freeharness 0.4.1

package/node_modules/@freeharness/core/dist/ports.d.ts

@@ -0,0 +1,90 @@
+import type { Capability, HarnessTarget } from "./registry.js";
+import type { AdapterResult, ExecStep, InstallContext, Scope } from "./context.js";
+export interface HarnessPort {
+    target: HarnessTarget;
+    apply(capability: Capability, ctx: InstallContext): Promise<AdapterResult>;
+}
+export interface FsPort {
+    exists(file: string): boolean;
+    readText(file: string): string;
+    writeText(file: string, content: string, dryRun: boolean): string;
+    writeTextIfAbsent(file: string, content: string, dryRun: boolean): {
+        path: string;
+        skipped: boolean;
+    };
+    ensureDir(dir: string, dryRun: boolean): void;
+}
+export type PackageManager = "npm" | "pip" | "bun" | "uv";
+export interface PackagePort {
+    isPresent(tool: string): Promise<boolean>;
+    exec(step: ExecStep): Promise<{
+        ok: boolean;
+        code: number;
+    }>;
+}
+/** One selectable item for `PromptPort.select`. */
+export interface SelectItem {
+    id: string;
+    label: string;
+}
+export interface PromptPort {
+    confirm(message: string): Promise<boolean>;
+    select(message: string, items: SelectItem[]): Promise<string[]>;
+}
+export interface SddPort {
+    schemaValidate(name: string): Promise<{
+        valid: boolean;
+        message?: string;
+    }>;
+    initProject(target: HarnessTarget, projectRoot: string, ctx: InstallContext): Promise<AdapterResult>;
+}
+export interface MemoryPort {
+    ensurePrerequisites(ctx: InstallContext): Promise<AdapterResult>;
+    install(scope: Scope, ctx: InstallContext): Promise<AdapterResult>;
+    registerHooks(scope: Scope, ctx: InstallContext): Promise<AdapterResult>;
+    migrateExisting(ctx: InstallContext): Promise<AdapterResult>;
+}
+export interface McpPort {
+    register(target: HarnessTarget, ctx: InstallContext): Promise<AdapterResult>;
+}
+export interface SyncReport {
+    target: string;
+    baseline: string;
+    changedPaths: string[];
+    contractAffected: string[];
+    /** Paths rewritten on purpose (always differ); value = why. Review upstream by hand. */
+    divergent: Record<string, string>;
+}
+/** Options for `sync adopt`: which tracked labels to take, and the write/force gates. */
+export interface AdoptOptions {
+    /** Tracked entry labels to adopt (as reported by `check`); all tracked entries when omitted. */
+    paths?: string[];
+    /** Preview only: compute previews and the would-be report, write nothing. */
+    dryRun: boolean;
+    /** Adopt DIVERGENT entries too (normally always skipped; the caller must warn loudly). */
+    forceDivergent: boolean;
+}
+/** One unified-diff preview for a tracked path (a file, or one file inside a tracked dir). */
+export interface AdoptPreview {
+    label: string;
+    diff: string;
+}
+/** Outcome of `sync adopt` (or its dry run). Paths are labels as in `SyncReport.changedPaths`. */
+export interface AdoptReport {
+    target: string;
+    /** Tracked entry labels copied from upstream (or that would be, in a dry run). */
+    adopted: string[];
+    /** DIVERGENT labels left untouched (compare by hand). */
+    skippedDivergent: string[];
+    /** PROVENANCE `baseline_commit` before / after (equal when nothing was written or the fork is not a git checkout). */
+    baselineBefore: string;
+    baselineAfter: string;
+    previews: AdoptPreview[];
+    /** Non-fatal notices (fork not a git checkout, upstream file removed, ...). */
+    warnings: string[];
+}
+/** Driven: read-only upstream check plus the explicit, path-scoped adoption. */
+export interface SyncPort {
+    check(target: string): Promise<SyncReport>;
+    adopt(target: string, options: AdoptOptions): Promise<AdoptReport>;
+}

package/node_modules/@freeharness/core/dist/ports.js

@@ -0,0 +1 @@
+export {};

package/node_modules/@freeharness/core/dist/registry.d.ts

@@ -0,0 +1,41 @@
+/**
+ * Emission targets. `claude-code` and `opencode` install into a harness; `plugin` writes a
+ * Claude Code plugin directory (official layout) that is installed through a marketplace.
+ */
+export type HarnessTarget = "claude-code" | "opencode" | "plugin";
+/** Every target `--target` accepts. */
+export declare const ALL_TARGETS: readonly HarnessTarget[];
+/** Targets used when `--target` is omitted: the installable harnesses, never the plugin dir. */
+export declare const DEFAULT_TARGETS: readonly HarnessTarget[];
+export interface Capability {
+    id: string;
+    description: string;
+    targets: HarnessTarget[];
+    dependsOn: string[];
+    optional: boolean;
+    delegatesTo?: string;
+}
+export declare const CAPABILITIES: Capability[];
+export declare function getCapability(id: string): Capability | undefined;
+export declare function resolveInstallOrder(requested: string[], targets: HarnessTarget[]): string[];
+export declare function defaultCapabilityIds(): string[];
+/**
+ * Opt-in profiles (v4 P6): data files under `canonical/profiles/` applied by
+ * `init --profile <id>`. A profile is never part of the default install set and never a
+ * capability: it merges an env block, a provider block or an MCP selection into an
+ * existing target and is recorded in the install manifest so `--profile none` can remove
+ * exactly what it wrote.
+ */
+export type ProfileKind = "claude-code-env" | "opencode-provider" | "mcp-catalog";
+export interface Profile {
+    id: string;
+    description: string;
+    kind: ProfileKind;
+    targets: HarnessTarget[];
+    /** File under canonical/profiles/. */
+    file: string;
+}
+export declare const PROFILES: Profile[];
+/** The reserved profile name that removes every profile recorded in the manifest. */
+export declare const PROFILE_NONE = "none";
+export declare function getProfile(id: string): Profile | undefined;

package/node_modules/@freeharness/core/dist/registry.js

@@ -0,0 +1,124 @@
+// Capability registry. `init` resolves the dependency graph and applies only
+// what was requested, per target.
+/** Every target `--target` accepts. */
+export const ALL_TARGETS = ["claude-code", "opencode", "plugin"];
+/** Targets used when `--target` is omitted: the installable harnesses, never the plugin dir. */
+export const DEFAULT_TARGETS = ["claude-code", "opencode"];
+export const CAPABILITIES = [
+    {
+        id: "rules",
+        description: "Canonical rules emitted as CLAUDE.md (Claude Code) / AGENTS.md (OpenCode); Claude Code also gets the SessionStart pointer (post-compaction re-orientation), memory-guard, config-guard and repeat-tool hooks.",
+        targets: ["claude-code", "opencode", "plugin"],
+        dependsOn: [],
+        optional: false,
+    },
+    {
+        id: "sdd",
+        description: "OpenSpec spec-driven schema (FreeHarness override, user-global) + the converge Stop hook (opt-in per project via .freeharness/converge.json).",
+        targets: ["claude-code", "opencode", "plugin"],
+        dependsOn: [],
+        optional: false,
+        delegatesTo: "vendored @freeharness/sdd initProject (in-process)",
+    },
+    {
+        id: "skills",
+        description: "Execution/verification skills: TDD, subagent-driven-dev, debugging, verification, code-review, git-workflow.",
+        targets: ["claude-code", "opencode", "plugin"],
+        dependsOn: [],
+        optional: false,
+    },
+    {
+        id: "memory",
+        description: "claude-mem integration (persistent memory). Owns lifecycle hooks; never overridden.",
+        targets: ["claude-code", "opencode", "plugin"],
+        dependsOn: [],
+        optional: true,
+        delegatesTo: "vendored claude-mem plugin (Claude Code); OpenCode = seam",
+    },
+    {
+        id: "agents",
+        description: "Review, design, and exploration agents: python/database/mle/security/pr reviewers, agentic-architect, explorer-ai-engineer-analyst, test-writer.",
+        targets: ["claude-code", "opencode", "plugin"],
+        dependsOn: ["rules"],
+        optional: false,
+    },
+    {
+        id: "safety",
+        description: "Prompt-injection sanitization and agent-decision logging rules + advisory security-guidance hook.",
+        targets: ["claude-code", "opencode", "plugin"],
+        dependsOn: ["rules"],
+        optional: false,
+    },
+    {
+        id: "mcp",
+        description: "Register the MCP servers listed in canonical/mcp/servers.json via `claude mcp add`.",
+        targets: ["claude-code", "opencode", "plugin"],
+        dependsOn: [],
+        optional: false,
+        delegatesTo: "claude mcp add",
+    },
+    {
+        id: "cost",
+        description: "Token economy, part of the default set: the v4 token-economy hooks (output-pruner on PostToolUse Bash, context-monitor on Stop, cost-tracker on Stop + SessionEnd writing usage snapshots into ~/.claude/freeharness/cost/usage.jsonl priced from an editable table) and the cache-hygiene settings (1h prompt cache TTLs) are core to the harness, not an add-on; `freeharness cost report [--sinks]` and `cost prefix` read them. `--only` without cost still skips it.",
+        targets: ["claude-code", "plugin"],
+        dependsOn: [],
+        optional: false,
+    },
+];
+export function getCapability(id) {
+    return CAPABILITIES.find((c) => c.id === id);
+}
+// Requested ids + transitive deps, filtered to those supporting a target, in
+// dependency order.
+export function resolveInstallOrder(requested, targets) {
+    const ordered = [];
+    const seen = new Set();
+    const visit = (id) => {
+        if (seen.has(id))
+            return;
+        seen.add(id);
+        const cap = getCapability(id);
+        if (!cap)
+            throw new Error(`Unknown capability: ${id}`);
+        for (const dep of cap.dependsOn)
+            visit(dep);
+        const supportsTarget = cap.targets.some((t) => targets.includes(t));
+        if (supportsTarget)
+            ordered.push(id);
+    };
+    for (const id of requested)
+        visit(id);
+    return ordered;
+}
+// Default set when --only is omitted: all required capabilities.
+export function defaultCapabilityIds() {
+    return CAPABILITIES.filter((c) => !c.optional).map((c) => c.id);
+}
+export const PROFILES = [
+    {
+        id: "local-ollama",
+        description: "Claude Code on a local Ollama server: ANTHROPIC_BASE_URL + ANTHROPIC_DEFAULT_{OPUS,SONNET,HAIKU}_MODEL + CLAUDE_CODE_SUBAGENT_MODEL mapped from the strong/standard/fast tiers, merged additively into the settings.json env block.",
+        kind: "claude-code-env",
+        targets: ["claude-code"],
+        file: "local-ollama.json",
+    },
+    {
+        id: "local-llamacpp",
+        description: "OpenCode on a local llama.cpp server: provider block (@ai-sdk/openai-compatible, baseURL, tier models) merged into <project>/opencode.json + .opencode/LOCAL-MODELS.md with the Jinja template guidance.",
+        kind: "opencode-provider",
+        targets: ["opencode"],
+        file: "local-llamacpp.json",
+    },
+    {
+        id: "mcp",
+        description: "Opt-in MCP catalog for AI and Data engineers (context7, github, postgres-mcp restricted, jupyter, mlflow, serena, mcpdoc) with tool counts and context-cost notes; nothing is registered without an explicit selection.",
+        kind: "mcp-catalog",
+        targets: ["claude-code"],
+        file: "mcp.json",
+    },
+];
+/** The reserved profile name that removes every profile recorded in the manifest. */
+export const PROFILE_NONE = "none";
+export function getProfile(id) {
+    return PROFILES.find((p) => p.id === id);
+}

package/node_modules/@freeharness/core/dist/tiers.d.ts

@@ -0,0 +1,30 @@
+import type { HarnessTarget } from "./registry.js";
+export type Tier = "strong" | "standard" | "fast";
+/** OpenCode ids are provider-specific: emitted as env placeholders, not concrete models. */
+export declare const TIER_MODEL: Record<HarnessTarget, Record<Tier, string>>;
+export declare function mapTier(target: HarnessTarget, tier: Tier): string;
+/** Body text of the leading frontmatter block, or undefined without one. */
+export declare function frontmatterBody(content: string): string | undefined;
+/** Rebuilds a file's frontmatter fence around `fn`'s rewrite of the body; content unchanged without a fence or when `fn` returns the same body. */
+export declare function replaceFrontmatterBody(content: string, fn: (body: string) => string): string;
+/** Rewrites the frontmatter `model:` tier to its target concrete id (`[ \t]*`, never `\s*`: `\r` is a JS line terminator). */
+export declare function rewriteAgentModel(content: string, target: HarnessTarget): string;
+/** True when the frontmatter block declares the key at column 0. */
+export declare function frontmatterHasKey(content: string, key: string): boolean;
+/** Strips column-0 frontmatter keys; body and nested keys stay. */
+export declare function stripAgentKeys(content: string, keys: readonly string[]): string;
+/** Env keys pinning one model per tier (the DeepClaude idea). */
+export declare const CLAUDE_CODE_TIER_ENV: Record<Tier, string>;
+export declare const CLAUDE_CODE_SUBAGENT_MODEL_ENV = "CLAUDE_CODE_SUBAGENT_MODEL";
+export declare const ANTHROPIC_BASE_URL_ENV = "ANTHROPIC_BASE_URL";
+/** Bearer token env key; a local server (Ollama) accepts any value. */
+export declare const ANTHROPIC_AUTH_TOKEN_ENV = "ANTHROPIC_AUTH_TOKEN";
+export interface LocalModelProfile {
+    baseUrl: string;
+    models: Record<Tier, string>;
+    authToken?: string;
+}
+/** Subagents pin to the standard tier (most agents declare it). */
+export declare function tierEnv(p: LocalModelProfile): Record<string, string>;
+/** Inverse of tierEnv, for doctor's profile line. */
+export declare function tiersFromEnv(env: Record<string, unknown>): Partial<Record<Tier, string>>;

package/node_modules/@freeharness/core/dist/tiers.js

@@ -0,0 +1,99 @@
+/** OpenCode ids are provider-specific: emitted as env placeholders, not concrete models. */
+export const TIER_MODEL = {
+    "claude-code": { strong: "opus", standard: "sonnet", fast: "haiku" },
+    // A plugin is loaded by Claude Code: same concrete model names.
+    plugin: { strong: "opus", standard: "sonnet", fast: "haiku" },
+    opencode: {
+        strong: "${OPENCODE_STRONG_MODEL}",
+        standard: "${OPENCODE_STANDARD_MODEL}",
+        fast: "${OPENCODE_FAST_MODEL}",
+    },
+};
+const TIERS = new Set(["strong", "standard", "fast"]);
+export function mapTier(target, tier) {
+    return TIER_MODEL[target][tier];
+}
+// Frontmatter block, CRLF-tolerant, closing fence may lack a trailing newline: preserves a
+// file's own line endings for every caller below.
+const FRONTMATTER_RE = /^---(\r?\n)([\s\S]*?)(\r?\n)---(\r?\n|$)/;
+// Parses the leading frontmatter block, or undefined without one.
+function matchFrontmatter(content) {
+    const match = FRONTMATTER_RE.exec(content);
+    if (!match)
+        return undefined;
+    const [whole, openNl, body, closeNl, afterNl] = match;
+    return { body, index: match.index, whole, openNl, closeNl, afterNl };
+}
+/** Body text of the leading frontmatter block, or undefined without one. */
+export function frontmatterBody(content) {
+    return matchFrontmatter(content)?.body;
+}
+/** Rebuilds a file's frontmatter fence around `fn`'s rewrite of the body; content unchanged without a fence or when `fn` returns the same body. */
+export function replaceFrontmatterBody(content, fn) {
+    const m = matchFrontmatter(content);
+    if (!m)
+        return content;
+    const body = fn(m.body);
+    if (body === m.body)
+        return content;
+    const fenceEndIndex = m.index + m.whole.length;
+    return content.slice(0, m.index) + `---${m.openNl}${body}${m.closeNl}---${m.afterNl}` + content.slice(fenceEndIndex);
+}
+/** Rewrites the frontmatter `model:` tier to its target concrete id (`[ \t]*`, never `\s*`: `\r` is a JS line terminator). */
+export function rewriteAgentModel(content, target) {
+    return replaceFrontmatterBody(content, (body) => body.replace(/^(model:[ \t]*)(\w+)[ \t]*$/m, (line, prefix, value) => TIERS.has(value) ? `${prefix}${mapTier(target, value)}` : line));
+}
+// Column-0 key of one frontmatter line, or undefined.
+function frontmatterKey(line) {
+    const colonIndex = line.indexOf(":");
+    if (colonIndex === -1)
+        return undefined;
+    const key = line.slice(0, colonIndex);
+    return key !== "" && !/\s/.test(key) ? key : undefined;
+}
+/** True when the frontmatter block declares the key at column 0. */
+export function frontmatterHasKey(content, key) {
+    const m = matchFrontmatter(content);
+    return m !== undefined && m.body.split("\n").some((line) => frontmatterKey(line) === key);
+}
+/** Strips column-0 frontmatter keys; body and nested keys stay. */
+export function stripAgentKeys(content, keys) {
+    const keySet = new Set(keys);
+    return replaceFrontmatterBody(content, (body) => body
+        .split("\n")
+        .filter((line) => {
+        const key = frontmatterKey(line);
+        return key === undefined || !keySet.has(key);
+    })
+        .join("\n"));
+}
+/** Env keys pinning one model per tier (the DeepClaude idea). */
+export const CLAUDE_CODE_TIER_ENV = {
+    strong: "ANTHROPIC_DEFAULT_OPUS_MODEL",
+    standard: "ANTHROPIC_DEFAULT_SONNET_MODEL",
+    fast: "ANTHROPIC_DEFAULT_HAIKU_MODEL",
+};
+export const CLAUDE_CODE_SUBAGENT_MODEL_ENV = "CLAUDE_CODE_SUBAGENT_MODEL";
+export const ANTHROPIC_BASE_URL_ENV = "ANTHROPIC_BASE_URL";
+/** Bearer token env key; a local server (Ollama) accepts any value. */
+export const ANTHROPIC_AUTH_TOKEN_ENV = "ANTHROPIC_AUTH_TOKEN";
+/** Subagents pin to the standard tier (most agents declare it). */
+export function tierEnv(p) {
+    const env = { [ANTHROPIC_BASE_URL_ENV]: p.baseUrl };
+    for (const tier of ["strong", "standard", "fast"])
+        env[CLAUDE_CODE_TIER_ENV[tier]] = p.models[tier];
+    env[CLAUDE_CODE_SUBAGENT_MODEL_ENV] = p.models.standard;
+    if (p.authToken !== undefined)
+        env[ANTHROPIC_AUTH_TOKEN_ENV] = p.authToken;
+    return env;
+}
+/** Inverse of tierEnv, for doctor's profile line. */
+export function tiersFromEnv(env) {
+    const out = {};
+    for (const tier of ["strong", "standard", "fast"]) {
+        const v = env[CLAUDE_CODE_TIER_ENV[tier]];
+        if (typeof v === "string" && v)
+            out[tier] = v;
+    }
+    return out;
+}

package/node_modules/@freeharness/core/package.json

@@ -0,0 +1,34 @@
+{
+  "name": "@freeharness/core",
+  "version": "0.4.1",
+  "private": true,
+  "description": "FreeHarness pure domain: capability registry, install planner, model tiers, install context, and ports. No I/O, zero runtime dependencies.",
+  "type": "module",
+  "main": "dist/index.js",
+  "types": "dist/index.d.ts",
+  "exports": {
+    ".": {
+      "types": "./dist/index.d.ts",
+      "default": "./dist/index.js"
+    }
+  },
+  "files": [
+    "dist"
+  ],
+  "scripts": {
+    "build": "tsc -p tsconfig.json",
+    "lint": "tsc -p tsconfig.json --noEmit",
+    "clean": "rm -rf dist",
+    "test": "node --import tsx --test test/*.test.ts"
+  },
+  "engines": {
+    "node": ">=18"
+  },
+  "license": "MIT",
+  "author": "André Negrelli",
+  "devDependencies": {
+    "@types/node": "^20.14.0",
+    "typescript": "^5.5.0",
+    "tsx": "^4.16.0"
+  }
+}

package/node_modules/@freeharness/sdd/PROVENANCE.yaml

@@ -0,0 +1,175 @@
+# Provenance for the vendored OpenSpec subset. `freeharness sync check sdd` diffs
+# upstream against this baseline (P5), limited to the vendored paths.
+upstream:
+  name: "@fission-ai/openspec"
+  repo: https://github.com/Fission-AI/OpenSpec
+  fork: https://github.com/anegrelli/OpenSpec
+  baseline_version: "1.13.0"
+  baseline_commit: "9d4e5974"
+
+vendored:
+  assets:
+    - path: vendor/openspec/assets/skills
+      note: "/opsx skill source (stable contract — track against upstream)"
+    - path: vendor/openspec/assets/schema.upstream.yaml
+      note: "upstream spec-driven schema (diff baseline; our override lives in canonical/openspec)"
+  engine:
+    - path: vendor/openspec/engine
+      note: "schema-validation slice (artifact-graph: schema/resolver/types + file-system); P3 increment 1"
+    - path: vendor/openspec/engine/graph.ts
+      note: "ArtifactGraph VERBATIM (src/core/artifact-graph/graph.ts); imports already local; P3 increment 4"
+    - path: vendor/openspec/engine/state.ts
+      note: "detectCompleted VERBATIM (src/core/artifact-graph/state.ts); imports already local; P3 increment 4"
+    - path: vendor/openspec/engine/outputs.ts
+      note: "RECONSTRUCTED store-free/dependency-free (src/core/artifact-graph/outputs.ts): same public surface (isGlobPattern/resolveArtifactOutputPath/resolveArtifactOutputs/artifactOutputExists) via a minimal internal glob matcher instead of fast-glob; assertPathWithin confinement preserved; P3 increment 4"
+    - path: vendor/openspec/engine/change-metadata.ts
+      note: "RECONSTRUCTED store-free (src/utils/change-metadata.ts + core/change-metadata/schema.ts): read/write/resolveSchemaForChange with an inlined ChangeMetadata zod schema (schema+skip_specs, passthrough); DROPPED the project-config/config.yaml schema fallback + kebab/initiative machinery; P3 increment 4"
+    - path: vendor/openspec/engine/change-status-policy.ts
+      note: "buildActionContext/buildNextSteps FAITHFUL (src/core/change-status-policy.ts); DROPPED PlanningHome/summarizePlanningHome + the --store flag in next-step hints; P3 increment 4"
+    - path: vendor/openspec/engine/instruction-loader.ts
+      note: "RECONSTRUCTED store-free (src/core/artifact-graph/instruction-loader.ts): loadChangeContext/generateInstructions/formatChangeStatus/loadTemplate with the skill-facing output fields (artifacts[].status/requires, applyRequires, isPlanningComplete/isComplete, dependencies, unlocks, template) + skip_specs handling; DROPPED planningHome, references, config-driven context/rules; P3 increment 4"
+    - path: vendor/openspec/engine/task-progress.ts
+      note: "FAITHFUL store-free (src/utils/task-progress.ts): parseTaskLines + tracked-tasks glob resolution (apply.tracks -> generates -> resolveArtifactOutputs, tasks.md fallback); DROPPED SchemaGlobCache/--archived plumbing; P3 increment 4"
+  shim:
+    - path: src/shim
+      note: "RECONSTRUCTED thin library dispatchers over the vendored engine + validator, one per subcommand (status/instructions/list/schemas/context/validate/new-change/archive); reimplement src/commands + src/commands/workflow output (incl. --json shapes) WITHOUT commander/TUI/ora/chalk, store/root-selection, references, or project-config; P3 increment 4. archive.ts (inc.4c) RECONSTRUCTS a minimal non-interactive orchestration of src/core/archive.ts: validate (Validator.validateChangeDeltaSpecs) -> build every fold via vendored specs-apply -> write -> move openspec/changes/<name>/ to changes/archive/<name>/; DROPPED the interactive/TUI/prompt/task-progress-gate/retire-marker machinery and the dated archive-folder prefix"
+    - path: src/bin/openspec.ts
+      note: "RECONSTRUCTED commander-free argv CLI; `bin.openspec` -> dist/src/bin/openspec.js; store-free root resolution (findOpenspecDir walk-up, parent = project root); matches upstream flags + single-document --json; P3 increment 4"
+  apply:
+    - path: vendor/openspec/apply/specs-apply.ts
+      note: "specs-apply FAITHFUL (src/core/specs-apply.ts): findSpecUpdates/buildUpdatedSpec/writeUpdatedSpec/retireSpec/finalizeRetiredSpec/buildSpecSkeleton verbatim incl. the ADDED/MODIFIED/REMOVED/RENAMED fold, retirement guards, and unaccounted-content accounting; DROPPED only chalk (colored console -> plain string); import paths rebased to the vendored engine/validation layout; needs no id.ts or date helper (folderStyleNameProblem/formatLocalDate are not referenced by this module); P3 increment 4c"
+  validation:
+    - path: vendor/openspec/validation/parsers
+      note: "change-validation parsers VERBATIM (code-fence, requirement-text, requirement-blocks, spec-structure, markdown-parser); change-parser verbatim except spec-discovery import path; P3 increment 3"
+    - path: vendor/openspec/validation/schemas
+      note: "zod change/spec/base schemas + index VERBATIM except constants import path (../validation/constants -> ../constants); P3 increment 3"
+    - path: vendor/openspec/validation/constants.ts
+      note: "validation thresholds + messages VERBATIM (src/core/validation/constants.ts); P3 increment 3"
+    - path: vendor/openspec/validation/types.ts
+      note: "ValidationIssue/ValidationReport VERBATIM (src/core/validation/types.ts); P3 increment 3"
+    - path: vendor/openspec/validation/task-numbering.ts
+      note: "task-numbering VERBATIM except parseTaskLines import (task-progress -> ./task-lines); P3 increment 3"
+    - path: vendor/openspec/validation/spec-discovery.ts
+      note: "discoverSpecFiles + hasAnyFileUnder VERBATIM except file-system import (-> ../engine/file-system); reuses already-vendored engine FileSystemUtils; P3 increment 3"
+    - path: vendor/openspec/validation/task-lines.ts
+      note: "RECONSTRUCTED minimal parseTaskLines only (src/utils/task-progress.ts); the schema/artifact-graph task-file resolution is out of the slice; P3 increment 3"
+    - path: vendor/openspec/validation/validator.ts
+      note: "Validator TRIMMED (src/core/validation/validator.ts): skip_specs marker (change-metadata) removed; task-numbering schema gate + tracked-file resolution (artifact-graph/task-progress) reconstructed to read the change's tasks.md directly; scenario-loss (mainSpecsDir) kept; all delta/spec/scenario/SHALL-MUST rules faithful; P3 increment 3. FreeHarness addition: findUnresolvedHeaderIssues (delta-resolution.ts) after the archive-blockers pass"
+    - path: vendor/openspec/validation/delta-resolution.ts
+      note: "FREEHARNESS ADDITION (no upstream counterpart): MODIFIED/REMOVED/RENAMED headers resolved against openspec/specs/<cap>/spec.md, with the ADDED-by-<in-flight change> attribution; feeds the validator (ERROR under --strict, WARNING otherwise) and the archive refusal / --force skip"
+  generation:
+    - path: vendor/openspec/generation/command-generation
+      note: "command-generation faithful (types/yaml/invocation/generator verbatim); registry + adapters/index + index TRIMMED to claude+opencode; P3 increment 2"
+    - path: vendor/openspec/generation/command-references.ts
+      note: "TRIMMED to transformCommandInvocations only (dropped command-surface dep + Codex/Kimi/Rovo/getTransformerForTool); P3 increment 2"
+    - path: vendor/openspec/generation/shared
+      note: "allowed-tools + skill-generation verbatim (import paths only); P3 increment 2"
+    - path: vendor/openspec/generation/templates
+      note: "types + skill-templates facade + all 13 workflow modules verbatim (source of both command bodies and skill instructions); P3 increment 2"
+
+patches:
+  - "global-config: replaced with a store-free data-dir resolver (no ~/.openspec multi-repo store)"
+  - "init: reconstructed minimal, non-interactive initProject() in src/init.ts (no store guard, legacy cleanup, prompts, profiles/delivery config, telemetry, or Copilot cloud); CORE_WORKFLOWS + tool skillsDir + serializeConfig inlined instead of vendoring profiles/config-prompts"
+  - "skills generated from vendored templates (not copied from assets/skills): init writes the /opsx:<id> command-reference form, whereas assets/skills is the skills.sh distribution variant with the /openspec-* form"
+  - "validation: validator.ts drops skip_specs-marker handling (needs change-metadata + schema-name resolution, out of slice); task-numbering reconstructed to read the change's top-level tasks.md (the spec-driven schema's apply.tracks) instead of resolving tracked files via the artifact graph"
+  - "validate-change.ts (library): change verdict follows the authoritative delta-spec pass + schema resolution (as `openspec validate <change>` does); the proposal-level pass (ChangeSchema Why/What-Changes + max-deltas advisory) is run and surfaced as [advisory] issues that never flip the verdict, mirroring upstream where it is archive's non-blocking warning source"
+  - "shim (P3 inc.4): the `openspec` bin is store-free — no root-selection/store/worksets/--store, no referenced-store index, no project-config context/rules/operation-inputs; root = the parent of the nearest openspec/ found by walking up from cwd; `context` reports this-root-alone (or the no_openspec_root diagnostic /opsx propose checks for); status/instructions/list/schemas/validate/new-change reproduce upstream --json shapes minus store-only fields (root/planningHome/references)"
+  - "unresolved delta headers: specs-apply.ts buildUpdatedSpec gains an opt-in skipUnresolved option (archive --force): a MODIFIED/RENAMED whose header is not in the current spec is skipped with a warning instead of aborting the fold; default behavior unchanged (throw). archive.ts refuses on any unresolved header (delta-resolution.ts) unless --force, --yes does not waive it"
+  - "shim archive (inc.4c): DONE — vendored src/core/specs-apply.ts (vendor/openspec/apply/specs-apply.ts) now backs a real `openspec archive <name>`: it validates the change, folds its ADDED/MODIFIED/REMOVED/RENAMED deltas into openspec/specs/, then moves the change to changes/archive/<name>/. The fold builds all specs before writing any, so an unapplicable delta aborts with openspec/specs/ untouched (never a move-without-fold). DROPPED capability retirement (retire_capabilities marker) and the dated archive-folder prefix; validation gates on the authoritative delta-spec pass (same as `openspec validate <change>`), not schema resolution"
+  - "change-metadata.ts (FreeHarness addition, no upstream counterpart): ChangeMetadataSchema gains optional `depends_on` / `supersedes` (change-id string arrays). shared.ts adds `resolveChangeId(projectRoot, id)` (in-flight / archived / null, path-separator and `..` safe). validate.ts extends a change item's issues with an ERROR for every unresolved id in either list, and a notice for a `depends_on` change that is in flight with open tasks — WARNING under the default verdict, downgraded to INFO under --strict since the vendored Validator's strict mode fails a change on any WARNING and a sister change still in flight is not itself a defect. archive.ts lists every unarchived `depends_on` id among the blockers (same refusal effect as an unchecked task) and reads `readSupersedes` as the union of design.md's `Supersedes:` lines and metadata `supersedes`, feeding the existing checkSupersession / writeSupersededBy pair unchanged"
+  - "task-lines.ts (FreeHarness addition, no upstream counterpart): `Disposition` joins `TASK_ANNOTATION_KEYS`; `parseAnnotatedTaskLines` parses a `Disposition: (superseded|moved) <change-id>` or `Disposition: external <reference>` line into `disposition: { kind, target } | null` on the task record, kept raw so a reader can flag a kind outside the three documented ones"
+  - "task-progress.ts (FreeHarness addition, no upstream counterpart): keeps its own disposition-aware scan (this engine directory does not import ../validation) so `countTasksFromContent`/`getTaskProgressForChange` return `done`/`open`/`dispositioned` alongside `total`/`completed` (`completed` is the upstream field name and the same count as `done`)"
+  - "annotation patterns (task-lines.ts, task-progress.ts): the per-task annotation pattern ends in `\\s*$` rather than `$`, so a tasks.md written with CRLF line endings still parses its Verify/Interfaces/Boundary/Depends/Disposition lines (`.` never matches the `\\r`) — the same reason TASK_LINE_PATTERN carries no end anchor"
+  - "task-progress.ts disposition kinds: `countTasksFromContent` resolves a task only for the documented kinds (superseded, moved, external); any other kind leaves the task open, matching the converge hook and the ERROR `validate --strict` reports for it"
+  - "formatTaskStatus (task-progress.ts): accepts the optional disposition-aware counts, reporting a change complete when `open` is zero and naming the dispositioned count while tasks are still open; a caller passing only `total`/`completed` keeps the upstream reading"
+  - "shim disposition rules (validate/status/archive, FreeHarness addition): validate.ts adds an ERROR for a disposition under a checked task, an unknown kind, an unresolved `superseded`/`moved` target, or an empty `external` reference; status.ts exposes `done`/`open`/`dispositioned` in `--json`, with the tasks resolved (never open) exactly when `open` is zero; archive.ts excludes a dispositioned task from the unchecked-task blocker and prints the dispositioned tasks grouped by kind after the other archive output"
+
+skipped:
+  - "telemetry (PostHog); store/worksets; shell completions; version-check/self-update"
+  - "27 non-target tool adapters (keep only claude + opencode); GitHub-Copilot cloud; docs/marketing"
+  - "command-surface.ts + getTransformerForTool machinery (only claude/opencode invocation rewrite needed)"
+  - "validation: skip_specs marker (change-metadata), task-progress schema/artifact-graph task-file resolution, the CLI/TUI validate command wrapper (ValidateCommand + ora/inquirer), and archive were NOT vendored — only the change-validation library slice"
+  - "shim (P3 inc.4): commander/TUI wrappers, ora spinners, chalk; `openspec feedback` + `openspec store ...` (telemetry/multi-repo store)"
+  - "archive (P3 inc.4c): capability retirement (retire_capabilities marker + retireSpec deletion path), the interactive prompt/task-progress-completion gate, and the dated archive-folder prefix from src/core/archive.ts — NOT reconstructed; retireSpec/finalizeRetiredSpec are vendored in specs-apply.ts but unused by the shim orchestration"
+
+# V4-P4 ports from upstream e062b957 (1.12.0, MIT). Each entry names the upstream file, the
+# PR, and the vendored target; `sync adopt sdd` never touches these (tracked assets only).
+ports_1_12:
+  - upstream: src/core/validation/purpose-placeholder.ts
+    pr: "#1671"
+    target: vendor/openspec/validation/purpose-placeholder.ts
+    note: "verbatim except the code-fence import path; WARNING on a placeholder Purpose (fails under --strict)"
+  - upstream: src/core/validation/constants.ts
+    pr: "#1671"
+    target: vendor/openspec/validation/constants.ts
+    note: "verbatim (PURPOSE_PLACEHOLDER_PREFIX/SUFFIX + PURPOSE_IS_PLACEHOLDER)"
+  - upstream: src/core/validation/validator.ts
+    pr: "#1671, #1710"
+    target: vendor/openspec/validation/validator.ts
+    note: "placeholder check before the brevity check; findArchiveBlockers (public here, private upstream) dry-runs buildUpdatedSpec and reports INFO 'Archive would refuse this delta'"
+  - upstream: src/core/specs-apply.ts
+    pr: "#1671, #1712, #1710"
+    target: vendor/openspec/apply/specs-apply.ts
+    note: "skeleton Purpose composed from the placeholder constants; RENAMED keeps the source block position (orderedKeys); ENOENT/ENOTDIR guard rethrows other read errors"
+  - upstream: src/core/templates/workflows/{propose,ff-change}.ts
+    pr: "#1737"
+    target: vendor/openspec/generation/templates/workflows/{propose,ff-change}.ts
+    note: "inspect-before-drafting bullet applied as the upstream diff; propose.ts also carries the FreeHarness supersession-check bullet (not upstream)"
+  - upstream: src/core/templates/workflows/explore.ts
+    pr: "#1716, #1017, #1010"
+    target: vendor/openspec/generation/templates/workflows/explore.ts
+    note: "confirmation before the first write, PLANNING_GUIDANCE (dependency-ordered single questions), ASCII-only diagrams; applied as the upstream diff"
+  - upstream: schemas/spec-driven/schema.yaml
+    pr: "#1660, #1703"
+    target: "canonical/openspec/schema.spec-driven.yaml (override) + assets/schema.upstream.yaml (adopted verbatim)"
+    note: "per-task verification wording in the tasks instruction; planningHome.root wording is store-free here (the shim stubs planningHome)"
+  - upstream: src/core/planning-home.ts + commands/workflow/{status,instructions,new-change}.ts
+    pr: "#1703"
+    target: src/shim/{shared,status,instructions,context,new-change}.ts
+    note: "store-free planningHome stub { kind: 'local', root, changesDir, defaultSchema } in every --json payload; no PlanningHome resolver vendored"
+  - upstream: "(FreeHarness, not upstream)"
+    pr: "V4-P4 4.4/4.5"
+    target: src/shim/archive.ts, vendor/openspec/validation/task-lines.ts, vendor/openspec/validation/parsers/markdown-parser.ts, vendor/openspec/generation/templates/workflows/archive-change.ts
+    note: "archive blockers gate (unchecked tasks + INFO blockers refuse without --yes), Supersedes: convention (link, reverse link, in-place edit refusal), per-task annotation parser, EARS header-only scenarios accepted by the main-spec parser, supersession step in the archive workflow"
+
+# vendor-sync-2026-09 ports from upstream 9d4e5974 (1.13.0, MIT). Each entry names the
+# upstream file, the PR, and the vendored target; `sync adopt sdd` never touches these
+# (tracked assets only).
+ports_1_13:
+  - upstream: src/core/specs-apply.ts
+    pr: "#1798"
+    target: vendor/openspec/apply/specs-apply.ts
+    note: "verbatim fence-aware collapseBlankRunsOutsideFences replaces the blanket \\n{3,} collapse in buildUpdatedSpec's rebuild step, so a fenced code sample's blank-line runs survive an archive fold byte-identical; comment restated in present tense per house style"
+  - upstream: src/core/parsers/requirement-blocks.ts
+    pr: "#1800, #1802"
+    target: vendor/openspec/validation/parsers/requirement-blocks.ts
+    note: "verbatim [-*+] bullet markers for REMOVED/RENAMED (#1800); splitTopLevelSections returns an ordered list and getSectionsCaseInsensitive returns every matching section so a repeated `## ADDED Requirements` header applies in full (#1802)"
+  - upstream: "(FreeHarness, not upstream)"
+    pr: "final-fix item 24"
+    target: vendor/openspec/validation/parsers/requirement-blocks.ts
+    note: "parseRenamedPairs: a FROM about to be overwritten by a new FROM (or left pending at end of section) without ever pairing with a TO now pushes a SkippedHeader-shaped diagnostic into the same skippedHeaders sink validator.ts renders as INFO, instead of being discarded silently"
+  - upstream: src/commands/workflow/instructions.ts + shared.ts
+    pr: "#1783"
+    target: src/shim/instructions.ts
+    note: "adapted: collectMissingPrerequisites/collectApplyWarnings/isSpecsArtifactPath reimplemented against the vendored ArtifactGraph/SchemaYaml/ChangeContext types (not the store-coupled upstream artifact-graph module); missingPrerequisites computed unconditionally and included in JSON whenever non-empty; warnings fires when a spec-producing artifact has no resolved delta files and skip_specs is not set; message text and JSON field names match upstream"
+  - upstream: src/core/templates/workflows/explore.ts (#1700), propose.ts (#1657), schemas/spec-driven/schema.yaml (#1700/#1657 cut)
+    pr: "#1700, #1657"
+    target: vendor/openspec/generation/templates/workflows/{explore,propose}.ts, canonical/openspec/schema.spec-driven.yaml (proposal + specs artifact instructions)
+    note: "adapted: verbatim research-guidance prose (spec-inventory step in explore.ts, project-context step in propose.ts, matching schema override text) with every --store clause dropped (store-free shim); FreeHarness supersession bullet in propose.ts preserved untouched"
+
+# vendor-sync-2026-09: skipped paths reviewed and intentionally not ported (out of the
+# store-free shim's scope; see design.md).
+ports_1_13_ignored:
+  - pr: "#1779"
+    note: "init profiles — the shim's initProject() is a store-free reconstruction with no profiles/delivery-config machinery; out of slice"
+  - pr: "#1808"
+    note: "update drift — no `openspec update` surface is vendored (store/self-update commands are not part of the shim)"
+  - pr: "#1782"
+    note: "retire_capabilities — capability retirement (retire_capabilities marker + retireSpec deletion path) was not reconstructed in P3 inc.4c's archive shim; retireSpec/finalizeRetiredSpec are vendored in specs-apply.ts but unused by the shim orchestration"
+
+roadmap:
+  - "vendor-sync-2026-09 (sdd): DONE — 1.13 engine/template ports (ports_1_13 above), tracked assets adopted at 9d4e5974, sources.yaml bumped to 9d4e5974 / 1.13.0"
+  - "P3 inc.3: DONE — vendored change-validation slice (parsers + schemas + Validator) + src/validate-change.ts"
+  - "P3 inc.4: DONE — store-free `openspec` CLI shim (src/bin/openspec.ts + src/shim/*) over the vendored engine: status/instructions/list/schemas/context/validate/new-change fully working"
+  - "V4-P4: DONE — 1.12 engine/template ports (ports_1_12 above), tracked assets adopted at e062b957, converge Stop hook emitted by the sdd capability"
+  - "P3 inc.4c: DONE — vendored specs-apply (vendor/openspec/apply/specs-apply.ts) + real `openspec archive` that folds ADDED/MODIFIED/REMOVED/RENAMED deltas into openspec/specs/ and moves the change to changes/archive/; verified end-to-end (ADDED fold, MODIFIED in-place update with no duplication, invalid-delta abort leaves specs untouched)"

package/node_modules/@freeharness/sdd/dist/src/bin/openspec.d.ts

@@ -0,0 +1,2 @@
+#!/usr/bin/env node
+export {};