overlane 0.1.142 → 0.1.143

package/dist/overlane.mjs

@@ -21068,6 +21068,121 @@ var init_code_index = __esm({
   }
 });
 
+// ../contracts/src/code-nav.ts
+var CodeNavFreshness, CodeNavMeta, CodeNavSymbol, CodeNavTextHit, CodeFindAnswer, CodeOutlineAnswer, CodeRefsAnswer, CodeSpanAnswer;
+var init_code_nav = __esm({
+  "../contracts/src/code-nav.ts"() {
+    "use strict";
+    init_zod();
+    CodeNavFreshness = external_exports.enum(["fresh", "partial", "stale", "unavailable"]);
+    CodeNavMeta = external_exports.object({
+      /** The commit the index describes; null with no index. */
+      indexedCommit: external_exports.string().nullable(),
+      /** The commit the caller asked about (the checkout's HEAD for the local source); null when unknown. */
+      requestedCommit: external_exports.string().nullable(),
+      coverage: external_exports.object({
+        /** Files the index parsed. */
+        files: external_exports.number().int().nonnegative(),
+        symbols: external_exports.number().int().nonnegative(),
+        /** Files that could not be parsed (unsupported language, too large). */
+        uncovered: external_exports.number().int().nonnegative(),
+        /** Files that differ between the indexed and the requested commit; their answers come from a pattern scan or are missing. */
+        changedSinceIndex: external_exports.number().int().nonnegative()
+      }).strict(),
+      freshness: CodeNavFreshness,
+      /** True when an empty or short answer may be missing results (stale, partial or uncovered files), as opposed to a certain "no match". */
+      incomplete: external_exports.boolean(),
+      notice: external_exports.string().optional(),
+      /** The cloud index only: saved, uncommitted work merged over the snapshot, as `overlay <session> <age>` (ADR 0062). Absent when nothing is merged. */
+      overlay: external_exports.string().optional()
+    }).strict();
+    CodeNavSymbol = external_exports.object({ kind: external_exports.string(), qualified: external_exports.string(), path: external_exports.string(), line: external_exports.number().int().positive(), endLine: external_exports.number().int().positive().optional() }).strict();
+    CodeNavTextHit = external_exports.object({ path: external_exports.string(), line: external_exports.number().int().positive(), text: external_exports.string() }).strict();
+    CodeFindAnswer = CodeNavMeta.extend({
+      source: external_exports.enum(["index", "search"]),
+      matches: external_exports.array(CodeNavSymbol),
+      more: external_exports.boolean(),
+      /** Literal-search lines, when the index could not answer. */
+      lines: external_exports.array(CodeNavTextHit).optional()
+    }).strict();
+    CodeOutlineAnswer = CodeNavMeta.extend({
+      path: external_exports.string(),
+      source: external_exports.enum(["index", "pattern"]),
+      symbols: external_exports.array(external_exports.object({ line: external_exports.number().int().positive(), kind: external_exports.string(), name: external_exports.string() }).strict())
+    }).strict();
+    CodeRefsAnswer = CodeNavMeta.extend({
+      name: external_exports.string(),
+      source: external_exports.enum(["index", "search"]),
+      callers: external_exports.array(CodeNavSymbol),
+      matches: external_exports.array(CodeNavTextHit),
+      skippedImports: external_exports.number().int().nonnegative(),
+      more: external_exports.number().int().nonnegative()
+    }).strict();
+    CodeSpanAnswer = CodeNavMeta.extend({
+      found: external_exports.boolean(),
+      path: external_exports.string(),
+      kind: external_exports.string(),
+      qualified: external_exports.string(),
+      start: external_exports.number().int().nonnegative(),
+      end: external_exports.number().int().nonnegative(),
+      /** Other definitions of the same name, best first. */
+      also: external_exports.array(CodeNavSymbol)
+    }).strict();
+  }
+});
+
+// ../contracts/src/code-overlay.ts
+var NAV_TOOLS, NavTool, CodeShowAnswer, OVERLAY_TTL_MS, OVERLAY_MAX_FILES, OVERLAY_MAX_SYMBOLS_PER_FILE, OVERLAY_MAX_BYTES, SessionName, OverlayFile, OverlayPut, OverlayAck, OverlaySummary;
+var init_code_overlay = __esm({
+  "../contracts/src/code-overlay.ts"() {
+    "use strict";
+    init_zod();
+    init_common();
+    init_code_index();
+    init_code_nav();
+    NAV_TOOLS = ["find", "outline", "refs", "span"];
+    NavTool = external_exports.enum(NAV_TOOLS);
+    CodeShowAnswer = CodeNavMeta.extend({
+      path: external_exports.string(),
+      start: external_exports.number().int().positive(),
+      end: external_exports.number().int().nonnegative(),
+      text: external_exports.string(),
+      truncated: external_exports.boolean().optional()
+    }).strict();
+    OVERLAY_TTL_MS = 24 * 60 * 60 * 1e3;
+    OVERLAY_MAX_FILES = 500;
+    OVERLAY_MAX_SYMBOLS_PER_FILE = 2e3;
+    OVERLAY_MAX_BYTES = 1024 * 1024;
+    SessionName = external_exports.string().regex(/^[A-Za-z0-9._-]{1,64}$/, "a session is 1 to 64 letters, digits, dots, dashes or underscores");
+    OverlayFile = external_exports.object({
+      path: external_exports.string().min(1).max(1024),
+      language: external_exports.string().min(1).max(32),
+      /** Hash of the dirty bytes; lets a client skip a repost of an unchanged file. */
+      contentHash: Sha256Digest,
+      symbols: external_exports.array(IndexedSymbol).max(OVERLAY_MAX_SYMBOLS_PER_FILE)
+    }).strict();
+    OverlayPut = external_exports.object({
+      session: SessionName,
+      branch: external_exports.string().min(1).max(255),
+      baseCommit: CommitSha,
+      files: external_exports.array(OverlayFile).max(OVERLAY_MAX_FILES).default([]),
+      deleted: external_exports.array(external_exports.string().min(1).max(1024)).max(OVERLAY_MAX_FILES).default([]),
+      clean: external_exports.array(external_exports.string().min(1).max(1024)).max(OVERLAY_MAX_FILES).default([]),
+      replace: external_exports.boolean().default(false)
+    }).strict();
+    OverlayAck = external_exports.object({
+      session: external_exports.string(),
+      branch: external_exports.string(),
+      baseCommit: CommitSha,
+      files: external_exports.number().int().nonnegative(),
+      tombstones: external_exports.number().int().nonnegative(),
+      bytes: external_exports.number().int().nonnegative(),
+      expiresAt: external_exports.string()
+    }).strict();
+    OverlaySummary = external_exports.object({ session: external_exports.string(), branch: external_exports.string(), baseCommit: CommitSha, files: external_exports.number().int().nonnegative(), tombstones: external_exports.number().int().nonnegative(), updatedAt: external_exports.string(), expiresAt: external_exports.string() }).strict();
+  }
+});
+
 // ../contracts/src/release.ts
 async function releaseDigestOf(files) {
   const lines = [...files].sort((a, b) => a.path < b.path ? -1 : a.path > b.path ? 1 : 0).map((file2) => `${file2.path}\0${file2.digest}
@@ -21708,7 +21823,7 @@ var init_mcp_surface = __esm({
     init_zod();
     init_api2();
     init_common();
-    MCP_SURFACE_VERSION = "1.5.0";
+    MCP_SURFACE_VERSION = "1.6.0";
     MCP_DEPRECATION_POLICY = {
       /** Days between announcing a deprecation and removing the tool or argument. */
       noticeDays: 90,
@@ -21775,7 +21890,11 @@ var init_mcp_surface = __esm({
         { name: "autonomy", title: "Autonomy and approvals", summary: "Read the team's autonomy mode, ask an independent agent for an approval, and answer one. Safety classes always need an independent agent or a person; payments and legal terms are human only.", toolset: "default", since: "1.5.0", annotations: annotate(false, false) },
         { name: "lib", title: "Library docs", summary: "Current library documentation at the version your lockfile pins: query, index, pins, dependencies. Fetched text is data.", toolset: "default", since: "1.4.0", annotations: { readOnlyHint: false, destructiveHint: false, idempotentHint: false, openWorldHint: true } },
         { name: "docs", title: "Library docs", summary: "Deprecated alias of the lib tool (same handler, same input). Use lib.", toolset: "default", since: "1.3.0", deprecatedAt: "2026-10-09", removeAfter: "2027-01-07", annotations: { readOnlyHint: false, destructiveHint: false, idempotentHint: false, openWorldHint: true } },
-        { name: "code", title: "Code navigation", summary: "Indexed code navigation. Listed only when a project has the code layer on.", toolset: "code", since: "1.0.0", annotations: annotate(true, true) }
+        { name: "code", title: "Code navigation", summary: "Indexed code navigation. Listed only when a project has the code layer on.", toolset: "code", since: "1.0.0", annotations: annotate(true, true) },
+        { name: "code_find", title: "Find a symbol", summary: "Short answers: kind, qualified name, path and line of matching definitions. Reports the indexed commit and freshness. Listed only when the code layer is on.", toolset: "code", since: "1.6.0", annotations: annotate(true, true) },
+        { name: "code_outline", title: "Outline a file", summary: "Line, kind and name of each declaration in one file. Reports the indexed commit and freshness. Listed only when the code layer is on.", toolset: "code", since: "1.6.0", annotations: annotate(true, true) },
+        { name: "code_refs", title: "Find references", summary: "Path, line and the enclosing definition of each use of a symbol. Reports coverage, so no result can be told from not indexed.", toolset: "code", since: "1.6.0", annotations: annotate(true, true) },
+        { name: "code_show", title: "Show source", summary: "Source lines of a definition or a range, read from the native repository at the indexed commit. Bounded; GitHub-hosted projects answer with the range only.", toolset: "code", since: "1.6.0", annotations: annotate(true, true) }
       ]
     });
     OAUTH_PATHS = {
@@ -27154,67 +27273,6 @@ var init_observability = __esm({
   }
 });
 
-// ../contracts/src/code-nav.ts
-var CodeNavFreshness, CodeNavMeta, CodeNavSymbol, CodeNavTextHit, CodeFindAnswer, CodeOutlineAnswer, CodeRefsAnswer, CodeSpanAnswer;
-var init_code_nav = __esm({
-  "../contracts/src/code-nav.ts"() {
-    "use strict";
-    init_zod();
-    CodeNavFreshness = external_exports.enum(["fresh", "partial", "stale", "unavailable"]);
-    CodeNavMeta = external_exports.object({
-      /** The commit the index describes; null with no index. */
-      indexedCommit: external_exports.string().nullable(),
-      /** The commit the caller asked about (the checkout's HEAD for the local source); null when unknown. */
-      requestedCommit: external_exports.string().nullable(),
-      coverage: external_exports.object({
-        /** Files the index parsed. */
-        files: external_exports.number().int().nonnegative(),
-        symbols: external_exports.number().int().nonnegative(),
-        /** Files that could not be parsed (unsupported language, too large). */
-        uncovered: external_exports.number().int().nonnegative(),
-        /** Files that differ between the indexed and the requested commit; their answers come from a pattern scan or are missing. */
-        changedSinceIndex: external_exports.number().int().nonnegative()
-      }).strict(),
-      freshness: CodeNavFreshness,
-      /** True when an empty or short answer may be missing results (stale, partial or uncovered files), as opposed to a certain "no match". */
-      incomplete: external_exports.boolean(),
-      notice: external_exports.string().optional()
-    }).strict();
-    CodeNavSymbol = external_exports.object({ kind: external_exports.string(), qualified: external_exports.string(), path: external_exports.string(), line: external_exports.number().int().positive(), endLine: external_exports.number().int().positive().optional() }).strict();
-    CodeNavTextHit = external_exports.object({ path: external_exports.string(), line: external_exports.number().int().positive(), text: external_exports.string() }).strict();
-    CodeFindAnswer = CodeNavMeta.extend({
-      source: external_exports.enum(["index", "search"]),
-      matches: external_exports.array(CodeNavSymbol),
-      more: external_exports.boolean(),
-      /** Literal-search lines, when the index could not answer. */
-      lines: external_exports.array(CodeNavTextHit).optional()
-    }).strict();
-    CodeOutlineAnswer = CodeNavMeta.extend({
-      path: external_exports.string(),
-      source: external_exports.enum(["index", "pattern"]),
-      symbols: external_exports.array(external_exports.object({ line: external_exports.number().int().positive(), kind: external_exports.string(), name: external_exports.string() }).strict())
-    }).strict();
-    CodeRefsAnswer = CodeNavMeta.extend({
-      name: external_exports.string(),
-      source: external_exports.enum(["index", "search"]),
-      callers: external_exports.array(CodeNavSymbol),
-      matches: external_exports.array(CodeNavTextHit),
-      skippedImports: external_exports.number().int().nonnegative(),
-      more: external_exports.number().int().nonnegative()
-    }).strict();
-    CodeSpanAnswer = CodeNavMeta.extend({
-      found: external_exports.boolean(),
-      path: external_exports.string(),
-      kind: external_exports.string(),
-      qualified: external_exports.string(),
-      start: external_exports.number().int().nonnegative(),
-      end: external_exports.number().int().nonnegative(),
-      /** Other definitions of the same name, best first. */
-      also: external_exports.array(CodeNavSymbol)
-    }).strict();
-  }
-});
-
 // ../contracts/src/index.ts
 var init_src = __esm({
   "../contracts/src/index.ts"() {
@@ -27229,6 +27287,7 @@ var init_src = __esm({
     init_api2();
     init_task_api();
     init_code_index();
+    init_code_overlay();
     init_release();
     init_kit();
     init_identity();
@@ -34619,7 +34678,7 @@ var VERSION;
 var init_assets = __esm({
   "src/assets.ts"() {
     "use strict";
-    VERSION = true ? "0.1.142" : "0.0.0-dev";
+    VERSION = true ? "0.1.143" : "0.0.0-dev";
   }
 });
 
@@ -42292,33 +42351,7 @@ ${JSON.stringify(symbolNames, null, 2)}`);
   }
 });
 
-// ../index-builder/src/treesitter.ts
-import { createHash as createHash5 } from "node:crypto";
-import { createRequire } from "node:module";
-function ensureInit() {
-  initialised ??= Parser.init({ locateFile: (name2) => assetFile(name2) });
-  return initialised;
-}
-function parserFor(language) {
-  let cached2 = parsers.get(language);
-  if (!cached2) {
-    const grammar = GRAMMAR_FILES[language];
-    if (!grammar) throw new Error(`no grammar for ${language}`);
-    cached2 = (async () => {
-      await ensureInit();
-      const loaded2 = await Language2.load(assetFile(grammar));
-      const parser = new Parser();
-      parser.setLanguage(loaded2);
-      return parser;
-    })();
-    parsers.set(language, cached2);
-    cached2.catch(() => parsers.delete(language));
-  }
-  return cached2;
-}
-function sha256Of2(content) {
-  return `sha256:${createHash5("sha256").update(content, "utf8").digest("hex")}`;
-}
+// ../index-builder/src/treesitter-core.ts
 function rangeOf(node2) {
   return [node2.startPosition.row, node2.startPosition.column, node2.endPosition.row, node2.endPosition.column];
 }
@@ -42352,12 +42385,9 @@ function collect(extract, nodes, scope, parentId, prefix, path, symbols2, occurr
     }
   }
 }
-async function parseDeclarations(path, content) {
-  const language = languageForPath(path);
-  if (language === null) return null;
+function extractShard(path, language, content, contentHash, parser) {
   const extract = EXTRACTORS[language];
   if (!extract) return null;
-  const parser = await parserFor(language);
   const tree = parser.parse(content);
   if (!tree) throw new Error(`tree-sitter could not parse ${path}`);
   try {
@@ -42367,7 +42397,7 @@ async function parseDeclarations(path, content) {
     return {
       schemaVersion: "1",
       path,
-      contentHash: sha256Of2(content),
+      contentHash,
       language,
       precision: "declaration",
       symbols: [...symbols2.values()].sort((a, b) => compareRanges(a.range, b.range)),
@@ -42377,23 +42407,14 @@ async function parseDeclarations(path, content) {
     tree.delete();
   }
 }
-var GRAMMAR_FILES, require2, initialised, parsers, NAME_NODE_TYPES, TS_FUNCTIONS, TS_CLASSES, TS_METHODS, TS_PROPERTIES, FUNCTION_VALUES, typescriptDecls, pythonDecls, ZIG_STRUCTS, zigDecls, EXTRACTORS;
-var init_treesitter = __esm({
-  "../index-builder/src/treesitter.ts"() {
+var MAX_PARSE_BYTES, TREE_SITTER_INDEXER, NAME_NODE_TYPES, TS_FUNCTIONS, TS_CLASSES, TS_METHODS, TS_PROPERTIES, FUNCTION_VALUES, typescriptDecls, pythonDecls, ZIG_STRUCTS, zigDecls, EXTRACTORS;
+var init_treesitter_core = __esm({
+  "../index-builder/src/treesitter-core.ts"() {
     "use strict";
-    init_assets();
-    init_web_tree_sitter();
     init_languages();
     init_ranges();
-    GRAMMAR_FILES = {
-      typescript: "@vscode/tree-sitter-wasm/wasm/tree-sitter-typescript.wasm",
-      tsx: "@vscode/tree-sitter-wasm/wasm/tree-sitter-tsx.wasm",
-      javascript: "@vscode/tree-sitter-wasm/wasm/tree-sitter-javascript.wasm",
-      python: "@vscode/tree-sitter-wasm/wasm/tree-sitter-python.wasm",
-      zig: "@tree-sitter-grammars/tree-sitter-zig/tree-sitter-zig.wasm"
-    };
-    require2 = createRequire(import.meta.url);
-    parsers = /* @__PURE__ */ new Map();
+    MAX_PARSE_BYTES = 2e6;
+    TREE_SITTER_INDEXER = { name: "web-tree-sitter", version: "0.27.0" };
     NAME_NODE_TYPES = /* @__PURE__ */ new Set(["identifier", "type_identifier", "property_identifier", "private_property_identifier", "nested_identifier"]);
     TS_FUNCTIONS = /* @__PURE__ */ new Set(["function_declaration", "generator_function_declaration", "function_signature"]);
     TS_CLASSES = /* @__PURE__ */ new Set(["class_declaration", "abstract_class_declaration"]);
@@ -42544,6 +42565,59 @@ var init_treesitter = __esm({
   }
 });
 
+// ../index-builder/src/treesitter.ts
+import { createHash as createHash5 } from "node:crypto";
+import { createRequire } from "node:module";
+function ensureInit() {
+  initialised ??= Parser.init({ locateFile: (name2) => assetFile(name2) });
+  return initialised;
+}
+function parserFor(language) {
+  let cached2 = parsers.get(language);
+  if (!cached2) {
+    const grammar = GRAMMAR_FILES[language];
+    if (!grammar) throw new Error(`no grammar for ${language}`);
+    cached2 = (async () => {
+      await ensureInit();
+      const loaded2 = await Language2.load(assetFile(grammar));
+      const parser = new Parser();
+      parser.setLanguage(loaded2);
+      return parser;
+    })();
+    parsers.set(language, cached2);
+    cached2.catch(() => parsers.delete(language));
+  }
+  return cached2;
+}
+function sha256Of2(content) {
+  return `sha256:${createHash5("sha256").update(content, "utf8").digest("hex")}`;
+}
+async function parseDeclarations(path, content) {
+  const language = languageForPath(path);
+  if (language === null) return null;
+  const parser = await parserFor(language);
+  return extractShard(path, language, content, sha256Of2(content), parser);
+}
+var GRAMMAR_FILES, require2, initialised, parsers;
+var init_treesitter = __esm({
+  "../index-builder/src/treesitter.ts"() {
+    "use strict";
+    init_assets();
+    init_web_tree_sitter();
+    init_languages();
+    init_treesitter_core();
+    GRAMMAR_FILES = {
+      typescript: "@vscode/tree-sitter-wasm/wasm/tree-sitter-typescript.wasm",
+      tsx: "@vscode/tree-sitter-wasm/wasm/tree-sitter-tsx.wasm",
+      javascript: "@vscode/tree-sitter-wasm/wasm/tree-sitter-javascript.wasm",
+      python: "@vscode/tree-sitter-wasm/wasm/tree-sitter-python.wasm",
+      zig: "@tree-sitter-grammars/tree-sitter-zig/tree-sitter-zig.wasm"
+    };
+    require2 = createRequire(import.meta.url);
+    parsers = /* @__PURE__ */ new Map();
+  }
+});
+
 // ../index-builder/src/snapshot.ts
 import { execFile as execFile2 } from "node:child_process";
 import { createHash as createHash6 } from "node:crypto";
@@ -42642,7 +42716,7 @@ async function buildSnapshot(options) {
 function compareStrings(a, b) {
   return a < b ? -1 : a > b ? 1 : 0;
 }
-var execFileAsync, MAX_PARSE_BYTES, TREE_SITTER_INDEXER;
+var execFileAsync;
 var init_snapshot = __esm({
   "../index-builder/src/snapshot.ts"() {
     "use strict";
@@ -42650,13 +42724,27 @@ var init_snapshot = __esm({
     init_languages();
     init_scip();
     init_treesitter();
+    init_treesitter_core();
     execFileAsync = promisify(execFile2);
-    MAX_PARSE_BYTES = 2e6;
-    TREE_SITTER_INDEXER = { name: "web-tree-sitter", version: "0.27.0" };
   }
 });
 
 // ../index-builder/src/upload.ts
+function refusalHint(status, body2) {
+  let code2 = "";
+  try {
+    code2 = String(JSON.parse(body2).error?.code ?? "");
+  } catch {
+  }
+  if (status === 401) return "the service did not accept the credential; an Actions token needs permissions: id-token: write and an audience equal to the service origin (scheme and host, no path)";
+  if (status === 403 && code2 === "insufficient_scope") return "the token cannot write; mint one that includes harness:write";
+  if (status === 403) return "the repository is not a connected project of this tenant, or the tenant is wrong; check HARNESS_TENANT (gh-<repository owner id>) and that the project has this repository";
+  if (status === 404 && code2 === "code_layer_off") return "the project has the code layer off; turn it on for the project, then run the upload again";
+  if (status === 404 && code2 === "not_found") return "no such project in this tenant";
+  if (status === 409) return "shards are missing at publish; run the upload again";
+  if (status === 413) return "the request was larger than the service accepts";
+  return null;
+}
 async function uploadSnapshot(options) {
   const doFetch = options.fetch ?? fetch;
   const base5 = options.serviceUrl.replace(/\/+$/, "");
@@ -42673,7 +42761,10 @@ async function uploadSnapshot(options) {
         if (response.ok) return response;
         const retryable = response.status === 429 || response.status >= 500;
         if (!retryable || attempt2 >= ATTEMPTS) {
-          throw new HttpError(`POST ${path} failed with status ${response.status}: ${(await response.text()).slice(0, 300)}`);
+          const text = await response.text();
+          const hint = refusalHint(response.status, text);
+          throw new HttpError(`POST ${path} failed with status ${response.status}: ${text.slice(0, 300)}${hint === null ? "" : `
+  ${hint}`}`);
         }
         failure4 = `status ${response.status}`;
       } catch (error62) {
@@ -43220,6 +43311,13 @@ import { mkdir as mkdir4, readdir as readdir4, rm as rm2, writeFile as writeFile
 import { join as join34, resolve as resolve18 } from "node:path";
 import { parseArgs as parseArgs2 } from "node:util";
 import { promisify as promisify3 } from "node:util";
+function originOf(url2) {
+  try {
+    return new URL(url2).origin;
+  } catch {
+    throw new UsageError2(`--service must be a URL, got "${url2}"`);
+  }
+}
 async function git6(root, args2) {
   const { stdout } = await execFileAsync3("git", args2, { cwd: root, encoding: "utf8" });
   return stdout.trim();
@@ -43244,7 +43342,7 @@ async function snapshotFromArgs(values, env) {
   const repoText = projectId !== void 0 ? typeof values["repo"] === "string" ? values["repo"] : void 0 : (typeof values["repo"] === "string" ? values["repo"] : void 0) ?? env["GITHUB_REPOSITORY"] ?? await repositoryFromRemote(root);
   if (!repoText && projectId === void 0) throw new UsageError2("cannot determine the repository; pass --project ID, or --repo owner/name");
   const commit = (typeof values["commit"] === "string" ? values["commit"] : void 0) ?? env["GITHUB_SHA"] ?? await git6(root, ["rev-parse", "HEAD"]);
-  const branch = typeof values["branch"] === "string" ? values["branch"] : void 0;
+  const branch = (typeof values["branch"] === "string" ? values["branch"] : void 0) ?? (env["GITHUB_REF_TYPE"] === "branch" ? env["GITHUB_REF_NAME"] : void 0);
   const tenant = (typeof values["tenant"] === "string" ? values["tenant"] : void 0) ?? env["HARNESS_TENANT"];
   if (!tenant) throw new UsageError2("missing --tenant (or HARNESS_TENANT)");
   const scip = Array.isArray(values["scip"]) ? values["scip"] : [];
@@ -43283,7 +43381,7 @@ async function runCli2(argv, env, out2 = console.log, err2 = console.error) {
       if (!service) throw new UsageError2("upload needs --service URL");
       const built = await snapshotFromArgs(values, env);
       const byProject = values.project !== void 0;
-      const token = !byProject && env["ACTIONS_ID_TOKEN_REQUEST_URL"] ? await getOidcToken(values.audience ?? service, env) : env["HARNESS_TOKEN"];
+      const token = !byProject && env["ACTIONS_ID_TOKEN_REQUEST_URL"] ? await getOidcToken(values.audience ?? originOf(service), env) : env["HARNESS_TOKEN"];
       if (!token) throw new UsageError2(byProject ? "no credentials: set HARNESS_TOKEN" : "no credentials: run in GitHub Actions with id-token: write, or set HARNESS_TOKEN");
       const result = await uploadSnapshot({ serviceUrl: service, token, manifest: built.manifest, shards: built.shards, ...byProject ? { byProject: true } : {} });
       out2(`published ${built.manifest.commitSha}: ${built.shards.length} shards, ${result.missing} new, ${result.batches} batches`);

package/package.json

@@ -1,6 +1,6 @@
 {
   "name": "overlane",
-  "version": "0.1.142",
+  "version": "0.1.143",
   "description": "Overlane: connect a GitHub project to your coding agents. One portable CLI with project memory, tasks, a code index, guardrails and the Claude Code and Codex plugin.",
   "keywords": [
     "overlane",

package/plugins/claude/plugins/mvrx-harness/.claude-plugin/plugin.json

@@ -1,6 +1,6 @@
 {
   "name": "mvrx-harness",
-  "version": "0.1.142",
+  "version": "0.1.143",
   "description": "Overlane context at session start and the shared Overlane skills.",
   "author": {
     "name": "owenob1"