otacon 0.1.3 → 0.1.4

package/dist/cli/install/assets.js

@@ -1,15 +1,15 @@
-// The wrapper content `otacon install` writes (DESIGN.md §16) — this is the
-// product-critical text that teaches an agent the whole protocol: the §6 full
-// loop, §8 grill discipline, and §13 "never end your turn". One protocol card,
+// The wrapper content `otacon install` writes — this is the product-critical
+// text that teaches an agent the whole protocol: the full review loop, grill
+// discipline, and "never end your turn" rule. One protocol card,
 // three destinations — Claude Code, Codex, and OpenCode each get it as a
-// SKILL.md in their own skills dir. Plus the Stop hook shell script (§13).
+// SKILL.md in their own skills dir. Plus the Stop hook shell script.
 // Wrappers are managed files: reinstall overwrites them wholesale (DECISIONS.md
 // "Wrappers are managed files").
 /** Present in every wrapper this tool owns; doctor greps for it. */
 export const MANAGED_MARKER = 'managed by `otacon install`';
 /**
- * The protocol card — §6 full loop (start-first) + §8 grill discipline + §13
- * failure habits — parametrized by the command prefix so one source feeds both
+ * The protocol card — start-first full loop + grill discipline + failure habits
+ * — parametrized by the command prefix so one source feeds both
  * wrappers (D7): `otacon` for what `otacon install` writes into any repo,
  * `./bin/otacon` for this repo's dogfood (run-from-source). The only thing that
  * varies between the two is `cmd`; the protocol text is identical, so a change
@@ -21,18 +21,60 @@ user reviews in a browser. Every \`${cmd}\`
 command prints exactly one JSON line on stdout. Exit 0 = proceed; exit 1 = a
 machine-readable error you can fix (read the JSON); exit 2 = you invoked it wrong.
 
+## Hard implementation gate
+
+When this skill is triggered, you MUST NOT create, edit, delete, or format project
+files, run code-modifying commands, or implement the requested change until a
+\`${cmd} wait\` event returns \`{"event":"approved",...,"implement":true}\`.
+
+Before that event, allowed actions are only:
+- \`${cmd} start\` / \`${cmd} status\` / \`${cmd} open\` / \`${cmd} progress\` /
+  \`${cmd} ask\` / \`${cmd} wait\` / \`${cmd} submit\` / \`${cmd} answer\`.
+- Read-only research commands.
+- Writing the plan and resolutions files under the session's home dir (\`~/.otacon/sessions/<id>/\`, the \`plan\` path \`start\` prints).
+
+A user request phrased as "can you make/fix/implement..." is still a plan-review
+request when this skill is active. Approval is not implied by the original request.
+
+## Starting: resume an amendment, or plan fresh
+
+Before \`${cmd} start\`, check where you are: run \`${cmd} status\`. If its output
+carries a \`resumeCandidate\`, you are standing inside a build worktree otacon
+created for a finished plan: a chance to AMEND that plan in place instead of
+spawning a second worktree.
+
+- Read the candidate plan at \`resumeCandidate.plan\` and judge whether the user's
+  request is about THAT feature.
+  - **Clearly unrelated** (a different feature) → just \`${cmd} start\` a fresh
+    session and ignore the candidate.
+  - **Related, or you are unsure** → ask the user, here in the terminal, whether to
+    resume and amend the existing plan or start new. This is the ONE question that
+    does not go through \`${cmd} ask\` (no session is open yet); wait for the answer
+    before acting.
+- On **resume**: \`${cmd} resume\` (it auto-detects the session from this worktree,
+  reopens it to \`revising\`, and prints the \`plan\` path). SKIP research and grill,
+  since the plan exists. Edit that \`plan\` file into revision N+1 directly from the user's
+  request (grill only if it is genuinely ambiguous), \`${cmd} submit\`, then go to
+  the **Review loop** (step 5). The review diffs against the approved revision.
+- No \`resumeCandidate\` → the normal flow below.
+
 ## The loop
 
 1. \`${cmd} start --title <kebab-title>\` **first, before you research** — it mints
-   the session and prints the review URL. Tell the user to open it (\`${cmd} open\`
+   the session and prints the review URL plus the \`plan\` draft path (under
+   \`~/.otacon/sessions/<id>/\`). Tell the user to open the URL (\`${cmd} open\`
    launches it in their browser) so they can watch the whole thing from the first second.
    \`--quick\` skips the interview — only when the user explicitly asks.
-2. **Research the codebase**, narrating as you go with
-   \`${cmd} progress "<what you're doing>"\` — call it whenever you start a chunk of
-   work the user can't otherwise see (reading a module, drafting, revising). It is
-   a non-blocking one-liner that feeds the live activity log and the draft chip; no
-   answer comes back, so never park on it. Read enough to propose answers, not
-   collect questions.
+2. **Research the codebase.** On supported agents the daemon now auto-streams your
+   tool calls, text, and thinking to the reviewer's now-playing console, so it
+   already sees the routine work. Use \`${cmd} progress "<what you're doing>"\` for
+   OCCASIONAL highlights and chapter markers (a milestone, a phase boundary, "what
+   I'm about to do next"), not per-step narration. It is the universal floor: on an
+   agent with no auto-capture those notes are the ONLY thing keeping the now-playing
+   bar alive, so still drop one whenever you start a chunk of work the user can't
+   otherwise see. It is a non-blocking one-liner that feeds the live stream and the
+   draft chip; no answer comes back, so never park on it. Read enough to propose
+   answers, not collect questions.
 3. **Grill** (mandatory unless --quick): Interview me relentlessly about every
    aspect of this plan until we reach a shared understanding. Walk down each branch
    of the design tree, resolving dependencies between decisions one-by-one. For
@@ -49,9 +91,11 @@ machine-readable error you can fix (read the JSON); exit 2 = you invoked it wron
      still go one at a time.
    - Park for the answer: \`${cmd} wait --timeout 540\` (set the Bash tool timeout
      to 600000 ms). The answer arrives as \`{"event":"answer","question":"q<n>",...}\`.
-4. **Draft** the plan at \`.otacon/<session>/plan.md\` in the schema below, then
+4. **Draft** the plan at the \`plan\` path \`start\` printed (\`~/.otacon/sessions/<id>/plan.md\`) in the schema below, then
    \`${cmd} submit\`. On exit 1, fix every reported lint issue and resubmit until
-   accepted.
+   accepted. After a clean submit, stop all implementation work and park in
+   \`${cmd} wait\`; only an \`approved\` event with \`implement:true\` enters the
+   Implement loop.
 5. **Review loop** — park in \`${cmd} wait --timeout 540\` (Bash timeout 600000 ms)
    and handle the one event it prints:
    - \`comments\` → revise plan.md; write \`resolutions.json\` as
@@ -80,26 +124,38 @@ machine-readable error you can fix (read the JSON); exit 2 = you invoked it wron
 
 ## CLI quick reference
 
-- \`${cmd} start --title <t> [--quick]\` · \`${cmd} progress "<note>"\` ·
+- \`${cmd} start --title <t> [--quick]\` · \`${cmd} resume [--session <id>]\` ·
+  \`${cmd} progress "<note>"\` (occasional highlights / chapter markers; the activity
+  floor on agents without auto-capture) ·
   \`${cmd} ask ...\` · \`${cmd} wait --timeout 540\` · \`${cmd} submit [--resolutions f]\` ·
   \`${cmd} answer <q> --body "..."\` · \`${cmd} implement-done [--pr <url>] [--failed]\` ·
   \`${cmd} status\` · \`${cmd} open\` · \`${cmd} config [get <key>]\`
 
 ## Implement loop (on \`approved\` with \`implement:true\`)
 
-You are the **orchestrator**: you only coordinate and narrate
-(\`${cmd} progress\` at each checkpoint) — every phase's real work runs in a fresh
-native subagent (Task tool) so your own context stays lean.
-
-1. **Setup.** On Implement the plan lives only in the home archive at the event
-   \`path\` (read the phases from there). Branch off the repo's current default branch
-   HEAD: create the
-   worktree under the configured \`worktree.dir\`
-   (\`${cmd} config get worktree.dir\` — default \`~/.otacon/worktrees\`, outside the repo):
-   \`git worktree add <worktree.dir>/<slug> -b otacon/impl-<slug>\` (off the default
-   branch). \`${cmd} progress\` each checkpoint throughout.
-2. **Per phase, in order** (read the phases from the home plan at the event \`path\`):
-   - \`${cmd} progress "phase N — implementing"\`; spawn an **implement+test**
+You are the **orchestrator**: you only coordinate and mark progress
+(\`${cmd} progress\` at phase boundaries, an occasional chapter marker rather than
+every action; on supported agents the now-playing console already streams the work).
+Every phase's real work runs in a fresh native subagent (Task tool) so your own
+context stays lean.
+
+1. **Setup.** Read the plan from the home archive at the event \`path\`.
+   - **Amending** (you resumed this session, so its build worktree already exists
+     and you are standing in it): do NOT create a worktree. \`cd\` into
+     \`<worktree.dir>/<slug>\`, make sure you are on \`otacon/impl-<slug>\`, and build
+     on top of the existing commits. Pushing later updates the SAME PR.
+   - **Fresh** (no existing worktree): branch off the repo's default-branch HEAD and
+     create the worktree under \`worktree.dir\` (\`${cmd} config get worktree.dir\`,
+     default \`~/.otacon/worktrees\`, outside the repo):
+     \`git worktree add <worktree.dir>/<slug> -b otacon/impl-<slug>\` (off the default
+     branch).
+   Drop a \`${cmd} progress\` highlight at each phase boundary throughout, not at
+   every step.
+2. **Per phase, in order** (read the phases from the home plan at the event \`path\`;
+   on an amendment, implement only the phases this revision changed, using the
+   changelog and the diff to scope):
+   - \`${cmd} progress "phase N — implementing"\` (one marker per phase); spawn an
+     **implement+test**
      subagent (Task tool) scoped to that phase's Goal/Files/Verification — it
      implements and runs the phase Verification plus the repo gates.
    - spawn a **separate** \`/code-review --fix\` subagent on the phase's working
@@ -109,10 +165,12 @@ native subagent (Task tool) so your own context stays lean.
      review still flags, or a subagent is stuck) → on the FIRST blocker,
      \`${cmd} ask\` with options \`retry|skip|abort|guidance\`, park in \`${cmd} wait\`,
      and act on the answer. No auto-retry.
-3. **Finish.** On success, open a PR against the default branch with \`gh pr create\`
-   (PR body = the plan summary + the per-phase log; fall back to the local branch +
-   path when there is no remote), then \`${cmd} implement-done --pr <url>\`. On abort,
-   run \`${cmd} implement-done --failed\`.
+3. **Finish.** On a **fresh** build, open a PR against the default branch with
+   \`gh pr create\` (PR body = the plan summary + the per-phase log; fall back to the
+   local branch + path when there is no remote). On an **amendment**, the PR already
+   exists: push the branch and it updates, so reuse its URL (it is on the session;
+   \`${cmd} status\` reports \`prUrl\`). Either way finish with
+   \`${cmd} implement-done --pr <url>\`. On abort, run \`${cmd} implement-done --failed\`.
 
 While \`implementing\` the Stop hook still keeps you on the line — never end the turn
 until \`implement-done\`.
@@ -175,6 +233,16 @@ or callout.
   \`\`\`
   Capped at 6 scenarios per block; must sit under \`Verification\`.
 
+When plan content is shaped as a hierarchy or tree (a taxonomy, a doc or file
+structure, a nested option space, a state hierarchy, a decision tree), draw it as a
+\`\`\`mermaid diagram, not as a monospace nested outline in a \`\`\`text fence: an outline
+forces the reviewer to reconstruct the shape line by line, while a diagram shows it at a
+glance. \`graph TD\` (a top-down flowchart) is the natural default; pick whatever shape
+reads best (a mindmap, a state diagram, etc. when they fit). Put the tree diagram in the
+section that owns that structure (Contract, Impact, or a phase's Details); \`mermaid\`
+diagrams no longer count toward the per-section fence cap, so a lead diagram and a
+structural one can coexist.
+
 Callouts and matrices are budget-exempt but capped (default 2 per read-path
 section); pills are free. Reach for a visual when it carries the point better
 than a sentence — never as decoration.
@@ -182,7 +250,11 @@ than a sentence — never as decoration.
 ## Rules
 
 - Never use native plan mode, AskUserQuestion, or any built-in question UI while
-  the session is open — every question goes through \`${cmd} ask\`.
+  the session is open: every question goes through \`${cmd} ask\`. The sole exception
+  is the resume-vs-new question at the very start, before any session exists.
+- If you notice you edited project files before \`approved implement:true\`, stop
+  immediately, disclose the mistake, and ask whether to revert or keep the
+  uncommitted changes.
 - Long review or build ahead? Remind the user to keep the Mac awake: \`caffeinate -i\`
   while the session runs.
 `;
@@ -191,18 +263,21 @@ than a sentence — never as decoration.
 export function skillMd() {
     return `---
 name: otacon
-description: Plan a feature through an otacon review session — grill interview, schema'd plan, phone review with anchored comments, approved plan saved to a home archive (and your project on Save). Use when the user asks to plan something with otacon, types /otacon, or wants a reviewed implementation plan before coding. Replaces native plan mode.
+description: Plan a feature through an otacon review session: grill interview, schema'd plan, phone review with anchored comments, approved plan saved to a home archive (and your project on Save). Use when the user asks to plan something with otacon, types /otacon, or wants a reviewed implementation plan before coding. Replaces native plan mode. Also resumes and amends an implemented plan when run from inside its build worktree.
 ---
 
-<!-- ${MANAGED_MARKER} — reinstall overwrites this file; the spec lives in otacon's DESIGN.md -->
+<!-- ${MANAGED_MARKER} — reinstall overwrites this file. -->
 
 # Otacon plan session protocol
 
 ${protocolCard('otacon')}`;
 }
 /**
- * THIS repo's dogfood wrapper — the committed \`.claude/skills/otacon/SKILL.md\`
- * (DESIGN.md §16). It is the same protocol card as \`skillMd()\`, but with the
+ * THIS repo's dogfood wrapper — the committed \`.claude/skills/otacon-dev/SKILL.md\`.
+ * Named \`otacon-dev\` (not \`otacon\`) so it never collides with the installed
+ * product skill (\`otacon\`) when developing otacon itself: \`/otacon\` stays the
+ * real product, \`/otacon-dev\` is this source-mode wrapper.
+ * It is the same protocol card as \`skillMd()\`, but with the
  * \`./bin/otacon\` run-from-source command prefix and a repo preamble (run from
  * source, restart after daemon edits). Generated from this function and never
  * hand-edited; \`assets.test.ts\` asserts the committed file equals this output,
@@ -211,8 +286,8 @@ ${protocolCard('otacon')}`;
  */
 export function dogfoodSkillMd() {
     return `---
-name: otacon
-description: Plan a feature for THIS repo through an otacon review session — grill interview, schema'd plan, browser/phone review with anchored comments, approved plan saved to a home archive (and your project on Save). Use when the user asks to plan something with otacon, types /otacon, or wants a reviewed implementation plan before coding. Replaces native plan mode. Dogfoods otacon on its own development.
+name: otacon-dev
+description: Plan a feature for THIS repo through an otacon review session: grill interview, schema'd plan, browser/phone review with anchored comments, approved plan saved to a home archive (and your project on Save). Use when the user asks to plan something with otacon, types /otacon, or wants a reviewed implementation plan before coding. Replaces native plan mode. Dogfoods otacon on its own development. Also resumes and amends an implemented plan when run from inside its build worktree.
 ---
 
 <!-- Generated from src/cli/install/assets.ts (dogfoodSkillMd) — do NOT hand-edit;
@@ -225,9 +300,9 @@ This repo **is** otacon. You plan features for it by running otacon's own CLI fr
 source via the \`./bin/otacon\` shim, so every command below exercises the code in
 this checkout. That shim runs the CLI from \`src/\` via bun — no build needed; it
 always reflects current source. The daemon auto-spawns from source on the first
-command. Working state lives in \`.otacon/\`; the approved plan is archived in the
-home store (\`~/.otacon/sessions/<id>/\`) and, on Save, copied into the repo under
-\`plans.dir\` (default \`.otacon/plans\`).
+command. Working state lives in the home store (\`~/.otacon/sessions/<id>/\`); on
+Save the approved plan is also copied into the repo under \`plans.dir\` (default
+\`.otacon/plans\`). \`<repo>/.otacon/\` itself holds only config and those Save copies.
 
 After editing **daemon** source (\`src/daemon/**\`) mid-session, restart the running
 daemon so your change loads: \`./bin/otacon restart\` (the next command respawns it
@@ -235,26 +310,26 @@ from current source). Use \`./bin/otacon restart\`, not a raw curl to a fixed po
 in a git worktree the shim runs the daemon on a derived port, and \`restart\` always
 targets the one this checkout talks to. CLI/linter/parser edits need no restart.
 
-The spec these commands implement is otacon's own DESIGN.md (§6 loop, §8 grill, §13
-failure habits); the canonical wrapper text lives in \`src/cli/install/assets.ts\`.
+These commands implement otacon's full review loop, grill discipline, and
+failure habits; the canonical wrapper text lives in \`src/cli/install/assets.ts\`.
 
 ---
 
 ${protocolCard('./bin/otacon')}`;
 }
 /**
- * The Claude Code Stop hook (DESIGN.md §13): blocks ending the turn while an
+ * The Claude Code Stop hook: blocks ending the turn while an
  * open otacon session exists in the cwd's repo. Plain sh, fast, fail-open —
  * any failure (daemon down, curl missing, no match) allows the stop. With no
  * local pointer, the open session is found by scanning the daemon registry for
- * a non-terminal session whose repo equals the cwd's git root (DESIGN.md §7) —
+ * a non-terminal session whose repo equals the cwd's git root —
  * `implementing` still blocks (the build is live); only the terminal states
  * (approved/implemented/implement_failed) let the agent end its turn.
  */
 export const STOP_HOOK_SCRIPT = `#!/bin/sh
 # otacon Stop hook — ${MANAGED_MARKER}; reinstall overwrites this file.
 # Blocks Claude Code from ending its turn while the cwd's repo has an open
-# otacon plan session (DESIGN.md §13). Fail-open by design: when anything here
+# otacon plan session. Fail-open by design: when anything here
 # fails (daemon unreachable, curl missing, no match), the stop is allowed.
 input=$(cat 2>/dev/null) || input=""
 cwd=$(printf '%s' "$input" | sed -n 's/.*"cwd"[[:space:]]*:[[:space:]]*"\\([^"]*\\)".*/\\1/p')

package/dist/cli/install/assets.js.map

@@ -1 +1 @@
-{"version":3,"file":"assets.js","sourceRoot":"","sources":["../../../src/cli/install/assets.ts"],"names":[],"mappings":"AAAA,4EAA4E;AAC5E,8EAA8E;AAC9E,+EAA+E;AAC/E,yEAAyE;AACzE,2EAA2E;AAC3E,gFAAgF;AAChF,iCAAiC;AAEjC,oEAAoE;AACpE,MAAM,CAAC,MAAM,cAAc,GAAG,6BAA6B,CAAC;AAE5D;;;;;;;GAOG;AACH,SAAS,YAAY,CAAC,GAAW;IAC/B,OAAO;qCAC4B,GAAG;;;;;;OAMjC,GAAG;wEAC8D,GAAG;;;;OAIpE,GAAG;;;;;;;;;;SAUD,GAAG;;;;;eAKG,GAAG;;;;8BAIY,GAAG;;;OAG1B,GAAG;;iCAEuB,GAAG;;;;uCAIG,GAAG;;;;;;wBAMlB,GAAG;;;;;;;;;;;;;OAapB,GAAG,qDAAqD,GAAG;;;;;MAK5D,GAAG,sCAAsC,GAAG;MAC5C,GAAG,kBAAkB,GAAG,6BAA6B,GAAG;MACxD,GAAG,kCAAkC,GAAG;MACxC,GAAG,iBAAiB,GAAG,eAAe,GAAG;;;;;KAK1C,GAAG;;;;;;;QAOA,GAAG;;gBAEK,GAAG;;SAEV,GAAG;;;;;;;;SAQH,GAAG,gEAAgE,GAAG;;;;2CAIpC,GAAG;WACnC,GAAG;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;wDAsE0C,GAAG;;;CAG1D,CAAC;AACF,CAAC;AAED,0FAA0F;AAC1F,MAAM,UAAU,OAAO;IACrB,OAAO;;;;;OAKF,cAAc;;;;EAInB,YAAY,CAAC,QAAQ,CAAC,EAAE,CAAC;AAC3B,CAAC;AAED;;;;;;;;GAQG;AACH,MAAM,UAAU,cAAc;IAC5B,OAAO;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;EA8BP,YAAY,CAAC,cAAc,CAAC,EAAE,CAAC;AACjC,CAAC;AAED;;;;;;;;GAQG;AACH,MAAM,CAAC,MAAM,gBAAgB,GAAG;uBACT,cAAc;;;;;;;;;;;;;;;;;;;;;CAqBpC,CAAC"}
+{"version":3,"file":"assets.js","sourceRoot":"","sources":["../../../src/cli/install/assets.ts"],"names":[],"mappings":"AAAA,6EAA6E;AAC7E,6EAA6E;AAC7E,iEAAiE;AACjE,yEAAyE;AACzE,qEAAqE;AACrE,gFAAgF;AAChF,iCAAiC;AAEjC,oEAAoE;AACpE,MAAM,CAAC,MAAM,cAAc,GAAG,6BAA6B,CAAC;AAE5D;;;;;;;GAOG;AACH,SAAS,YAAY,CAAC,GAAW;IAC/B,OAAO;qCAC4B,GAAG;;;;;;;;IAQpC,GAAG;;;MAGD,GAAG,gBAAgB,GAAG,iBAAiB,GAAG,eAAe,GAAG;MAC5D,GAAG,cAAc,GAAG,eAAe,GAAG,iBAAiB,GAAG;;;;;;;;;WASrD,GAAG,wCAAwC,GAAG;;;;;;;2DAOE,GAAG;;;;4BAIlC,GAAG;;qBAEV,GAAG;;;yDAGiC,GAAG;;;;;;OAMrD,GAAG;;qEAE2D,GAAG;;;;;0CAK9B,GAAG;;;;;;;;;;;;;SAapC,GAAG;;;;;eAKG,GAAG;;;;8BAIY,GAAG;;;OAG1B,GAAG;;OAEH,GAAG;;iCAEuB,GAAG;;;;uCAIG,GAAG;;;;;;wBAMlB,GAAG;;;;;;;;;;;;;OAapB,GAAG,qDAAqD,GAAG;;;;;MAK5D,GAAG,sCAAsC,GAAG;MAC5C,GAAG;;MAEH,GAAG,kBAAkB,GAAG,6BAA6B,GAAG;MACxD,GAAG,kCAAkC,GAAG;MACxC,GAAG,iBAAiB,GAAG,eAAe,GAAG;;;;;KAK1C,GAAG;;;;;;;;;;;qDAW6C,GAAG;;;;cAI1C,GAAG;;;;;SAKR,GAAG;;;;;;;;;SASH,GAAG,gEAAgE,GAAG;;;;;;OAMxE,GAAG;OACH,GAAG,iDAAiD,GAAG;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;uDAgFP,GAAG;;;;;;;CAOzD,CAAC;AACF,CAAC;AAED,0FAA0F;AAC1F,MAAM,UAAU,OAAO;IACrB,OAAO;;;;;OAKF,cAAc;;;;EAInB,YAAY,CAAC,QAAQ,CAAC,EAAE,CAAC;AAC3B,CAAC;AAED;;;;;;;;;;;GAWG;AACH,MAAM,UAAU,cAAc;IAC5B,OAAO;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;EA8BP,YAAY,CAAC,cAAc,CAAC,EAAE,CAAC;AACjC,CAAC;AAED;;;;;;;;GAQG;AACH,MAAM,CAAC,MAAM,gBAAgB,GAAG;uBACT,cAAc;;;;;;;;;;;;;;;;;;;;;CAqBpC,CAAC"}

package/dist/cli/install/locations.js

@@ -1,4 +1,4 @@
-// Where each agent reads its wrapper from (DESIGN.md §16; DECISIONS.md
+// Where each agent reads its wrapper from (install/update; DECISIONS.md
 // "Wrapper destinations per agent"), plus the merge/registration helpers
 // install and doctor share. homedir() honors $HOME, which is what keeps the
 // install e2e hermetic under a temp HOME.

package/dist/cli/install/locations.js.map

@@ -1 +1 @@
-{"version":3,"file":"locations.js","sourceRoot":"","sources":["../../../src/cli/install/locations.ts"],"names":[],"mappings":"AAAA,uEAAuE;AACvE,yEAAyE;AACzE,4EAA4E;AAC5E,0CAA0C;AAE1C,OAAO,EAAE,YAAY,EAAE,MAAM,SAAS,CAAC;AACvC,OAAO,EAAE,OAAO,EAAE,MAAM,SAAS,CAAC;AAClC,OAAO,EAAE,IAAI,EAAE,MAAM,WAAW,CAAC;AASjC,MAAM,UAAU,eAAe,CAAC,QAAsB,EAAE,IAAI,EAAE,MAAM,EAAE;IACpE,MAAM,IAAI,GAAG,KAAK,CAAC,IAAI,KAAK,SAAS,CAAC,CAAC,CAAC,KAAK,CAAC,IAAI,CAAC,CAAC,CAAC,OAAO,EAAE,CAAC;IAC/D,OAAO,IAAI,CAAC,IAAI,EAAE,SAAS,EAAE,QAAQ,EAAE,QAAQ,EAAE,UAAU,CAAC,CAAC;AAC/D,CAAC;AAED,qFAAqF;AACrF,MAAM,UAAU,oBAAoB;IAClC,OAAO,IAAI,CAAC,OAAO,EAAE,EAAE,SAAS,EAAE,OAAO,EAAE,gBAAgB,CAAC,CAAC;AAC/D,CAAC;AAED,MAAM,UAAU,kBAAkB;IAChC,OAAO,IAAI,CAAC,OAAO,EAAE,EAAE,SAAS,EAAE,eAAe,CAAC,CAAC;AACrD,CAAC;AAED,yFAAyF;AACzF,MAAM,UAAU,cAAc,CAAC,QAAsB,EAAE,IAAI,EAAE,MAAM,EAAE;IACnE,MAAM,IAAI,GACR,KAAK,CAAC,IAAI,KAAK,SAAS;QACtB,CAAC,CAAC,IAAI,CAAC,KAAK,CAAC,IAAI,EAAE,QAAQ,CAAC;QAC5B,CAAC,CAAC,CAAC,OAAO,CAAC,GAAG,CAAC,UAAU,IAAI,IAAI,CAAC,OAAO,EAAE,EAAE,QAAQ,CAAC,CAAC,CAAC;IAC5D,OAAO,IAAI,CAAC,IAAI,EAAE,QAAQ,EAAE,QAAQ,EAAE,UAAU,CAAC,CAAC;AACpD,CAAC;AAED,8GAA8G;AAC9G,MAAM,UAAU,iBAAiB,CAAC,QAAsB,EAAE,IAAI,EAAE,MAAM,EAAE;IACtE,MAAM,IAAI,GACR,KAAK,CAAC,IAAI,KAAK,SAAS;QACtB,CAAC,CAAC,IAAI,CAAC,KAAK,CAAC,IAAI,EAAE,WAAW,CAAC;QAC/B,CAAC,CAAC,IAAI,CAAC,OAAO,CAAC,GAAG,CAAC,eAAe,IAAI,IAAI,CAAC,OAAO,EAAE,EAAE,SAAS,CAAC,EAAE,UAAU,CAAC,CAAC;IAClF,OAAO,IAAI,CAAC,IAAI,EAAE,QAAQ,EAAE,QAAQ,EAAE,UAAU,CAAC,CAAC;AACpD,CAAC;AAED;;;;GAIG;AACH,MAAM,UAAU,wBAAwB;IACtC,IAAI,CAAC;QACH,MAAM,GAAG,GAAG,IAAI,CAAC,KAAK,CAAC,YAAY,CAAC,kBAAkB,EAAE,EAAE,MAAM,CAAC,CAEhE,CAAC;QACF,OAAO,kBAAkB,CAAC,GAAG,EAAE,KAAK,EAAE,IAAI,EAAE,oBAAoB,EAAE,CAAC,CAAC;IACtE,CAAC;IAAC,MAAM,CAAC;QACP,OAAO,KAAK,CAAC;IACf,CAAC;AACH,CAAC;AAED,gEAAgE;AAChE,MAAM,UAAU,kBAAkB,CAAC,IAAa,EAAE,OAAe;IAC/D,IAAI,CAAC,KAAK,CAAC,OAAO,CAAC,IAAI,CAAC;QAAE,OAAO,KAAK,CAAC;IACvC,OAAO,IAAI,CAAC,IAAI,CAAC,CAAC,KAAK,EAAE,EAAE;QACzB,MAAM,KAAK,GAAI,KAAoC,EAAE,KAAK,CAAC;QAC3D,OAAO,CACL,KAAK,CAAC,OAAO,CAAC,KAAK,CAAC;YACpB,KAAK,CAAC,IAAI,CAAC,CAAC,CAAC,EAAE,EAAE,CAAE,CAAkC,EAAE,OAAO,KAAK,OAAO,CAAC,CAC5E,CAAC;IACJ,CAAC,CAAC,CAAC;AACL,CAAC;AAOD;;;;;;GAMG;AACH,MAAM,UAAU,aAAa,CAAC,GAAY,EAAE,OAAe;IACzD,IAAI,GAAG,KAAK,IAAI,IAAI,OAAO,GAAG,KAAK,QAAQ,IAAI,KAAK,CAAC,OAAO,CAAC,GAAG,CAAC;QAAE,OAAO,SAAS,CAAC;IACpF,MAAM,QAAQ,GAAG,GAA8B,CAAC;IAChD,MAAM,KAAK,GAAG,QAAQ,CAAC,KAAK,IAAI,EAAE,CAAC;IACnC,IAAI,KAAK,KAAK,IAAI,IAAI,OAAO,KAAK,KAAK,QAAQ,IAAI,KAAK,CAAC,OAAO,CAAC,KAAK,CAAC;QAAE,OAAO,SAAS,CAAC;IAC1F,MAAM,IAAI,GAAI,KAAiC,CAAC,IAAI,IAAI,EAAE,CAAC;IAC3D,IAAI,CAAC,KAAK,CAAC,OAAO,CAAC,IAAI,CAAC;QAAE,OAAO,SAAS,CAAC;IAC3C,IAAI,kBAAkB,CAAC,IAAI,EAAE,OAAO,CAAC;QAAE,OAAO,EAAE,QAAQ,EAAE,OAAO,EAAE,KAAK,EAAE,CAAC;IAC3E,MAAM,KAAK,GAAG,EAAE,OAAO,EAAE,EAAE,EAAE,KAAK,EAAE,CAAC,EAAE,IAAI,EAAE,SAAS,EAAE,OAAO,EAAE,CAAC,EAAE,CAAC;IACrE,OAAO;QACL,QAAQ,EAAE,EAAE,GAAG,QAAQ,EAAE,KAAK,EAAE,EAAE,GAAG,KAAK,EAAE,IAAI,EAAE,CAAC,GAAG,IAAI,EAAE,KAAK,CAAC,EAAE,EAAE;QACtE,OAAO,EAAE,IAAI;KACd,CAAC;AACJ,CAAC"}
+{"version":3,"file":"locations.js","sourceRoot":"","sources":["../../../src/cli/install/locations.ts"],"names":[],"mappings":"AAAA,wEAAwE;AACxE,yEAAyE;AACzE,4EAA4E;AAC5E,0CAA0C;AAE1C,OAAO,EAAE,YAAY,EAAE,MAAM,SAAS,CAAC;AACvC,OAAO,EAAE,OAAO,EAAE,MAAM,SAAS,CAAC;AAClC,OAAO,EAAE,IAAI,EAAE,MAAM,WAAW,CAAC;AASjC,MAAM,UAAU,eAAe,CAAC,QAAsB,EAAE,IAAI,EAAE,MAAM,EAAE;IACpE,MAAM,IAAI,GAAG,KAAK,CAAC,IAAI,KAAK,SAAS,CAAC,CAAC,CAAC,KAAK,CAAC,IAAI,CAAC,CAAC,CAAC,OAAO,EAAE,CAAC;IAC/D,OAAO,IAAI,CAAC,IAAI,EAAE,SAAS,EAAE,QAAQ,EAAE,QAAQ,EAAE,UAAU,CAAC,CAAC;AAC/D,CAAC;AAED,qFAAqF;AACrF,MAAM,UAAU,oBAAoB;IAClC,OAAO,IAAI,CAAC,OAAO,EAAE,EAAE,SAAS,EAAE,OAAO,EAAE,gBAAgB,CAAC,CAAC;AAC/D,CAAC;AAED,MAAM,UAAU,kBAAkB;IAChC,OAAO,IAAI,CAAC,OAAO,EAAE,EAAE,SAAS,EAAE,eAAe,CAAC,CAAC;AACrD,CAAC;AAED,yFAAyF;AACzF,MAAM,UAAU,cAAc,CAAC,QAAsB,EAAE,IAAI,EAAE,MAAM,EAAE;IACnE,MAAM,IAAI,GACR,KAAK,CAAC,IAAI,KAAK,SAAS;QACtB,CAAC,CAAC,IAAI,CAAC,KAAK,CAAC,IAAI,EAAE,QAAQ,CAAC;QAC5B,CAAC,CAAC,CAAC,OAAO,CAAC,GAAG,CAAC,UAAU,IAAI,IAAI,CAAC,OAAO,EAAE,EAAE,QAAQ,CAAC,CAAC,CAAC;IAC5D,OAAO,IAAI,CAAC,IAAI,EAAE,QAAQ,EAAE,QAAQ,EAAE,UAAU,CAAC,CAAC;AACpD,CAAC;AAED,8GAA8G;AAC9G,MAAM,UAAU,iBAAiB,CAAC,QAAsB,EAAE,IAAI,EAAE,MAAM,EAAE;IACtE,MAAM,IAAI,GACR,KAAK,CAAC,IAAI,KAAK,SAAS;QACtB,CAAC,CAAC,IAAI,CAAC,KAAK,CAAC,IAAI,EAAE,WAAW,CAAC;QAC/B,CAAC,CAAC,IAAI,CAAC,OAAO,CAAC,GAAG,CAAC,eAAe,IAAI,IAAI,CAAC,OAAO,EAAE,EAAE,SAAS,CAAC,EAAE,UAAU,CAAC,CAAC;IAClF,OAAO,IAAI,CAAC,IAAI,EAAE,QAAQ,EAAE,QAAQ,EAAE,UAAU,CAAC,CAAC;AACpD,CAAC;AAED;;;;GAIG;AACH,MAAM,UAAU,wBAAwB;IACtC,IAAI,CAAC;QACH,MAAM,GAAG,GAAG,IAAI,CAAC,KAAK,CAAC,YAAY,CAAC,kBAAkB,EAAE,EAAE,MAAM,CAAC,CAEhE,CAAC;QACF,OAAO,kBAAkB,CAAC,GAAG,EAAE,KAAK,EAAE,IAAI,EAAE,oBAAoB,EAAE,CAAC,CAAC;IACtE,CAAC;IAAC,MAAM,CAAC;QACP,OAAO,KAAK,CAAC;IACf,CAAC;AACH,CAAC;AAED,gEAAgE;AAChE,MAAM,UAAU,kBAAkB,CAAC,IAAa,EAAE,OAAe;IAC/D,IAAI,CAAC,KAAK,CAAC,OAAO,CAAC,IAAI,CAAC;QAAE,OAAO,KAAK,CAAC;IACvC,OAAO,IAAI,CAAC,IAAI,CAAC,CAAC,KAAK,EAAE,EAAE;QACzB,MAAM,KAAK,GAAI,KAAoC,EAAE,KAAK,CAAC;QAC3D,OAAO,CACL,KAAK,CAAC,OAAO,CAAC,KAAK,CAAC;YACpB,KAAK,CAAC,IAAI,CAAC,CAAC,CAAC,EAAE,EAAE,CAAE,CAAkC,EAAE,OAAO,KAAK,OAAO,CAAC,CAC5E,CAAC;IACJ,CAAC,CAAC,CAAC;AACL,CAAC;AAOD;;;;;;GAMG;AACH,MAAM,UAAU,aAAa,CAAC,GAAY,EAAE,OAAe;IACzD,IAAI,GAAG,KAAK,IAAI,IAAI,OAAO,GAAG,KAAK,QAAQ,IAAI,KAAK,CAAC,OAAO,CAAC,GAAG,CAAC;QAAE,OAAO,SAAS,CAAC;IACpF,MAAM,QAAQ,GAAG,GAA8B,CAAC;IAChD,MAAM,KAAK,GAAG,QAAQ,CAAC,KAAK,IAAI,EAAE,CAAC;IACnC,IAAI,KAAK,KAAK,IAAI,IAAI,OAAO,KAAK,KAAK,QAAQ,IAAI,KAAK,CAAC,OAAO,CAAC,KAAK,CAAC;QAAE,OAAO,SAAS,CAAC;IAC1F,MAAM,IAAI,GAAI,KAAiC,CAAC,IAAI,IAAI,EAAE,CAAC;IAC3D,IAAI,CAAC,KAAK,CAAC,OAAO,CAAC,IAAI,CAAC;QAAE,OAAO,SAAS,CAAC;IAC3C,IAAI,kBAAkB,CAAC,IAAI,EAAE,OAAO,CAAC;QAAE,OAAO,EAAE,QAAQ,EAAE,OAAO,EAAE,KAAK,EAAE,CAAC;IAC3E,MAAM,KAAK,GAAG,EAAE,OAAO,EAAE,EAAE,EAAE,KAAK,EAAE,CAAC,EAAE,IAAI,EAAE,SAAS,EAAE,OAAO,EAAE,CAAC,EAAE,CAAC;IACrE,OAAO;QACL,QAAQ,EAAE,EAAE,GAAG,QAAQ,EAAE,KAAK,EAAE,EAAE,GAAG,KAAK,EAAE,IAAI,EAAE,CAAC,GAAG,IAAI,EAAE,KAAK,CAAC,EAAE,EAAE;QACtE,OAAO,EAAE,IAAI;KACd,CAAC;AACJ,CAAC"}

package/dist/cli/install/tailscale.js

@@ -1,5 +1,5 @@
-// Best-effort Tailscale discovery shared by doctor and expose (DESIGN.md §11,
-// §16). OTACON_TAILSCALE pins the binary (hermetic tests; nonstandard
+// Best-effort Tailscale discovery shared by doctor and expose (install/expose,
+// install/update). OTACON_TAILSCALE pins the binary (hermetic tests; nonstandard
 // installs) and is authoritative when set; otherwise PATH, then the macOS app
 // bundle's embedded CLI (DECISIONS.md "doctor/expose automation boundary").
 import { execFileSync } from "node:child_process";

package/dist/cli/install/tailscale.js.map

@@ -1 +1 @@
-{"version":3,"file":"tailscale.js","sourceRoot":"","sources":["../../../src/cli/install/tailscale.ts"],"names":[],"mappings":"AAAA,8EAA8E;AAC9E,sEAAsE;AACtE,8EAA8E;AAC9E,4EAA4E;AAE5E,OAAO,EAAE,YAAY,EAAE,MAAM,oBAAoB,CAAC;AAElD,MAAM,WAAW,GAAG,sDAAsD,CAAC;AAE3E,MAAM,UAAU,aAAa;IAC3B,MAAM,QAAQ,GAAG,OAAO,CAAC,GAAG,CAAC,gBAAgB,CAAC;IAC9C,MAAM,UAAU,GAAG,QAAQ,KAAK,SAAS,IAAI,QAAQ,KAAK,EAAE,CAAC,CAAC,CAAC,CAAC,QAAQ,CAAC,CAAC,CAAC,CAAC,CAAC,WAAW,EAAE,WAAW,CAAC,CAAC;IACvG,KAAK,MAAM,GAAG,IAAI,UAAU,EAAE,CAAC;QAC7B,IAAI,CAAC;YACH,YAAY,CAAC,GAAG,EAAE,CAAC,SAAS,CAAC,EAAE,EAAE,KAAK,EAAE,CAAC,QAAQ,EAAE,MAAM,EAAE,QAAQ,CAAC,EAAE,CAAC,CAAC;YACxE,OAAO,GAAG,CAAC;QACb,CAAC;QAAC,MAAM,CAAC;YACP,eAAe;QACjB,CAAC;IACH,CAAC;IACD,OAAO,SAAS,CAAC;AACnB,CAAC;AASD,MAAM,UAAU,eAAe,CAAC,GAAW;IACzC,IAAI,CAAC;QACH,MAAM,GAAG,GAAG,IAAI,CAAC,KAAK,CACpB,YAAY,CAAC,GAAG,EAAE,CAAC,QAAQ,EAAE,QAAQ,CAAC,EAAE;YACtC,QAAQ,EAAE,MAAM;YAChB,KAAK,EAAE,CAAC,QAAQ,EAAE,MAAM,EAAE,MAAM,CAAC;SAClC,CAAC,CACyD,CAAC;QAC9D,MAAM,GAAG,GAAG,GAAG,EAAE,IAAI,EAAE,OAAO,CAAC;QAC/B,OAAO;YACL,YAAY,EAAE,OAAO,GAAG,EAAE,YAAY,KAAK,QAAQ,CAAC,CAAC,CAAC,GAAG,CAAC,YAAY,CAAC,CAAC,CAAC,SAAS;YAClF,GAAG,CAAC,OAAO,GAAG,KAAK,QAAQ,IAAI,GAAG,KAAK,EAAE;gBACvC,CAAC,CAAC,EAAE,OAAO,EAAE,GAAG,CAAC,OAAO,CAAC,KAAK,EAAE,EAAE,CAAC,EAAE;gBACrC,CAAC,CAAC,EAAE,CAAC;SACR,CAAC;IACJ,CAAC;IAAC,MAAM,CAAC;QACP,OAAO,SAAS,CAAC;IACnB,CAAC;AACH,CAAC"}
+{"version":3,"file":"tailscale.js","sourceRoot":"","sources":["../../../src/cli/install/tailscale.ts"],"names":[],"mappings":"AAAA,+EAA+E;AAC/E,iFAAiF;AACjF,8EAA8E;AAC9E,4EAA4E;AAE5E,OAAO,EAAE,YAAY,EAAE,MAAM,oBAAoB,CAAC;AAElD,MAAM,WAAW,GAAG,sDAAsD,CAAC;AAE3E,MAAM,UAAU,aAAa;IAC3B,MAAM,QAAQ,GAAG,OAAO,CAAC,GAAG,CAAC,gBAAgB,CAAC;IAC9C,MAAM,UAAU,GAAG,QAAQ,KAAK,SAAS,IAAI,QAAQ,KAAK,EAAE,CAAC,CAAC,CAAC,CAAC,QAAQ,CAAC,CAAC,CAAC,CAAC,CAAC,WAAW,EAAE,WAAW,CAAC,CAAC;IACvG,KAAK,MAAM,GAAG,IAAI,UAAU,EAAE,CAAC;QAC7B,IAAI,CAAC;YACH,YAAY,CAAC,GAAG,EAAE,CAAC,SAAS,CAAC,EAAE,EAAE,KAAK,EAAE,CAAC,QAAQ,EAAE,MAAM,EAAE,QAAQ,CAAC,EAAE,CAAC,CAAC;YACxE,OAAO,GAAG,CAAC;QACb,CAAC;QAAC,MAAM,CAAC;YACP,eAAe;QACjB,CAAC;IACH,CAAC;IACD,OAAO,SAAS,CAAC;AACnB,CAAC;AASD,MAAM,UAAU,eAAe,CAAC,GAAW;IACzC,IAAI,CAAC;QACH,MAAM,GAAG,GAAG,IAAI,CAAC,KAAK,CACpB,YAAY,CAAC,GAAG,EAAE,CAAC,QAAQ,EAAE,QAAQ,CAAC,EAAE;YACtC,QAAQ,EAAE,MAAM;YAChB,KAAK,EAAE,CAAC,QAAQ,EAAE,MAAM,EAAE,MAAM,CAAC;SAClC,CAAC,CACyD,CAAC;QAC9D,MAAM,GAAG,GAAG,GAAG,EAAE,IAAI,EAAE,OAAO,CAAC;QAC/B,OAAO;YACL,YAAY,EAAE,OAAO,GAAG,EAAE,YAAY,KAAK,QAAQ,CAAC,CAAC,CAAC,GAAG,CAAC,YAAY,CAAC,CAAC,CAAC,SAAS;YAClF,GAAG,CAAC,OAAO,GAAG,KAAK,QAAQ,IAAI,GAAG,KAAK,EAAE;gBACvC,CAAC,CAAC,EAAE,OAAO,EAAE,GAAG,CAAC,OAAO,CAAC,KAAK,EAAE,EAAE,CAAC,EAAE;gBACrC,CAAC,CAAC,EAAE,CAAC;SACR,CAAC;IACJ,CAAC;IAAC,MAAM,CAAC;QACP,OAAO,SAAS,CAAC;IACnB,CAAC;AACH,CAAC"}

package/dist/cli/install/wrapper.js

@@ -0,0 +1,202 @@
+// Resolves the in-package SKILL.md asset that the installed wrapper symlinks to.
+// `otacon install` copies the wrapper text today, so it goes stale when the binary
+// auto-updates; the fix is to SYMLINK the installed wrapper to a real file shipped
+// inside the npm package (`dist/skills/otacon/SKILL.md`, generated from `skillMd()`
+// by scripts/gen-skill-asset.ts), so a binary upgrade refreshes the skill for free.
+// A symlink target must be a STABLE on-disk path, so only the packaged file qualifies;
+// when there is no such file (running from source, or an ephemeral npx cache that a
+// later invocation may have wiped), callers must fall back to COPYING instead.
+import { existsSync, lstatSync, mkdirSync, readFileSync, realpathSync, rmSync, symlinkSync, writeFileSync, } from "node:fs";
+import { dirname } from "node:path";
+import { fileURLToPath } from "node:url";
+import { isSourceRun } from "../client.js";
+import { notice } from "../output.js";
+import { findRepoRoot } from "../session.js";
+import { MANAGED_MARKER, skillMd } from "./assets.js";
+import { claudeSkillPath, codexSkillPath, opencodeSkillPath, } from "./locations.js";
+/**
+ * The absolute path of the packaged `SKILL.md` asset, or `undefined` when no stable
+ * packaged copy exists (so callers copy `skillMd()` instead of symlinking).
+ *
+ * Resolution is relative to THIS module's compiled location: from the installed
+ * `dist/cli/install/wrapper.js` `../../skills/otacon/SKILL.md` is
+ * `dist/skills/otacon/SKILL.md` (the file the build emits); from source
+ * `src/cli/install/wrapper.ts` it is `src/skills/otacon/SKILL.md`, which never exists,
+ * so a source run correctly returns `undefined`. Returns `undefined` when:
+ * - the resolved path does not exist (source run, or asset not built); or
+ * - the path lives under an ephemeral npx cache (an `_npx` segment): that dir is
+ *   transient, so a symlink into it would dangle once npx prunes it; copy instead.
+ * Never throws: any error resolves to `undefined`, the copy-fallback signal.
+ */
+export function packagedSkillPath() {
+    try {
+        const path = fileURLToPath(new URL("../../skills/otacon/SKILL.md", import.meta.url));
+        if (!existsSync(path))
+            return undefined;
+        if (/[/\\]_npx[/\\]/.test(path))
+            return undefined;
+        return path;
+    }
+    catch {
+        return undefined;
+    }
+}
+/**
+ * Converge the wrapper at `path` to its desired state and report how (idempotent).
+ *
+ * User-scope wrappers SYMLINK to the packaged `SKILL.md` so a binary upgrade
+ * refreshes the protocol text for free (the file the symlink points at is the one
+ * the new build emits). Two cases fall back to a COPY of `skillMd()` instead:
+ * - **Project scope** always copies. A `--project` wrapper is committed/shared, so it
+ *   must be machine-independent: it cannot point at a machine-local global path that
+ *   a teammate (or CI) does not have.
+ * - **No stable packaged path** (`pkgPath` undefined: a source run, or an ephemeral
+ *   npx cache `packagedSkillPath()` already rejected): there is nothing durable to
+ *   link to, so copy the current text.
+ * - **Symlinks unsupported here** (the `symlink` call throws EPERM/EXDEV/ENOSYS/etc.,
+ *   e.g. Windows without privilege, or a cross-device link): fall through to a copy.
+ *   The `symlink` parameter is a testability seam that also lets a test force this path.
+ *
+ * Convergence is idempotent: an already-correct symlink (same resolved target) or an
+ * already-correct copy (same contents, a regular file not a symlink) is a no-op
+ * (`changed: false`); anything else is removed and rewritten. A scope/availability
+ * change between runs self-heals (a stale symlink becomes a copy, and vice versa)
+ * because each branch first `rmSync`s whatever is in the way. `lstatSync` (not `stat`)
+ * inspects the link itself, so a symlink is never mistaken for a regular file, and
+ * `{ throwIfNoEntry: false }` makes a missing path a plain `undefined`, never a throw.
+ */
+export function ensureWrapper(path, scope, pkgPath = packagedSkillPath(), 
+// testability seam: inject a throwing linker to exercise the copy fallback
+symlink = (t, l) => symlinkSync(t, l)) {
+    mkdirSync(dirname(path), { recursive: true });
+    // Symlink branch: user scope only, and only when there is a stable file to point at.
+    if (scope === "user" && pkgPath !== undefined) {
+        const info = lstatSync(path, { throwIfNoEntry: false });
+        if (info?.isSymbolicLink()) {
+            // realpathSync resolves both sides so a correct link (even via a differently
+            // spelled but equivalent path) reads as a no-op.
+            try {
+                if (realpathSync(path) === realpathSync(pkgPath)) {
+                    return { mode: "symlink", changed: false };
+                }
+            }
+            catch {
+                // A dangling link (target gone) cannot be compared; fall through to recreate it.
+            }
+        }
+        try {
+            rmSync(path, { force: true }); // clear a stale link, an old copy, or a dangling link
+            symlink(pkgPath, path);
+            return { mode: "symlink", changed: true };
+        }
+        catch {
+            // Symlinks are unsupported on this filesystem/privilege level; copy instead.
+        }
+    }
+    // Copy branch: project scope, no packaged path, or the symlink above threw.
+    const content = skillMd();
+    const info = lstatSync(path, { throwIfNoEntry: false });
+    if (info?.isFile() && readFileSync(path, "utf8") === content) {
+        return { mode: "copy", changed: false };
+    }
+    rmSync(path, { force: true }); // clear a stale symlink or an out-of-date copy
+    writeFileSync(path, content);
+    return { mode: "copy", changed: true };
+}
+/**
+ * The fallback/migration mechanism: on every `otacon start`, re-assert each
+ * ALREADY-INSTALLED managed wrapper to its desired state (`ensureWrapper`), so an
+ * install done before the symlink era (or one that could not symlink at all)
+ * heals itself the next time the tool runs.
+ *
+ * For a correct symlink this is entirely INERT: `ensureWrapper` no-ops a link that
+ * already resolves to the packaged file, so symlink installs (the common case) cost
+ * nothing and emit no notice. It only does work on real drift:
+ * - a user-scope COPY left by a copy-fallback install (Windows/npx) is promoted to a
+ *   symlink to the packaged file (so future binary upgrades refresh it for free);
+ * - a dangling or wrong-target user symlink is repaired;
+ * - a committed/legacy PROJECT-scope copy whose text drifted is rewritten to the
+ *   current `skillMd()` (still a copy, never a machine-local symlink).
+ *
+ * It NEVER creates a wrapper that does not already exist: this is a heal-what's-there
+ * pass, not an installer. A path absent on disk is skipped, and a regular file is
+ * touched only when it carries `MANAGED_MARKER` (so a foreign SKILL.md a user wrote by
+ * hand is never clobbered); a symlink at one of our locations is always ours to repair.
+ *
+ * Skipped wholesale on a SOURCE run: this checkout's committed `otacon-dev` dogfood
+ * wrapper is generated and guarded by a test, so a source-mode `start` must never
+ * rewrite it (`sourceRun()` true returns `[]` before touching anything).
+ *
+ * Fail-open throughout: each wrapper is converged inside its own try/catch so one
+ * failure cannot abort the rest, and the function itself never throws (a refresh is
+ * best-effort and must never block `start`).
+ */
+export function refreshInstalledWrappers(deps = {}) {
+    const refreshed = [];
+    try {
+        const sourceRun = deps.sourceRun ?? isSourceRun;
+        // Never touch a source checkout's committed dogfood wrapper.
+        if (sourceRun())
+            return [];
+        const pkgPath = "pkgPath" in deps ? deps.pkgPath : packagedSkillPath();
+        const cwd = deps.cwd ?? process.cwd();
+        // The candidate locations to heal: the three user-scope wrappers always, plus the
+        // three project-scope wrappers when cwd sits inside a git repo. Presence is decided
+        // per-candidate below, so listing one here never implies it exists on disk.
+        const candidates = [
+            { path: claudeSkillPath(), scope: "user" },
+            { path: codexSkillPath(), scope: "user" },
+            { path: opencodeSkillPath(), scope: "user" },
+        ];
+        const root = findRepoRoot(cwd);
+        if (root !== undefined) {
+            const project = { kind: "project", root };
+            candidates.push({ path: claudeSkillPath(project), scope: "project" }, { path: codexSkillPath(project), scope: "project" }, { path: opencodeSkillPath(project), scope: "project" });
+        }
+        for (const { path, scope } of candidates) {
+            if (!isManagedWrapper(path))
+                continue; // only heal what is already installed
+            try {
+                const result = ensureWrapper(path, scope, pkgPath);
+                if (result.changed) {
+                    notice(`refreshed otacon skill at ${path} (${result.mode})`);
+                    refreshed.push({ path, mode: result.mode });
+                }
+            }
+            catch {
+                // Best-effort: a single wrapper's failure must not abort the rest, and the
+                // whole pass is fail-open, never blocking start on a refresh.
+            }
+        }
+    }
+    catch {
+        // Belt-and-suspenders: the candidate-list setup (cwd lookup, repo-root probe)
+        // is unlikely to throw, but the whole pass must never throw out of start.
+    }
+    return refreshed;
+}
+/**
+ * Whether `path` already holds an otacon-owned wrapper this pass may re-assert.
+ * A SYMLINK at one of our skill locations is ours (created by a prior symlink
+ * install), so it counts even when the link dangles (`ensureWrapper` repairs it).
+ * A regular FILE counts only when it carries `MANAGED_MARKER`, so a foreign SKILL.md
+ * a user wrote by hand is left alone. Anything else (no entry, a dir) is not present.
+ * `lstatSync` inspects the link itself (a symlink is never read as a file), and
+ * `{ throwIfNoEntry: false }` turns a missing path into `undefined`, never a throw.
+ */
+function isManagedWrapper(path) {
+    const info = lstatSync(path, { throwIfNoEntry: false });
+    if (info === undefined)
+        return false;
+    if (info.isSymbolicLink())
+        return true;
+    if (!info.isFile())
+        return false;
+    try {
+        return readFileSync(path, "utf8").includes(MANAGED_MARKER);
+    }
+    catch {
+        return false;
+    }
+}
+//# sourceMappingURL=wrapper.js.map

package/dist/cli/install/wrapper.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"wrapper.js","sourceRoot":"","sources":["../../../src/cli/install/wrapper.ts"],"names":[],"mappings":"AAAA,iFAAiF;AACjF,mFAAmF;AACnF,mFAAmF;AACnF,oFAAoF;AACpF,oFAAoF;AACpF,uFAAuF;AACvF,oFAAoF;AACpF,+EAA+E;AAE/E,OAAO,EACL,UAAU,EACV,SAAS,EACT,SAAS,EACT,YAAY,EACZ,YAAY,EACZ,MAAM,EACN,WAAW,EACX,aAAa,GACd,MAAM,SAAS,CAAC;AACjB,OAAO,EAAE,OAAO,EAAE,MAAM,WAAW,CAAC;AACpC,OAAO,EAAE,aAAa,EAAE,MAAM,UAAU,CAAC;AACzC,OAAO,EAAE,WAAW,EAAE,MAAM,cAAc,CAAC;AAC3C,OAAO,EAAE,MAAM,EAAE,MAAM,cAAc,CAAC;AACtC,OAAO,EAAE,YAAY,EAAE,MAAM,eAAe,CAAC;AAC7C,OAAO,EAAE,cAAc,EAAE,OAAO,EAAE,MAAM,aAAa,CAAC;AACtD,OAAO,EACL,eAAe,EACf,cAAc,EACd,iBAAiB,GAClB,MAAM,gBAAgB,CAAC;AAExB;;;;;;;;;;;;;GAaG;AACH,MAAM,UAAU,iBAAiB;IAC/B,IAAI,CAAC;QACH,MAAM,IAAI,GAAG,aAAa,CACxB,IAAI,GAAG,CAAC,8BAA8B,EAAE,MAAM,CAAC,IAAI,CAAC,GAAG,CAAC,CACzD,CAAC;QACF,IAAI,CAAC,UAAU,CAAC,IAAI,CAAC;YAAE,OAAO,SAAS,CAAC;QACxC,IAAI,gBAAgB,CAAC,IAAI,CAAC,IAAI,CAAC;YAAE,OAAO,SAAS,CAAC;QAClD,OAAO,IAAI,CAAC;IACd,CAAC;IAAC,MAAM,CAAC;QACP,OAAO,SAAS,CAAC;IACnB,CAAC;AACH,CAAC;AAKD;;;;;;;;;;;;;;;;;;;;;;;GAuBG;AACH,MAAM,UAAU,aAAa,CAC3B,IAAY,EACZ,KAAyB,EACzB,UAA8B,iBAAiB,EAAE;AACjD,2EAA2E;AAC3E,UAAsD,CAAC,CAAC,EAAE,CAAC,EAAE,EAAE,CAAC,WAAW,CAAC,CAAC,EAAE,CAAC,CAAC;IAEjF,SAAS,CAAC,OAAO,CAAC,IAAI,CAAC,EAAE,EAAE,SAAS,EAAE,IAAI,EAAE,CAAC,CAAC;IAE9C,qFAAqF;IACrF,IAAI,KAAK,KAAK,MAAM,IAAI,OAAO,KAAK,SAAS,EAAE,CAAC;QAC9C,MAAM,IAAI,GAAG,SAAS,CAAC,IAAI,EAAE,EAAE,cAAc,EAAE,KAAK,EAAE,CAAC,CAAC;QACxD,IAAI,IAAI,EAAE,cAAc,EAAE,EAAE,CAAC;YAC3B,6EAA6E;YAC7E,iDAAiD;YACjD,IAAI,CAAC;gBACH,IAAI,YAAY,CAAC,IAAI,CAAC,KAAK,YAAY,CAAC,OAAO,CAAC,EAAE,CAAC;oBACjD,OAAO,EAAE,IAAI,EAAE,SAAS,EAAE,OAAO,EAAE,KAAK,EAAE,CAAC;gBAC7C,CAAC;YACH,CAAC;YAAC,MAAM,CAAC;gBACP,iFAAiF;YACnF,CAAC;QACH,CAAC;QACD,IAAI,CAAC;YACH,MAAM,CAAC,IAAI,EAAE,EAAE,KAAK,EAAE,IAAI,EAAE,CAAC,CAAC,CAAC,sDAAsD;YACrF,OAAO,CAAC,OAAO,EAAE,IAAI,CAAC,CAAC;YACvB,OAAO,EAAE,IAAI,EAAE,SAAS,EAAE,OAAO,EAAE,IAAI,EAAE,CAAC;QAC5C,CAAC;QAAC,MAAM,CAAC;YACP,6EAA6E;QAC/E,CAAC;IACH,CAAC;IAED,4EAA4E;IAC5E,MAAM,OAAO,GAAG,OAAO,EAAE,CAAC;IAC1B,MAAM,IAAI,GAAG,SAAS,CAAC,IAAI,EAAE,EAAE,cAAc,EAAE,KAAK,EAAE,CAAC,CAAC;IACxD,IAAI,IAAI,EAAE,MAAM,EAAE,IAAI,YAAY,CAAC,IAAI,EAAE,MAAM,CAAC,KAAK,OAAO,EAAE,CAAC;QAC7D,OAAO,EAAE,IAAI,EAAE,MAAM,EAAE,OAAO,EAAE,KAAK,EAAE,CAAC;IAC1C,CAAC;IACD,MAAM,CAAC,IAAI,EAAE,EAAE,KAAK,EAAE,IAAI,EAAE,CAAC,CAAC,CAAC,+CAA+C;IAC9E,aAAa,CAAC,IAAI,EAAE,OAAO,CAAC,CAAC;IAC7B,OAAO,EAAE,IAAI,EAAE,MAAM,EAAE,OAAO,EAAE,IAAI,EAAE,CAAC;AACzC,CAAC;AAYD;;;;;;;;;;;;;;;;;;;;;;;;;;;GA2BG;AACH,MAAM,UAAU,wBAAwB,CACtC,OAAoB,EAAE;IAEtB,MAAM,SAAS,GAA0C,EAAE,CAAC;IAC5D,IAAI,CAAC;QACH,MAAM,SAAS,GAAG,IAAI,CAAC,SAAS,IAAI,WAAW,CAAC;QAChD,6DAA6D;QAC7D,IAAI,SAAS,EAAE;YAAE,OAAO,EAAE,CAAC;QAE3B,MAAM,OAAO,GAAG,SAAS,IAAI,IAAI,CAAC,CAAC,CAAC,IAAI,CAAC,OAAO,CAAC,CAAC,CAAC,iBAAiB,EAAE,CAAC;QACvE,MAAM,GAAG,GAAG,IAAI,CAAC,GAAG,IAAI,OAAO,CAAC,GAAG,EAAE,CAAC;QAEtC,kFAAkF;QAClF,oFAAoF;QACpF,4EAA4E;QAC5E,MAAM,UAAU,GAAkD;YAChE,EAAE,IAAI,EAAE,eAAe,EAAE,EAAE,KAAK,EAAE,MAAM,EAAE;YAC1C,EAAE,IAAI,EAAE,cAAc,EAAE,EAAE,KAAK,EAAE,MAAM,EAAE;YACzC,EAAE,IAAI,EAAE,iBAAiB,EAAE,EAAE,KAAK,EAAE,MAAM,EAAE;SAC7C,CAAC;QACF,MAAM,IAAI,GAAG,YAAY,CAAC,GAAG,CAAC,CAAC;QAC/B,IAAI,IAAI,KAAK,SAAS,EAAE,CAAC;YACvB,MAAM,OAAO,GAAG,EAAE,IAAI,EAAE,SAAS,EAAE,IAAI,EAAW,CAAC;YACnD,UAAU,CAAC,IAAI,CACb,EAAE,IAAI,EAAE,eAAe,CAAC,OAAO,CAAC,EAAE,KAAK,EAAE,SAAS,EAAE,EACpD,EAAE,IAAI,EAAE,cAAc,CAAC,OAAO,CAAC,EAAE,KAAK,EAAE,SAAS,EAAE,EACnD,EAAE,IAAI,EAAE,iBAAiB,CAAC,OAAO,CAAC,EAAE,KAAK,EAAE,SAAS,EAAE,CACvD,CAAC;QACJ,CAAC;QAED,KAAK,MAAM,EAAE,IAAI,EAAE,KAAK,EAAE,IAAI,UAAU,EAAE,CAAC;YACzC,IAAI,CAAC,gBAAgB,CAAC,IAAI,CAAC;gBAAE,SAAS,CAAC,sCAAsC;YAC7E,IAAI,CAAC;gBACH,MAAM,MAAM,GAAG,aAAa,CAAC,IAAI,EAAE,KAAK,EAAE,OAAO,CAAC,CAAC;gBACnD,IAAI,MAAM,CAAC,OAAO,EAAE,CAAC;oBACnB,MAAM,CAAC,6BAA6B,IAAI,KAAK,MAAM,CAAC,IAAI,GAAG,CAAC,CAAC;oBAC7D,SAAS,CAAC,IAAI,CAAC,EAAE,IAAI,EAAE,IAAI,EAAE,MAAM,CAAC,IAAI,EAAE,CAAC,CAAC;gBAC9C,CAAC;YACH,CAAC;YAAC,MAAM,CAAC;gBACP,2EAA2E;gBAC3E,8DAA8D;YAChE,CAAC;QACH,CAAC;IACH,CAAC;IAAC,MAAM,CAAC;QACP,8EAA8E;QAC9E,0EAA0E;IAC5E,CAAC;IACD,OAAO,SAAS,CAAC;AACnB,CAAC;AAED;;;;;;;;GAQG;AACH,SAAS,gBAAgB,CAAC,IAAY;IACpC,MAAM,IAAI,GAAG,SAAS,CAAC,IAAI,EAAE,EAAE,cAAc,EAAE,KAAK,EAAE,CAAC,CAAC;IACxD,IAAI,IAAI,KAAK,SAAS;QAAE,OAAO,KAAK,CAAC;IACrC,IAAI,IAAI,CAAC,cAAc,EAAE;QAAE,OAAO,IAAI,CAAC;IACvC,IAAI,CAAC,IAAI,CAAC,MAAM,EAAE;QAAE,OAAO,KAAK,CAAC;IACjC,IAAI,CAAC;QACH,OAAO,YAAY,CAAC,IAAI,EAAE,MAAM,CAAC,CAAC,QAAQ,CAAC,cAAc,CAAC,CAAC;IAC7D,CAAC;IAAC,MAAM,CAAC;QACP,OAAO,KAAK,CAAC;IACf,CAAC;AACH,CAAC"}

package/dist/cli/main.js

@@ -1,5 +1,5 @@
 #!/usr/bin/env node
-// otacon CLI dispatch (DESIGN.md §6). stdout carries exactly one JSON line per
+// otacon CLI dispatch (review loop and daemon API). stdout carries exactly one JSON line per
 // invocation; notices go to stderr; exit 0 success / 1 expected failure /
 // 2 usage or internal error (src/cli/output.ts).
 import { answerCommand } from "./commands/answer.js";
@@ -12,13 +12,14 @@ import { implementDoneCommand } from "./commands/implement-done.js";
 import { installCommand } from "./commands/install.js";
 import { openCommand } from "./commands/open.js";
 import { progressCommand } from "./commands/progress.js";
+import { resumeCommand } from "./commands/resume.js";
 import { startCommand } from "./commands/start.js";
 import { statusCommand } from "./commands/status.js";
 import { submitCommand } from "./commands/submit.js";
 import { updateCommand } from "./commands/update.js";
 import { waitCommand } from "./commands/wait.js";
 import { CliError, printJson } from "./output.js";
-const USAGE = "usage: otacon <start|submit|wait|ask|answer|progress|implement-done|status|open|config|clean|install|doctor|expose|update> [options]\n" +
+const USAGE = "usage: otacon <start|submit|wait|ask|answer|progress|implement-done|resume|status|open|config|clean|install|doctor|expose|update> [options]\n" +
     "       otacon config [open]      open the Settings web UI in the browser\n" +
     "       otacon config get <key>   print the merged value of one config key\n" +
     "       otacon update [--check]   update the global install to the latest published version";
@@ -38,6 +39,8 @@ async function dispatch(command, argv) {
             return progressCommand(argv);
         case "implement-done":
             return implementDoneCommand(argv);
+        case "resume":
+            return resumeCommand(argv);
         case "status":
             return statusCommand(argv);
         case "open":

package/dist/cli/main.js.map

@@ -1 +1 @@
-{"version":3,"file":"main.js","sourceRoot":"","sources":["../../src/cli/main.ts"],"names":[],"mappings":";AACA,+EAA+E;AAC/E,0EAA0E;AAC1E,iDAAiD;AAEjD,OAAO,EAAE,aAAa,EAAE,MAAM,sBAAsB,CAAC;AACrD,OAAO,EAAE,UAAU,EAAE,MAAM,mBAAmB,CAAC;AAC/C,OAAO,EAAE,YAAY,EAAE,MAAM,qBAAqB,CAAC;AACnD,OAAO,EAAE,aAAa,EAAE,MAAM,sBAAsB,CAAC;AACrD,OAAO,EAAE,aAAa,EAAE,MAAM,sBAAsB,CAAC;AACrD,OAAO,EAAE,aAAa,EAAE,MAAM,sBAAsB,CAAC;AACrD,OAAO,EAAE,oBAAoB,EAAE,MAAM,8BAA8B,CAAC;AACpE,OAAO,EAAE,cAAc,EAAE,MAAM,uBAAuB,CAAC;AACvD,OAAO,EAAE,WAAW,EAAE,MAAM,oBAAoB,CAAC;AACjD,OAAO,EAAE,eAAe,EAAE,MAAM,wBAAwB,CAAC;AACzD,OAAO,EAAE,YAAY,EAAE,MAAM,qBAAqB,CAAC;AACnD,OAAO,EAAE,aAAa,EAAE,MAAM,sBAAsB,CAAC;AACrD,OAAO,EAAE,aAAa,EAAE,MAAM,sBAAsB,CAAC;AACrD,OAAO,EAAE,aAAa,EAAE,MAAM,sBAAsB,CAAC;AACrD,OAAO,EAAE,WAAW,EAAE,MAAM,oBAAoB,CAAC;AACjD,OAAO,EAAE,QAAQ,EAAE,SAAS,EAAE,MAAM,aAAa,CAAC;AAElD,MAAM,KAAK,GACT,wIAAwI;IACxI,4EAA4E;IAC5E,6EAA6E;IAC7E,4FAA4F,CAAC;AAE/F,KAAK,UAAU,QAAQ,CAAC,OAA2B,EAAE,IAAc;IACjE,QAAQ,OAAO,EAAE,CAAC;QAChB,KAAK,OAAO;YACV,OAAO,YAAY,CAAC,IAAI,CAAC,CAAC;QAC5B,KAAK,QAAQ;YACX,OAAO,aAAa,CAAC,IAAI,CAAC,CAAC;QAC7B,KAAK,MAAM;YACT,OAAO,WAAW,CAAC,IAAI,CAAC,CAAC;QAC3B,KAAK,KAAK;YACR,OAAO,UAAU,CAAC,IAAI,CAAC,CAAC;QAC1B,KAAK,QAAQ;YACX,OAAO,aAAa,CAAC,IAAI,CAAC,CAAC;QAC7B,KAAK,UAAU;YACb,OAAO,eAAe,CAAC,IAAI,CAAC,CAAC;QAC/B,KAAK,gBAAgB;YACnB,OAAO,oBAAoB,CAAC,IAAI,CAAC,CAAC;QACpC,KAAK,QAAQ;YACX,OAAO,aAAa,CAAC,IAAI,CAAC,CAAC;QAC7B,KAAK,MAAM;YACT,OAAO,WAAW,CAAC,IAAI,CAAC,CAAC;QAC3B,KAAK,QAAQ;YACX,OAAO,aAAa,CAAC,IAAI,CAAC,CAAC;QAC7B,KAAK,OAAO;YACV,OAAO,YAAY,CAAC,IAAI,CAAC,CAAC;QAC5B,KAAK,SAAS;YACZ,OAAO,cAAc,CAAC,IAAI,CAAC,CAAC;QAC9B,KAAK,QAAQ;YACX,OAAO,aAAa,CAAC,IAAI,CAAC,CAAC;QAC7B,KAAK,QAAQ;YACX,OAAO,aAAa,CAAC,IAAI,CAAC,CAAC;QAC7B,KAAK,QAAQ;YACX,OAAO,aAAa,CAAC,IAAI,CAAC,CAAC;QAC7B;YACE,MAAM,IAAI,QAAQ,CAAC,SAAS,EAAE,KAAK,EAAE,CAAC,CAAC,CAAC;IAC5C,CAAC;AACH,CAAC;AAED,MAAM,gBAAgB,GAAG,CAAC,KAAc,EAAkB,EAAE,CAC1D,KAAK,YAAY,KAAK;IACtB,CAAE,KAA+B,CAAC,IAAI,EAAE,UAAU,CAAC,gBAAgB,CAAC,IAAI,KAAK,CAAC,CAAC;AAEjF,yEAAyE;AACzE,SAAS,IAAI,CAAC,IAAY;IACxB,OAAO,CAAC,MAAM,CAAC,KAAK,CAAC,EAAE,EAAE,GAAG,EAAE,CAAC,OAAO,CAAC,IAAI,CAAC,IAAI,CAAC,CAAC,CAAC;AACrD,CAAC;AAED,QAAQ,CAAC,OAAO,CAAC,IAAI,CAAC,CAAC,CAAC,EAAE,OAAO,CAAC,IAAI,CAAC,KAAK,CAAC,CAAC,CAAC,CAAC,CAAC,IAAI,CACnD,CAAC,IAAI,EAAE,EAAE,CAAC,IAAI,CAAC,IAAI,CAAC,EACpB,CAAC,KAAc,EAAE,EAAE;IACjB,IAAI,KAAK,YAAY,QAAQ,EAAE,CAAC;QAC9B,SAAS,CAAC,KAAK,CAAC,SAAS,EAAE,CAAC,CAAC;QAC7B,IAAI,CAAC,KAAK,CAAC,QAAQ,CAAC,CAAC;IACvB,CAAC;SAAM,IAAI,gBAAgB,CAAC,KAAK,CAAC,EAAE,CAAC;QACnC,SAAS,CAAC,EAAE,EAAE,EAAE,KAAK,EAAE,KAAK,EAAE,EAAE,IAAI,EAAE,SAAS,EAAE,OAAO,EAAE,GAAG,KAAK,CAAC,OAAO,KAAK,KAAK,EAAE,EAAE,EAAE,CAAC,CAAC;QAC5F,IAAI,CAAC,CAAC,CAAC,CAAC;IACV,CAAC;SAAM,CAAC;QACN,MAAM,OAAO,GAAG,KAAK,YAAY,KAAK,CAAC,CAAC,CAAC,KAAK,CAAC,OAAO,CAAC,CAAC,CAAC,MAAM,CAAC,KAAK,CAAC,CAAC;QACvE,SAAS,CAAC,EAAE,EAAE,EAAE,KAAK,EAAE,KAAK,EAAE,EAAE,IAAI,EAAE,YAAY,EAAE,OAAO,EAAE,EAAE,CAAC,CAAC;QACjE,IAAI,CAAC,CAAC,CAAC,CAAC;IACV,CAAC;AACH,CAAC,CACF,CAAC"}
+{"version":3,"file":"main.js","sourceRoot":"","sources":["../../src/cli/main.ts"],"names":[],"mappings":";AACA,6FAA6F;AAC7F,0EAA0E;AAC1E,iDAAiD;AAEjD,OAAO,EAAE,aAAa,EAAE,MAAM,sBAAsB,CAAC;AACrD,OAAO,EAAE,UAAU,EAAE,MAAM,mBAAmB,CAAC;AAC/C,OAAO,EAAE,YAAY,EAAE,MAAM,qBAAqB,CAAC;AACnD,OAAO,EAAE,aAAa,EAAE,MAAM,sBAAsB,CAAC;AACrD,OAAO,EAAE,aAAa,EAAE,MAAM,sBAAsB,CAAC;AACrD,OAAO,EAAE,aAAa,EAAE,MAAM,sBAAsB,CAAC;AACrD,OAAO,EAAE,oBAAoB,EAAE,MAAM,8BAA8B,CAAC;AACpE,OAAO,EAAE,cAAc,EAAE,MAAM,uBAAuB,CAAC;AACvD,OAAO,EAAE,WAAW,EAAE,MAAM,oBAAoB,CAAC;AACjD,OAAO,EAAE,eAAe,EAAE,MAAM,wBAAwB,CAAC;AACzD,OAAO,EAAE,aAAa,EAAE,MAAM,sBAAsB,CAAC;AACrD,OAAO,EAAE,YAAY,EAAE,MAAM,qBAAqB,CAAC;AACnD,OAAO,EAAE,aAAa,EAAE,MAAM,sBAAsB,CAAC;AACrD,OAAO,EAAE,aAAa,EAAE,MAAM,sBAAsB,CAAC;AACrD,OAAO,EAAE,aAAa,EAAE,MAAM,sBAAsB,CAAC;AACrD,OAAO,EAAE,WAAW,EAAE,MAAM,oBAAoB,CAAC;AACjD,OAAO,EAAE,QAAQ,EAAE,SAAS,EAAE,MAAM,aAAa,CAAC;AAElD,MAAM,KAAK,GACT,+IAA+I;IAC/I,4EAA4E;IAC5E,6EAA6E;IAC7E,4FAA4F,CAAC;AAE/F,KAAK,UAAU,QAAQ,CAAC,OAA2B,EAAE,IAAc;IACjE,QAAQ,OAAO,EAAE,CAAC;QAChB,KAAK,OAAO;YACV,OAAO,YAAY,CAAC,IAAI,CAAC,CAAC;QAC5B,KAAK,QAAQ;YACX,OAAO,aAAa,CAAC,IAAI,CAAC,CAAC;QAC7B,KAAK,MAAM;YACT,OAAO,WAAW,CAAC,IAAI,CAAC,CAAC;QAC3B,KAAK,KAAK;YACR,OAAO,UAAU,CAAC,IAAI,CAAC,CAAC;QAC1B,KAAK,QAAQ;YACX,OAAO,aAAa,CAAC,IAAI,CAAC,CAAC;QAC7B,KAAK,UAAU;YACb,OAAO,eAAe,CAAC,IAAI,CAAC,CAAC;QAC/B,KAAK,gBAAgB;YACnB,OAAO,oBAAoB,CAAC,IAAI,CAAC,CAAC;QACpC,KAAK,QAAQ;YACX,OAAO,aAAa,CAAC,IAAI,CAAC,CAAC;QAC7B,KAAK,QAAQ;YACX,OAAO,aAAa,CAAC,IAAI,CAAC,CAAC;QAC7B,KAAK,MAAM;YACT,OAAO,WAAW,CAAC,IAAI,CAAC,CAAC;QAC3B,KAAK,QAAQ;YACX,OAAO,aAAa,CAAC,IAAI,CAAC,CAAC;QAC7B,KAAK,OAAO;YACV,OAAO,YAAY,CAAC,IAAI,CAAC,CAAC;QAC5B,KAAK,SAAS;YACZ,OAAO,cAAc,CAAC,IAAI,CAAC,CAAC;QAC9B,KAAK,QAAQ;YACX,OAAO,aAAa,CAAC,IAAI,CAAC,CAAC;QAC7B,KAAK,QAAQ;YACX,OAAO,aAAa,CAAC,IAAI,CAAC,CAAC;QAC7B,KAAK,QAAQ;YACX,OAAO,aAAa,CAAC,IAAI,CAAC,CAAC;QAC7B;YACE,MAAM,IAAI,QAAQ,CAAC,SAAS,EAAE,KAAK,EAAE,CAAC,CAAC,CAAC;IAC5C,CAAC;AACH,CAAC;AAED,MAAM,gBAAgB,GAAG,CAAC,KAAc,EAAkB,EAAE,CAC1D,KAAK,YAAY,KAAK;IACtB,CAAE,KAA+B,CAAC,IAAI,EAAE,UAAU,CAAC,gBAAgB,CAAC,IAAI,KAAK,CAAC,CAAC;AAEjF,yEAAyE;AACzE,SAAS,IAAI,CAAC,IAAY;IACxB,OAAO,CAAC,MAAM,CAAC,KAAK,CAAC,EAAE,EAAE,GAAG,EAAE,CAAC,OAAO,CAAC,IAAI,CAAC,IAAI,CAAC,CAAC,CAAC;AACrD,CAAC;AAED,QAAQ,CAAC,OAAO,CAAC,IAAI,CAAC,CAAC,CAAC,EAAE,OAAO,CAAC,IAAI,CAAC,KAAK,CAAC,CAAC,CAAC,CAAC,CAAC,IAAI,CACnD,CAAC,IAAI,EAAE,EAAE,CAAC,IAAI,CAAC,IAAI,CAAC,EACpB,CAAC,KAAc,EAAE,EAAE;IACjB,IAAI,KAAK,YAAY,QAAQ,EAAE,CAAC;QAC9B,SAAS,CAAC,KAAK,CAAC,SAAS,EAAE,CAAC,CAAC;QAC7B,IAAI,CAAC,KAAK,CAAC,QAAQ,CAAC,CAAC;IACvB,CAAC;SAAM,IAAI,gBAAgB,CAAC,KAAK,CAAC,EAAE,CAAC;QACnC,SAAS,CAAC,EAAE,EAAE,EAAE,KAAK,EAAE,KAAK,EAAE,EAAE,IAAI,EAAE,SAAS,EAAE,OAAO,EAAE,GAAG,KAAK,CAAC,OAAO,KAAK,KAAK,EAAE,EAAE,EAAE,CAAC,CAAC;QAC5F,IAAI,CAAC,CAAC,CAAC,CAAC;IACV,CAAC;SAAM,CAAC;QACN,MAAM,OAAO,GAAG,KAAK,YAAY,KAAK,CAAC,CAAC,CAAC,KAAK,CAAC,OAAO,CAAC,CAAC,CAAC,MAAM,CAAC,KAAK,CAAC,CAAC;QACvE,SAAS,CAAC,EAAE,EAAE,EAAE,KAAK,EAAE,KAAK,EAAE,EAAE,IAAI,EAAE,YAAY,EAAE,OAAO,EAAE,EAAE,CAAC,CAAC;QACjE,IAAI,CAAC,CAAC,CAAC,CAAC;IACV,CAAC;AACH,CAAC,CACF,CAAC"}

package/dist/cli/output.js

@@ -1,8 +1,8 @@
-// JSON-only stdout discipline for the otacon CLI (DESIGN.md §6): every command
+// JSON-only stdout discipline for the otacon CLI (review loop and daemon API): every command
 // prints exactly one JSON line on stdout — the machine-readable result a coding
 // agent parses as its Bash tool output — and human-facing notices go to stderr.
 //
-// Exit codes: 0 success (including {"event":"timeout"}, DESIGN.md §6), 1
+// Exit codes: 0 success (including {"event":"timeout"}, review loop and daemon API), 1
 // expected failure the agent can act on (lint reject, ambiguous session, port
 // conflict), 2 usage or internal error.
 /** A machine-readable command failure; main.ts prints the payload and exits. */