workflows/archive-change.ts, src/core/templates/workflows/sync-specs.ts
+    pr: "#1701"
+    target: vendor/openspec/generation/templates/workflows/{archive-change,sync-specs}.ts
+    note: "sync and archive create a new capability's main spec from ADDED requirements only; a delta with a MODIFIED or RENAMED requirement and no existing main spec is reported sync-blocked instead of inventing a prior version, a REMOVED-only delta with no `retire_capabilities` marker is reported blocked (matching archive's 'Spec must have at least one requirement' refusal), and a REMOVED-only delta under that marker is treated as already retired"
+  - upstream: src/core/templates/workflows/explore.ts
+    pr: "#1832"
+    target: vendor/openspec/generation/templates/workflows/explore.ts
+    note: "when the user's own request asks explore to capture the exploration as a change, that request is itself the write confirmation the mode otherwise requires, scoped to the change and artifacts the request names; a yes to explore's own offer confirms only the scope that offer named"
+  - upstream: src/core/list.ts
+    pr: "#1866"
+    target: src/shim/list.ts
+    note: "a change directory entry that no longer resolves while list dates it (removed mid-listing, a symlink with a missing or looping target) is skipped instead of aborting the whole listing"
+  - upstream: src/commands/workflow/instructions.ts, src/core/archive.ts, src/core/validation/validator.ts, src/utils/spec-discovery.ts
+    pr: "#1870"
+    target: src/shim/instructions.ts, src/shim/archive.ts, vendor/openspec/validation/validator.ts, vendor/openspec/validation/spec-discovery.ts
+    note: "a delta file under a change's specs/ that carries delta sections but is not a capability's spec.md (findUnreadDeltaFiles) counts toward archive's has-deltas check, so a change whose only delta content sits at a path the merge never reads is refused instead of archived with nothing merged"
+  - upstream: src/core/parsers/markdown-parser.ts, src/core/parsers/requirement-text.ts, src/core/validation/validator.ts
+    pr: "#1858"
+    target: vendor/openspec/validation/parsers/{markdown-parser,requirement-text}.ts, vendor/openspec/validation/validator.ts
+    note: "a scenario header (`#### Scenario: ...`) with no body under it is reported as an error instead of accepted as an empty scenario"
+  - upstream: src/core/parsers/change-parser.ts
+    pr: "#1856"
+    target: vendor/openspec/validation/parsers/change-parser.ts
+    note: "the change proposal's What-Changes deltas are read through parseDeltaSpec, the same reader `openspec archive` uses, instead of ChangeParser's own simpler pass, so a proposal and the change it describes cannot disagree on what a delta contains; a REMOVED entry written as a bare name is read as a header-only block"
+  - upstream: src/core/parsers/requirement-blocks.ts, src/core/parsers/spec-structure.ts
+    pr: "#1860"
+    target: vendor/openspec/validation/parsers/requirement-blocks.ts, vendor/openspec/validation/parsers/spec-structure.ts
+    note: "normalizeRequirementName drops a trailing run of `#`s preceded by whitespace (an ATX heading's optional closing hashes), so `### Requirement: Foo ###` reads as `Foo`; a name genuinely ending in `#`, like `C#`, is unaffected because the run must be whitespace-preceded; findMainSpecStructureIssues' duplicate-heading check now normalizes through the same function instead of a bare `.trim()`, so a closed heading no longer reads as a distinct duplicate name"
+  - upstream: src/core/parsers/requirement-blocks.ts, src/core/specs-apply.ts
+    pr: "#1864"
+    target: vendor/openspec/validation/parsers/requirement-blocks.ts, vendor/openspec/apply/specs-apply.ts
+    note: "foldRequirementName's case- and whitespace-insensitive typo check also covers ADDED headers, not only REMOVED and the RENAMED/REMOVED cross-section conflict, so two ADDED requirement names differing only in case or interior whitespace are refused as a likely typo"
+  - upstream: src/core/parsers/requirement-blocks.ts, src/core/specs-apply.ts, src/core/validation/validator.ts
+    pr: "#1806"
+    target: vendor/openspec/validation/parsers/requirement-blocks.ts, vendor/openspec/apply/specs-apply.ts, vendor/openspec/validation/validator.ts
+    note: "a `FROM:`/`TO:` line in `## RENAMED Requirements` that never forms a pair (a second FROM overwriting an unpaired first, a TO with no pending FROM, a trailing FROM at section end) is recorded as an UnpairedRename instead of silently dropped, so validate reports it and buildUpdatedSpec refuses the fold instead of guessing a pairing"
+  - upstream: src/core/specs-apply.ts, src/commands/workflow/instructions.ts
+    pr: "#1835"
+    target: vendor/openspec/apply/specs-apply.ts, src/shim/instructions.ts
+    note: "resolveTrustedSpecPath warns when a linked capability spec resolves outside the project root instead of writing there silently; maskHtmlComments becomes a single linear scan instead of a quadratic regex re-scan from every comment opener; printInstructionsText escapes the artifact envelope's tag attributes and inner text (change name, description, rules, dependency description) so a hostile repository's file or directory names cannot forge a sibling tag in the agent-facing instructions output. The commit's dependency-advisory hunks (vitest/fflate version bumps) are excluded: no dependency change is in scope"
+  - upstream: src/commands/workflow/status.ts, src/core/change-status-policy.ts
+    pr: "#1786"
+    target: src/shim/status.ts, vendor/openspec/engine/change-status-policy.ts
+    note: "resolveNextStep returns one next step in both a ready-to-run `command` (with any store flag) and a `sentence` form, so the JSON `nextSteps` array and the text surface's printed command name the same next action instead of risking a mismatch between two independent builders"
+  - upstream: src/commands/change.ts, src/commands/validate.ts, src/commands/workflow/shared.ts, src/commands/workflow/status.ts, src/core/archive.ts, src/core/list.ts, src/utils/nested-change.ts
+    pr: "#1849"
+    target: src/shim/{status,list,archive,validate}.ts
+    note: "a change laid out under a namespace folder (`changes/<area>/<name>/` instead of directly under `changes/`) is detected from the default schema's root markers (.openspec.yaml, proposal.md, ...) and reported by name and validate, list, status and archive instead of being silently mishandled"
+  - upstream: src/core/validation/task-checkboxes.ts, src/core/validation/validator.ts
+    pr: "#1774"
+    target: src/shim/{shared,status,instructions,archive}.ts
+    note: "adapted: when every file the schema tracks as tasks lists items but carries no checkbox (bare `-`/`*`/`+`/ordered bullets with no `[ ]`/`[x]`), findMissingTaskCheckboxWarning returns one warning naming the file and the line of its first bare list item; `status` (JSON warnings and text) and `instructions apply` surface it, and `archive` adds it as an [INFO] blocker, since the archive-blocker gate otherwise reads the zero total as already complete; `validate` does not report it"
+  - upstream: src/commands/workflow/instructions.ts, src/commands/workflow/shared.ts
+    pr: "#1732"
+    target: src/shim/instructions.ts
+    note: "generateApplyInstructions resolves every concrete file a glob tracking path matches (resolveArtifactOutputs) instead of one literal path, and reports an unreadable tracking file by path and reason instead of treating it as absent; a change whose tracking evidence is entirely unreadable reports blocked instead of falsely reporting all_done, and unavailableTrackingFiles is carried in the JSON payload alongside taskTrackingConfigured"
+  - upstream: src/core/artifact-graph/outputs.ts
+    pr: "#1885"
+    target: vendor/openspec/engine/outputs.ts
+    note: "isGlobPattern recognizes a brace expansion (`{a,b}`, `{1..3}`) and an extglob (`@(...)`, `!(...)`) as a glob in addition to the existing `*`/`?`/`[` check, so an artifact output declared with either is resolved through the glob path instead of treated as one literal filename"
+  - upstream: src/core/validation/purpose-placeholder.ts
+    pr: "#1912"
+    target: vendor/openspec/validation/purpose-placeholder.ts
+    note: "a shouted `TBD`/`TODO` opening the Purpose is always the placeholder marker; any other case (`todo`, `Tbd`) is the marker only when punctuation or line end follows it, so lowercase prose that happens to start with those letters in another language (Spanish/Portuguese 'Todo') is not misread as an unwritten Purpose while `todo - write this later` still is"
+  - upstream: src/core/specs-apply.ts
+    pr: "#1958"
+    target: vendor/openspec/apply/specs-apply.ts
+    note: "writeUpdatedSpec reads the target spec.md's existing line-ending convention (matchLineEnding/detectLineEnding) before an archive fold rewrites it and writes the rebuilt content back with that same convention instead of always LF, so a spec file already using CRLF keeps every unchanged line unchanged; a spec that does not exist yet stays LF. Scoped to this file: the commit's other hunks (src/utils/file-system.ts's shell-completion marker-block writer, scripts/pack-version-check.mjs) touch no kept path"
+
+# vendor-sync-2026-10: kept-path commits between 9d4e5974 and db230978 reviewed and
+# intentionally not ported.
+ports_1_13_2_ignored:
+  - pr: "#1962"
+    note: "removed-requirement reporting in verify — touches only verify-change.ts; workflow not emitted, text arrives through the adopted asset snapshot"
+  - pr: "#1926"
+    note: "archive EPERM fallback on Windows rename — no Windows target"
+  - pr: "#1769"
+    note: "archive lock release on Windows — no Windows target"
+  - pr: "#1940"
+    note: "approval-threshold wording — touches only ff-change.ts and onboard.ts, neither emitted; workflow not emitted, text arrives through the adopted asset snapshot"
+  - pr: "#1777"
+    note: "top-level heading in generated artifacts — no markdown lint runs in the gate, the artifacts are read by agents, and the heading adds a line to every artifact of every change; the ported parsers still accept an artifact that has one"
+  - pr: "#1852"
+    note: "trigger phrases in skill descriptions — the six descriptions are already in the model's skill list on every turn; the slash command is the explicit invocation path"
+  - pr: "#1829"
+    note: "bulk-archive existing-target check — touches only bulk-archive-change.ts; workflow not emitted, text arrives through the adopted asset snapshot"
+
+# vendor-sync-2026-11 ports from upstream db230978 (1.13.2) -> 6d04a1b5 (1.15.0, MIT).
+# One entry per kept-path commit, limited to the hunks that reach emitted workflow text
+# or the store-free shim; `sync adopt sdd` never touches these (tracked assets only).
+ports_1_15_0:
+  - commit: "e7a9512d"
+    pr: "#1994"
+    upstream: src/commands/workflow/instructions.ts, src/commands/workflow/shared.ts, src/core/templates/workflows/apply-change.ts
+    target: src/shim/instructions.ts, vendor/openspec/generation/templates/workflows/apply-change.ts
+    note: "apply tasks carry their source path and line; our text printer naming path and line is a FreeHarness divergence from upstream's printer"
+  - commit: "1bce87f8"
+    pr: "#2054"
+    upstream: src/core/parsers/requirement-blocks.ts, src/core/specs-apply.ts, src/core/validation/validator.ts
+    target: vendor/openspec/validation/parsers/requirement-blocks.ts, vendor/openspec/apply/specs-apply.ts, vendor/openspec/validation/validator.ts, src/shim/archive.ts
+    note: "archive warns on delta text it will not carry; the warnings surface through the archive shim"
+  - commit: "276d0150"
+    pr: "#2104"
+    upstream: src/core/templates/workflows/explore.ts, src/core/templates/workflows/propose.ts
+    target: vendor/openspec/generation/templates/workflows/{explore,propose}.ts
+    note: "glob artifact paths kept inside the change directory; propose and explore halves only, continue-change and ff-change are not emitted"
+  - commit: "3fea2a96"
+    pr: "#2083"
+    upstream: src/core/templates/workflows/update-change.ts
+    target: vendor/openspec/generation/templates/workflows/update-change.ts
+    note: "glob new-file flow unblocked; update half only, the verify-change half is not emitted"
+  - commit: "9cb5ba8c"
+    pr: "#2086"
+    upstream: src/core/templates/workflows/explore.ts
+    target: vendor/openspec/generation/templates/workflows/explore.ts
+    note: "explore capture table scoped to the default schema"
+  - commit: "0ff63dba"
+    pr: "#1759"
+    upstream: src/core/templates/workflows/archive-change.ts
+    target: vendor/openspec/generation/templates/workflows/archive-change.ts
+    note: "archive wording requiring a successful spec sync; archive-change half only, bulk-archive-change is not emitted"
+  - commit: "832e2cf8"
+    pr: "#2120"
+    upstream: src/commands/workflow/new-change.ts
+    target: src/shim/new-change.ts
+    note: "empty --schema falls back to the default schema; no project config read, since the shim is config-free"
+  - commit: "18729828"
+    pr: "#1978"
+    upstream: src/core/validation/constants.ts
+    target: vendor/openspec/validation/constants.ts
+    note: "validation constants message only; the schema sentence on the 500-character limit is not adopted (owner decision 2026-10-29)"
+  - commit: "7056a580"
+    pr: "#1791"
+    upstream: src/commands/workflow/instructions.ts, src/core/templates/workflows/apply-change.ts
+    target: src/shim/instructions.ts, vendor/openspec/generation/templates/workflows/apply-change.ts
+    note: "instruction text only; the schema Workflow follow-up section stays skipped"
+  - commit: "e70dcc7c"
+    pr: "#1997"
+    upstream: schemas/spec-driven/schema.yaml, schemas/spec-driven/templates/proposal.md
+    target: canonical/openspec/schema.spec-driven.yaml, canonical/openspec/templates/proposal.md
+    note: "capability naming guidance in the proposal instruction and template, wording adapted to the schema override"
+  - commit: "852a0738"
+    pr: "#2037"
+    upstream: schemas/spec-driven/schema.yaml
+    target: canonical/openspec/schema.spec-driven.yaml
+    note: "spec files written one at a time, wording adapted to the schema override; the continue-change half is not emitted and not ported"
+
+# vendor-sync-2026-11: kept-path commits between db230978 and 6d04a1b5 reviewed and
+# intentionally not ported.
+ports_1_15_0_ignored:
+  - commit: "760584ba"
+    pr: "#2020"
+    note: "held: validate --strict would fail on requirements over the length limit, which many of our requirements exceed"
+  - commit: "88692b3b"
+    pr: "#1925"
+    note: "held: warns on unknown .openspec.yaml keys, which our depends_on and supersedes keys would trigger"
+  - commit: "e0a2f00f"
+    pr: "#2063"
+    note: "held: exempts x- extension keys from the unknown-key warning of #1925, which is itself held; it is taken together with #1925 once the warning can coexist with our depends_on and supersedes keys"
+  - commit: "6b156199"
+    pr: "#2114"
+    note: "not emitted: touches only the verify workflow"
+  - commit: "43d23ccb"
+    pr: "#2028"
+    note: "not emitted: touches only the verify workflow"
+  - commit: "31c6d1c4"
+    pr: "#2137"
+    note: "out of slice: standalone binaries for installs without Node.js"
+  - commit: "15b3b50f"
+    pr: "#2116"
+    note: "out of slice: lazy loading of ora in the upstream CLI"
+  - commit: "bfa670ed"
+    pr: "#2025"
+    note: "out of slice: lazy command loading in the upstream CLI"
+  - commit: "5251f2ef"
+    pr: "#2108"
+    note: "out of slice: zero-width TTY spinner, the shim has no spinner"
+  - commit: "87a69a2b"
+    pr: "#2101"
+    note: "symlinked layouts: spec.md symlinks are unsupported upstream per #2135"
+  - commit: "90c95c2a"
+    pr: "#2052"
+    note: "symlinked layouts: symlinked changes and specs directories are unsupported upstream per #2135"
+  - commit: "e33245d2"
+    pr: "#2103"
+    note: "new glob dependency: tinyglobby replaces fast-glob upstream; the shim depends only on yaml and zod and its glob matcher never expands braces; FreeHarness refuses brace-expansion output patterns at schema load instead of expanding them"
+  - commit: "7acf2820"
+    pr: "#2061"
+    note: "new glob dependency: brace nesting limit in the upstream glob expansion, which the shim does not use"
+  - commit: "ba0f5087"
+    pr: "#1792"
+    note: "none: retirement cleanup reporting, the shim archive has no retire path"
+  - commit: "cf2859a5"
+    pr: "#2014"
+    note: "none: store-backed edit roots, the shim is store-free"
+  - commit: "77281941"
+    pr: "#1977"
+    note: "none: the hunk routes the archive sync handoff through optionalWorkflow, which our template drops; sync is always emitted, so the archive skill keeps naming /opsx:sync and the hunk is not taken"
+  - commit: "d28fb49c"
+    pr: "#1972"
+    note: "none: show JSON requirement names, no show command is vendored"
+  - commit: "c2304240"
+    pr: "#2109"
+    note: "out of slice: update --dry-run; FreeHarness update has its own two-pass gate"
+  - commit: "c879d13d"
+    pr: "#883"
+    note: "out of slice: code studio tool adapter; adapters other than claude and opencode are trimmed"
+  - commit: "d1642cb5"
+    pr: "#1352"
+    note: "out of slice: easycode tool adapter; adapters other than claude and opencode are trimmed"
+  - commit: "3de7c72c"
+    pr: "#1211"
+    note: "out of slice: atomcode tool adapter; adapters other than claude and opencode are trimmed"
+  - commit: "3c3e6e3d"
+    pr: "#1961"
+    note: "out of slice: GigaCode tool adapter; adapters other than claude and opencode are trimmed"
+
 roadmap:
+  - "vendor-sync-2026-10 (sdd) adopt: DONE — `sync adopt sdd` adopted the tracked assets (assets/schema.upstream.yaml, assets/skills) at db230978; baseline bumped here and in sources.yaml to db230978 / 1.13.2; post-adopt `sync check sdd` reports up to date (task 5.2)"
+  - "vendor-sync-2026-10 (sdd) triage: DONE — 36 upstream commits 9d4e5974..db230978 on kept paths triaged into ports_1_13_2 (29) and ports_1_13_2_ignored (7) above; #1733 and #1940 resolved against the emitted templates (ported, ignored respectively); #1835 limited to its specs-apply.ts/instructions.ts hunks, dependency-advisory hunks excluded; #1958 limited to its specs-apply.ts hunk, Windows-only/non-kept-path hunks excluded"
   - "vendor-sync-2026-09 (sdd): DONE — 1.13 engine/template ports (ports_1_13 above), tracked assets adopted at 9d4e5974, sources.yaml bumped to 9d4e5974 / 1.13.0"
   - "P3 inc.3: DONE — vendored change-validation slice (parsers + schemas + Validator) + src/validate-change.ts"
   - "P3 inc.4: DONE — store-free `openspec` CLI shim (src/bin/openspec.ts + src/shim/*) over the vendored engine: status/instructions/list/schemas/context/validate/new-change fully working"