phasegate 0.160.19 → 0.160.21

package/CHANGELOG.md

@@ -7,6 +7,10 @@ and this project adheres to [Semantic Versioning](https://semver.org/spec/v2.0.0
 
 ## [Unreleased]
 
+### Fixed
+
+- **WI-217 — personal inception/product consistency** — makes L4-002 validate configured personal documentation roots, scopes L4-004 freshness to `paths.designDocs`, adds personal hook L4 backstop behavior for `.phasegate-local` docs, and lets `scaffold-wi` use custom IDs and personal inception roots.
+
 ## [0.160.16] - 2026-05-22
 
 ### Fixed

package/README.md

@@ -100,7 +100,7 @@ npx phasegate install --apply
 npx phasegate doctor
 ```
 
-`install` merges PhaseGate into the current project without discarding existing Claude/Codex hooks or Husky scripts. It reports planned changes before writing, adds package scripts and the `phasegate` devDependency, deploys selected bundled skills to root `skills/`, creates agent skill links to that shared directory, writes `AGENTS.md` / `CLAUDE.md` PhaseGate managed sections for the selected agent targets, writes the CI workflow when missing, and records managed files in `.phasegate/manifest.json`. If an existing file needs a forced managed update, run `npx phasegate install --apply --force`; PhaseGate backs up replaced files under `.phasegate/backups/`. <!-- @work-item-id WI-174 --> <!-- @work-item-id WI-210 -->
+`install` merges PhaseGate into the current project without discarding existing Claude/Codex hooks, Husky scripts, or user-owned skills. It reports planned changes before writing, adds package scripts and the `phasegate` devDependency, deploys selected bundled skills to root `skills/`, creates agent skill links to that shared directory, writes `AGENTS.md` / `CLAUDE.md` PhaseGate managed sections for the selected agent targets, writes the CI workflow when missing, and records managed files in `.phasegate/manifest.json`. If an existing file needs a forced managed update, run `npx phasegate install --apply --force`; PhaseGate backs up replaced files under `.phasegate/backups/`. <!-- @work-item-id WI-174 --> <!-- @work-item-id WI-210 --> <!-- @work-item-id WI-216 -->
 
 For personal evaluation inside a team-owned repository, use local-only install:
 
@@ -109,7 +109,7 @@ npx phasegate install --personal --agent claude --dry-run
 npx phasegate install --personal --agent claude --apply
 ```
 
-`--personal` does not plan or write `package.json`, `CLAUDE.md`, `.husky/*`, `.github/workflows/*`, `.gitignore`, GitHub CLI config, repo secrets, or CI settings. It creates `.phasegate-local/phasegate.config.json`, runtime-visible local agent context (`.claude/CLAUDE.md` for Claude, and `AGENTS.md` for Codex only when that root file is absent or already PhaseGate-managed), real local-only agent runtime artifacts for the selected agent (`.claude/settings.json` + `.claude/skills/` and/or `.codex/hooks.json` + `.codex/skills/`), local git hooks under `.git/hooks/`, local reference docs under `.phasegate-local/docs/`, a managed local-only block in `.git/info/exclude`, and `.phasegate/manifest.json`. If a team `AGENTS.md` already exists, personal Codex install leaves it unchanged and `doctor --personal --agent codex` reports the remaining context step instead of hiding it behind `AGENTS.override.md`. Codex user-level hook feature enablement remains a manual action. <!-- @work-item-id WI-207 --> <!-- @work-item-id WI-208 --> <!-- @work-item-id WI-209 --> <!-- @work-item-id WI-213 --> <!-- @work-item-id WI-215 -->
+`--personal` does not plan or write `package.json`, `CLAUDE.md`, `.husky/*`, `.github/workflows/*`, `.gitignore`, GitHub CLI config, repo secrets, or CI settings. It creates `.phasegate-local/phasegate.config.json`, runtime-visible local agent context (`.claude/CLAUDE.md` for Claude, and `AGENTS.md` for Codex only when that root file is absent or already PhaseGate-managed), real local-only agent runtime artifacts for the selected agent (`.claude/settings.json` + `.claude/skills/` and/or `.codex/hooks.json` + `.codex/skills/`), local git hooks under `.git/hooks/`, local reference docs under `.phasegate-local/docs/`, a managed local-only block in `.git/info/exclude`, and `.phasegate/manifest.json`. Existing personal skills directories are merged: PhaseGate refreshes bundled skills and preserves user-owned skills. If a team `AGENTS.md` already exists, personal Codex install leaves it unchanged and `doctor --personal --agent codex` reports the remaining context step instead of hiding it behind `AGENTS.override.md`. Codex user-level hook feature enablement remains a manual action. <!-- @work-item-id WI-207 --> <!-- @work-item-id WI-208 --> <!-- @work-item-id WI-209 --> <!-- @work-item-id WI-213 --> <!-- @work-item-id WI-215 --> <!-- @work-item-id WI-216 -->
 
 For agent-driven setup planning, use:
 
@@ -129,7 +129,7 @@ npx phasegate uninstall --dry-run
 npx phasegate uninstall --apply
 ```
 
-`uninstall` uses the manifest to delete created files and remove only PhaseGate-managed portions from merged Claude/Codex, Husky, and `package.json` files. User content is preserved, and the manifest is archived under `.phasegate/`.
+`uninstall` uses the manifest to delete created files, remove only PhaseGate-managed portions from merged Claude/Codex, Husky, and `package.json` files, and remove only PhaseGate-managed bundled skills. User content and user-owned skills are preserved, and the manifest is archived under `.phasegate/`. <!-- @work-item-id WI-216 -->
 
 When you upgrade PhaseGate, reconcile existing managed files with the current bundled templates:
 
@@ -138,7 +138,7 @@ npx phasegate reconcile --dry-run
 npx phasegate reconcile --apply
 ```
 
-`reconcile` updates only PhaseGate-managed portions, keeps user content, adds newly introduced managed targets, repairs missing shared skill bodies for project installs, and refreshes `.phasegate/manifest.json` with the current version and hashes. If a managed file was edited after install, `reconcile --apply` refuses that entry until you rerun with `--force`; PhaseGate writes a backup under `.phasegate/backups/reconcile-<timestamp>/`. <!-- @work-item-id WI-210 -->
+`reconcile` updates only PhaseGate-managed portions, keeps user content, adds newly introduced managed targets, repairs missing shared or personal bundled skill bodies, and refreshes `.phasegate/manifest.json` with the current version and hashes. If a managed file was edited after install, `reconcile --apply` refuses that entry until you rerun with `--force`; PhaseGate writes a backup under `.phasegate/backups/reconcile-<timestamp>/`. <!-- @work-item-id WI-210 --> <!-- @work-item-id WI-216 -->
 
 ### Codex CLI
 

package/docs/guide/installation.md

@@ -56,7 +56,7 @@ npx phasegate install --apply
 npx phasegate doctor
 ```
 
-`install --dry-run` reports whether each target will be created, merged, skipped, or refused. `install --apply` performs the merge, adds package scripts and the `phasegate` devDependency, creates `.claude/skills` and `.codex/skills` links, writes `CLAUDE.md` / `AGENTS.md` managed sections for selected agent targets, writes `.github/workflows/phasegate-aidlc-gate.yml` when CI is enabled, and records managed entries in `.phasegate/manifest.json`. See [Setup Artifacts](setup-artifacts.md) for the full managed target, generated artifact, runtime state, legacy artifact, and user-level setting inventory. <!-- @work-item-id WI-152 --> <!-- @work-item-id WI-169 --> <!-- @work-item-id WI-174 -->
+`install --dry-run` reports whether each target will be created, merged, skipped, or refused. `install --apply` performs the merge, adds package scripts and the `phasegate` devDependency, deploys selected bundled skills to root `skills/`, creates `.claude/skills` and `.codex/skills` links, writes `CLAUDE.md` / `AGENTS.md` managed sections for selected agent targets, writes `.github/workflows/phasegate-aidlc-gate.yml` when CI is enabled, and records managed entries in `.phasegate/manifest.json`. Existing skills catalogs are merged: PhaseGate refreshes only bundled skill directories selected by `--skills core|all` and preserves user-owned skills. See [Setup Artifacts](setup-artifacts.md) for the full managed target, generated artifact, runtime state, legacy artifact, and user-level setting inventory. <!-- @work-item-id WI-152 --> <!-- @work-item-id WI-169 --> <!-- @work-item-id WI-174 --> <!-- @work-item-id WI-216 -->
 
 For personal evaluation inside a team-owned repository:
 
@@ -65,7 +65,7 @@ npx phasegate install --personal --agent claude --dry-run
 npx phasegate install --personal --agent claude --apply
 ```
 
-Personal install keeps team-owned files out of the apply path: `package.json`, `CLAUDE.md`, `.husky/*`, `.github/workflows/*`, `.gitignore`, GitHub CLI config, repo secrets, and CI settings are not touched. PhaseGate writes `.phasegate-local/phasegate.config.json`, creates runtime-visible local agent context (`.claude/CLAUDE.md` for Claude, and `AGENTS.md` for Codex only when that root file is absent or already PhaseGate-managed), creates real local-only agent runtime artifacts for the selected agent (`.claude/settings.json` + `.claude/skills/` and/or `.codex/hooks.json` + `.codex/skills/`), deploys local git hooks under `.git/hooks/`, copies reference docs under `.phasegate-local/docs/`, records `.phasegate/manifest.json`, and manages a local exclude block in `.git/info/exclude`. If a team `AGENTS.md` already exists, personal Codex install leaves it unchanged and `doctor --personal --agent codex` reports the remaining context step instead of hiding it behind `AGENTS.override.md`. Codex user-level hook feature enablement is still reported as a manual action. <!-- @work-item-id WI-207 --> <!-- @work-item-id WI-208 --> <!-- @work-item-id WI-209 --> <!-- @work-item-id WI-213 --> <!-- @work-item-id WI-215 -->
+Personal install keeps team-owned files out of the apply path: `package.json`, `CLAUDE.md`, `.husky/*`, `.github/workflows/*`, `.gitignore`, GitHub CLI config, repo secrets, and CI settings are not touched. PhaseGate writes `.phasegate-local/phasegate.config.json`, creates runtime-visible local agent context (`.claude/CLAUDE.md` for Claude, and `AGENTS.md` for Codex only when that root file is absent or already PhaseGate-managed), creates real local-only agent runtime artifacts for the selected agent (`.claude/settings.json` + `.claude/skills/` and/or `.codex/hooks.json` + `.codex/skills/`), deploys local git hooks under `.git/hooks/`, copies reference docs under `.phasegate-local/docs/`, records `.phasegate/manifest.json`, and manages a local exclude block in `.git/info/exclude`. Existing personal skills directories are merged the same way as project `skills/`: bundled PhaseGate skills are added or refreshed, user-owned skills are preserved, and legacy `.harness-version` catalogs can be adopted into the manifest. If a team `AGENTS.md` already exists, personal Codex install leaves it unchanged and `doctor --personal --agent codex` reports the remaining context step instead of hiding it behind `AGENTS.override.md`. Codex user-level hook feature enablement is still reported as a manual action. <!-- @work-item-id WI-207 --> <!-- @work-item-id WI-208 --> <!-- @work-item-id WI-209 --> <!-- @work-item-id WI-213 --> <!-- @work-item-id WI-215 --> <!-- @work-item-id WI-216 -->
 
 If an existing repository keeps design or governance docs outside `docs/`, set `paths.designDocs`, `paths.inceptionDocs`, `paths.principlesDocs`, and `paths.folderRulesDoc` in `phasegate.config.json` before setup/reconcile. PhaseGate deploy and hook protection use those mappings instead of forcing the default `docs/` layout. <!-- @work-item-id WI-214 -->
 
@@ -93,7 +93,7 @@ npx phasegate uninstall --dry-run
 npx phasegate uninstall --apply
 ```
 
-`uninstall` reads `.phasegate/manifest.json`, deletes files that PhaseGate created, removes only PhaseGate-managed portions from merged JSON, markdown agent context files, Husky, and `package.json` files, and archives the manifest as `.phasegate/uninstalled-<timestamp>.json`. If a managed file was modified after install, `uninstall --apply` refuses that entry until you rerun with `--force`, which creates a backup under `.phasegate/backups/uninstall-<timestamp>/`. <!-- @work-item-id WI-174 -->
+`uninstall` reads `.phasegate/manifest.json`, deletes files that PhaseGate created, removes only PhaseGate-managed portions from merged JSON, markdown agent context files, Husky, and `package.json` files, removes manifest-managed bundled skills, and archives the manifest as `.phasegate/uninstalled-<timestamp>.json`. User-owned skill directories remain in place, and skills parent directories are kept when they still contain user-owned skills. If a managed file was modified after install, `uninstall --apply` refuses that entry until you rerun with `--force`, which creates a backup under `.phasegate/backups/uninstall-<timestamp>/`. <!-- @work-item-id WI-174 --> <!-- @work-item-id WI-216 -->
 
 After upgrading PhaseGate, reconcile existing managed files with the bundled templates from the new version:
 
@@ -102,7 +102,7 @@ npx phasegate reconcile --dry-run
 npx phasegate reconcile --apply
 ```
 
-`reconcile` updates PhaseGate-managed portions, preserves user content, adds newly introduced managed targets, and refreshes `.phasegate/manifest.json` with current version/hash metadata. If a managed file was edited after install, `reconcile --apply` refuses that entry until you rerun with `--force`, which creates a backup under `.phasegate/backups/reconcile-<timestamp>/`.
+`reconcile` updates PhaseGate-managed portions, preserves user content, adds newly introduced managed targets, repairs missing or stale bundled skills in project and personal catalogs, and refreshes `.phasegate/manifest.json` with current version/hash metadata. If a managed file was edited after install, `reconcile --apply` refuses that entry until you rerun with `--force`, which creates a backup under `.phasegate/backups/reconcile-<timestamp>/`. <!-- @work-item-id WI-216 -->
 
 ### Manual Setup Pieces
 
@@ -134,7 +134,7 @@ npx phasegate reconcile --dry-run
 npx phasegate reconcile --apply
 ```
 
-`phasegate update-skills` remains available as a compatibility alias, but `reconcile` is the preferred upgrade path because it updates all managed files recorded in `.phasegate/manifest.json`.
+`phasegate update-skills` remains available as a compatibility alias. It now follows the same manifest-aware reconcile path, including project and personal bundled skill repair, so `reconcile` remains the preferred explicit upgrade command. <!-- @work-item-id WI-216 -->
 
 `doctor --report-out <path>` writes exactly to the provided path. `.phasegate/last-doctor-report.json` is not a fixed output file unless you choose that path explicitly. <!-- @work-item-id WI-152 -->
 

package/docs/guide/setup-artifacts.md

@@ -8,6 +8,7 @@ PhaseGate setup is more than `phasegate.config.json`. A healthy installation is
 <!-- @work-item-id WI-208 -->
 <!-- @work-item-id WI-209 -->
 <!-- @work-item-id WI-215 -->
+<!-- @work-item-id WI-216 -->
 
 ## Artifact Classes
 
@@ -43,11 +44,11 @@ PhaseGate setup is more than `phasegate.config.json`. A healthy installation is
 
 `phasegate install --personal --agent claude --apply` is a local-only bootstrap for evaluating PhaseGate in a team-owned repository. PhaseGate config is stored under `.phasegate-local/`, while selected agent runtime paths are real project-local files/directories: `.claude/settings.json` and `.claude/skills/` for Claude Code, `.codex/hooks.json` and `.codex/skills/` for Codex. These paths are hidden by `.git/info/exclude`; PhaseGate does not edit team `.gitignore`.
 
-If `.claude/*` or `.codex/*` already exists and is not a PhaseGate-managed personal artifact, personal install reports manual review and preserves the existing path. <!-- @work-item-id WI-209 -->
+If `.claude/*` or `.codex/*` already exists and is not a PhaseGate-managed personal artifact, personal install reports manual review and preserves the existing path. Existing `.claude/skills/` and `.codex/skills/` directories are mergeable skill catalogs: PhaseGate refreshes bundled skill directories and preserves user-owned skill directories. <!-- @work-item-id WI-209 --> <!-- @work-item-id WI-216 -->
 
 Personal agent context is also placed only where the runtime will read it. Claude Code uses `.claude/CLAUDE.md`. Codex uses root `AGENTS.md` when PhaseGate can create or manage it locally; if a team `AGENTS.md` already exists, PhaseGate leaves it unchanged and doctor reports `codex-context-missing` instead of creating `AGENTS.override.md`. <!-- @work-item-id WI-215 -->
 
-Project install uses a different topology: selected bundled skills are deployed once to root `skills/`, and `.claude/skills` / `.codex/skills` point to that shared target. If an older project install has the links but an empty `skills/` target, `phasegate doctor` reports the selected agent skill check and `phasegate reconcile --apply` repairs the shared skill bodies. <!-- @work-item-id WI-210 -->
+Project install uses a different topology: selected bundled skills are deployed once to root `skills/`, and `.claude/skills` / `.codex/skills` point to that shared target. Existing root `skills/` is also a mergeable catalog: selected bundled skill directories are refreshed, selection-excluded or user-owned skills are not removed, and uninstall deletes only manifest-managed bundled skills plus metadata. If an older project install has the links but an empty `skills/` target, `phasegate doctor` reports the selected agent skill check and `phasegate reconcile --apply` repairs the shared skill bodies. <!-- @work-item-id WI-210 --> <!-- @work-item-id WI-216 -->
 
 ## Doctor Findings
 

package/docs/templates/personal/hooks/pre-commit

@@ -18,4 +18,20 @@ if [ "${HARNESS_QUICK_MODE:-0}" = "1" ]; then
 else
   $PHASEGATE_CMD validate --layer L2 --format human
 fi
+L2_EXIT=$?
+if [ $L2_EXIT -ne 0 ]; then
+  echo "PhaseGate L2 validation failed."
+  exit 1
+fi
+
+STAGED_FILES="$(git diff --cached --name-only --diff-filter=ACM 2>/dev/null || true)"
+if printf '%s\n' "$STAGED_FILES" | grep -E '^\.phasegate-local/(inception|product)/' >/dev/null 2>&1; then
+  $PHASEGATE_CMD validate --layer L4 --format human --fail-on-warning
+  L4_EXIT=$?
+  if [ $L4_EXIT -ne 0 ]; then
+    echo "PhaseGate local inception/product consistency failed."
+    exit 1
+  fi
+fi
 
+exit 0

package/package.json

@@ -1,6 +1,6 @@
 {
   "name": "phasegate",
-  "version": "0.160.19",
+  "version": "0.160.21",
   "packageManager": "pnpm@10.30.1",
   "description": "Phasegate — AI-agnostic quality defense toolkit. Enforces structural integrity between design intent and code.",
   "license": "MIT",

package/scripts/harness/config-foundation/application/mappers/validator-system-config-mapper.ts

@@ -2,6 +2,7 @@
  * @layer application
  * @unit config-foundation
  * @work-item-id WI-133 / WI-156
+ * @work-item-id WI-217
  */
 import type { HarnessConfigV2 } from '../../domain/harness-config.js';
 
@@ -27,19 +28,26 @@ export function toValidatorSystemConfig(resolvedConfig: HarnessConfigV2 | undefi
     'pointer-validator': 'L4-005',
     'skill-catalog-drift': 'L4-006',
   }, /^L4-\d{3}$/);
+  const effectiveL4Validators = usesCustomDocumentRoots(resolvedConfig)
+    ? includeValidator(l4Validators, 'L4-002')
+    : l4Validators;
 
   return {
     project: { preset: resolvedConfig.project.preset },
+    paths: {
+      designDocs: resolvedConfig.paths.designDocs,
+      inceptionDocs: resolvedConfig.paths.inceptionDocs,
+    },
     layers: {
       L2: { enabled: resolvedConfig.layers.L2.enabled, validators: ['L2-001', 'L2-002', 'L2-003', 'L2-013', 'L2-014', 'L2-015'] },
       L3: {
         enabled: resolvedConfig.layers.L3.enabled,
-        ...(l3Validators.length > 0 ? { validators: l3Validators } : {}),
+        validators: l3Validators.length > 0 ? l3Validators : ['L3-001', 'L3-002', 'L3-003', 'L3-004'],
         coverageThreshold: resolvedConfig.layers.L3.coverageThreshold,
       },
       L4: {
         enabled: resolvedConfig.layers.L4.enabled,
-        ...(l4Validators.length > 0 ? { validators: l4Validators } : {}),
+        validators: effectiveL4Validators.length > 0 ? effectiveL4Validators : ['L4-001', 'L4-002', 'L4-003', 'L4-004', 'L4-005', 'L4-006'],
       },
     },
     harnesses: {
@@ -53,6 +61,15 @@ export function toValidatorSystemConfig(resolvedConfig: HarnessConfigV2 | undefi
   };
 }
 
+function usesCustomDocumentRoots(resolvedConfig: HarnessConfigV2): boolean {
+  return resolvedConfig.paths.designDocs !== 'docs/product/construction'
+    || resolvedConfig.paths.inceptionDocs !== 'docs/inception';
+}
+
+function includeValidator(validators: readonly string[], validatorId: string): readonly string[] {
+  return validators.includes(validatorId) ? validators : [...validators, validatorId];
+}
+
 function normalizeValidators(
   validators: readonly string[],
   aliases: Readonly<Record<string, string>>,

package/scripts/harness/config-foundation/infrastructure/schemas/harness-config-v3.schema.json

@@ -435,9 +435,7 @@
       "additionalProperties": false,
       "required": [
         "designDocs",
-        "inceptionDocs",
-        "principlesDocs",
-        "folderRulesDoc"
+        "inceptionDocs"
       ],
       "properties": {
         "designDocs": {

package/scripts/harness/installation/application/bundled-skill-selection.ts

@@ -0,0 +1,46 @@
+// @unit installation
+// @layer application
+// @work-item-id WI-216
+
+export type SkillSet = "core" | "all";
+
+const CORE_SKILLS = [
+  "cascade-updater",
+  "codebase-mapper",
+  "consistency-checker",
+  "doc-freshness-checker",
+  "engineering-perspective",
+  "implementation-readiness-checker",
+  "pointer-validator",
+  "test-coverage-checker",
+] as const;
+
+const AIDLC_SKILLS = [
+  "domain-designer",
+  "environment-designer",
+  "implementation-planner",
+  "it-test-designer",
+  "it-test-logic-designer",
+  "logical-designer",
+  "mock-designer",
+  "product-architect",
+  "quick-implementor",
+  "scenario-test-designer",
+  "scenario-test-logic-designer",
+  "story-implementor",
+  "story-mapper",
+  "story-writer",
+  "uiux-designer",
+  "unit-designer",
+  "unit-test-designer",
+  "unit-test-logic-designer",
+] as const;
+
+const UTILITY_SKILLS = ["codex-delegator", "skill-creator"] as const;
+const GUIDANCE_SKILLS = ["phasegate-toolkit-guide", "phasegate-config-doctor"] as const;
+
+export function getBundledSkillsForSet(skillSet: SkillSet): string[] {
+  if (skillSet === "core") return [...CORE_SKILLS];
+  return [...CORE_SKILLS, ...AIDLC_SKILLS, ...UTILITY_SKILLS, ...GUIDANCE_SKILLS];
+}
+

package/scripts/harness/installation/application/checks/check-utils.ts

@@ -3,8 +3,10 @@
 // @work-item-id WI-145
 // @work-item-id WI-209
 // @work-item-id WI-210
+// @work-item-id WI-216
 
 import { join } from "node:path";
+import { getBundledSkillsForSet, type SkillSet } from "../bundled-skill-selection.js";
 import type { CheckId } from "../../domain/check-id.js";
 import { DiagnosticFinding, type DiagnosticSeverity } from "../../domain/diagnostic-finding.js";
 import type { RepairMode } from "../../domain/repair-mode.js";
@@ -69,3 +71,12 @@ export function skillTargetLooksValid(target: string | null): boolean {
 export function skillDirectoryLooksValid(files: readonly string[]): boolean {
   return files.some((file) => file.endsWith("/SKILL.md") || file.endsWith("\\SKILL.md") || file.endsWith(".harness-version"));
 }
+
+export function phasegateSkillDirectoryLooksComplete(files: readonly string[], metadata: string | null): boolean {
+  const skillSet: SkillSet = metadata?.includes('"skillSet": "core"') ? "core" : "all";
+  const expectedSkills = getBundledSkillsForSet(skillSet);
+  return expectedSkills.every((skill) => files.some((file) => {
+    const normalized = file.replaceAll("\\", "/");
+    return normalized.endsWith(`/${skill}/SKILL.md`);
+  }));
+}

package/scripts/harness/installation/application/checks/claude-skills-symlink-check.ts

@@ -3,11 +3,12 @@
 // @work-item-id WI-145
 // @work-item-id WI-209
 // @work-item-id WI-210
+// @work-item-id WI-216
 
 import type { FileInspectorPort } from "../ports/file-inspector-port.js";
 import type { HeuristicCheck } from "../../domain/ports/heuristic-check.js";
 import type { DiagnosticFinding } from "../../domain/diagnostic-finding.js";
-import { createFinding, projectPath, skillDirectoryLooksValid, skillTargetLooksValid } from "./check-utils.js";
+import { createFinding, phasegateSkillDirectoryLooksComplete, projectPath, skillTargetLooksValid } from "./check-utils.js";
 
 export class ClaudeSkillsSymlinkCheck implements HeuristicCheck {
   readonly checkId = "claude-skills-symlink" as const;
@@ -16,8 +17,9 @@ export class ClaudeSkillsSymlinkCheck implements HeuristicCheck {
   async run(projectRoot: string, inspector: FileInspectorPort): Promise<DiagnosticFinding | null> {
     const link = await inspector.readSymlink(projectPath(projectRoot, this.target));
     const files = await inspector.listFiles(projectPath(projectRoot, this.target));
-    if (skillTargetLooksValid(link) && skillDirectoryLooksValid(files)) return null;
-    if (link === null && skillDirectoryLooksValid(files)) return null;
+    const metadata = await inspector.readText(projectPath(projectRoot, `${this.target}/.harness-version`));
+    if (skillTargetLooksValid(link) && phasegateSkillDirectoryLooksComplete(files, metadata)) return null;
+    if (link === null && phasegateSkillDirectoryLooksComplete(files, metadata)) return null;
     return createFinding({
       checkId: this.checkId,
       severity: "red",

package/scripts/harness/installation/application/checks/codex-skills-symlink-check.ts

@@ -3,11 +3,12 @@
 // @work-item-id WI-145
 // @work-item-id WI-209
 // @work-item-id WI-210
+// @work-item-id WI-216
 
 import type { FileInspectorPort } from "../ports/file-inspector-port.js";
 import type { HeuristicCheck } from "../../domain/ports/heuristic-check.js";
 import type { DiagnosticFinding } from "../../domain/diagnostic-finding.js";
-import { createFinding, projectPath, skillDirectoryLooksValid, skillTargetLooksValid } from "./check-utils.js";
+import { createFinding, phasegateSkillDirectoryLooksComplete, projectPath, skillTargetLooksValid } from "./check-utils.js";
 
 export class CodexSkillsSymlinkCheck implements HeuristicCheck {
   readonly checkId = "codex-skills-symlink" as const;
@@ -16,8 +17,9 @@ export class CodexSkillsSymlinkCheck implements HeuristicCheck {
   async run(projectRoot: string, inspector: FileInspectorPort): Promise<DiagnosticFinding | null> {
     const link = await inspector.readSymlink(projectPath(projectRoot, this.target));
     const files = await inspector.listFiles(projectPath(projectRoot, this.target));
-    if (skillTargetLooksValid(link) && skillDirectoryLooksValid(files)) return null;
-    if (link === null && skillDirectoryLooksValid(files)) return null;
+    const metadata = await inspector.readText(projectPath(projectRoot, `${this.target}/.harness-version`));
+    if (skillTargetLooksValid(link) && phasegateSkillDirectoryLooksComplete(files, metadata)) return null;
+    if (link === null && phasegateSkillDirectoryLooksComplete(files, metadata)) return null;
     return createFinding({
       checkId: this.checkId,
       severity: "red",

package/scripts/harness/installation/application/usecases/run-install.ts

@@ -14,14 +14,15 @@
 // @work-item-id WI-213
 // @work-item-id WI-214
 // @work-item-id WI-215
+// @work-item-id WI-216
 
 import { mkdir, readFile, writeFile, copyFile, chmod, access, lstat, readlink, symlink, readdir, rm } from "node:fs/promises";
 import { dirname, join } from "node:path";
-import { getSkillsForSet, type SkillSet } from "../../../setup/skill-deployer.js";
 import { DeploymentEntry } from "../../domain/deployment-entry.js";
 import { DeploymentManifest } from "../../domain/deployment-manifest.js";
 import type { ManagedBlockInput } from "../../domain/managed-block.js";
 import type { RepairMode } from "../../domain/repair-mode.js";
+import { getBundledSkillsForSet, type SkillSet } from "../bundled-skill-selection.js";
 import type { ManifestRepositoryPort } from "../ports/manifest-repository-port.js";
 import type { HashCalculatorPort } from "../ports/hash-calculator-port.js";
 
@@ -131,9 +132,19 @@ async function copyDirectory(src: string, dest: string): Promise<void> {
   }
 }
 
+async function copySelectedSkillDirectories(harnessRoot: string, targetRoot: string, skills: readonly string[]): Promise<void> {
+  await mkdir(targetRoot, { recursive: true });
+  for (const skill of skills) {
+    const source = join(harnessRoot, "skills", skill);
+    const target = join(targetRoot, skill);
+    await rm(target, { recursive: true, force: true });
+    await copyDirectory(source, target);
+  }
+}
+
 async function listSelectedBundledSkills(harnessRoot: string, skillSet: SkillSet): Promise<string[]> {
   const skillsSource = join(harnessRoot, "skills");
-  const allowed = new Set(getSkillsForSet(skillSet));
+  const allowed = new Set(getBundledSkillsForSet(skillSet));
   const entries = await readdir(skillsSource, { withFileTypes: true });
   return entries
     .filter((entry) => entry.isDirectory() && allowed.has(entry.name))
@@ -428,12 +439,13 @@ export class RunInstallUseCase {
           ...(includeCodex ? [".codex/skills"] : []),
         ]
       : [];
+    const selectedPersonalSkills = input.personal ? await listSelectedBundledSkills(input.harnessRoot, skillSet) : [];
     for (const skillPath of personalSkillTargets) {
-      const item = await this.planPersonalSkillDirectory(input, skillPath, baseManifest);
+      const item = await this.planPersonalSkillDirectory(input, skillPath, selectedPersonalSkills, baseManifest);
       plan.push(item);
       if (input.apply && item.changed && item.repairMode === "mechanical") {
         try {
-          await copyDirectory(join(input.harnessRoot, "skills"), join(input.projectRoot, skillPath));
+          await copySelectedSkillDirectories(input.harnessRoot, join(input.projectRoot, skillPath), selectedPersonalSkills);
           await writeFile(
             join(input.projectRoot, skillPath, ".harness-version"),
             `${JSON.stringify({ version: input.phasegateVersion, deployedAt: new Date().toISOString(), skillSet }, null, 2)}\n`,
@@ -444,10 +456,17 @@ export class RunInstallUseCase {
         }
         changed.push(item);
         manifest = this.addManifestEntry(baseManifest, manifest, {
-          path: item.path,
+          path: `${item.path}/.harness-version`,
           mode: "created",
-          contentForHash: this.personalSkillsHashInput(item.path, input.phasegateVersion, skillSet),
+          contentForHash: this.personalSkillsVersionHashInput(item.path, input.phasegateVersion, skillSet, selectedPersonalSkills),
         });
+        for (const skill of selectedPersonalSkills) {
+          manifest = this.addManifestEntry(baseManifest, manifest, {
+            path: `${item.path}/${skill}`,
+            mode: "created",
+            contentForHash: this.personalSkillHashInput(item.path, skill, input.phasegateVersion, skillSet),
+          });
+        }
       }
     }
 
@@ -755,32 +774,58 @@ export class RunInstallUseCase {
   private async planPersonalSkillDirectory(
     input: RunInstallInput,
     relativePath: string,
+    skills: readonly string[],
     baseManifest: DeploymentManifest,
   ): Promise<InstallPlanItem> {
     const absolutePath = join(input.projectRoot, relativePath);
+    try {
+      const stat = await lstat(absolutePath);
+      if (stat.isSymbolicLink() || !stat.isDirectory()) {
+        return {
+          path: relativePath,
+          action: "will-merge",
+          repairMode: "manual",
+          strategy: "copy-dir",
+          changed: false,
+          summary: `${relativePath}: existing non-directory skills path requires manual review`,
+          diff: "manual review required",
+          skillHint: null,
+        };
+      }
+    } catch {}
     const versionPath = join(absolutePath, ".harness-version");
     const current = await readTextOrNull(versionPath);
-    const expectedNeedle = `"version": "${input.phasegateVersion}"`;
-    const manifestEntry = baseManifest.findEntry(relativePath);
-    const pathExists = await exists(absolutePath);
-    const unmanagedExisting = pathExists && (current === null || manifestEntry === null);
-    const changed = !unmanagedExisting && (current === null || !current.includes(expectedNeedle));
+    const skillSet = input.skillSet ?? "all";
+    const expectedVersion = `"version": "${input.phasegateVersion}"`;
+    const expectedSkillSet = `"skillSet": "${skillSet}"`;
+    let missingSkill = false;
+    for (const skill of skills) {
+      if (!(await exists(join(absolutePath, skill, "SKILL.md")))) {
+        missingSkill = true;
+        break;
+      }
+    }
+    const missingManifest = baseManifest.findEntry(`${relativePath}/.harness-version`) === null
+      || skills.some((skill) => baseManifest.findEntry(`${relativePath}/${skill}`) === null);
+    const changed = current === null || !current.includes(expectedVersion) || !current.includes(expectedSkillSet) || missingSkill || missingManifest;
     return {
       path: relativePath,
-      action: changed ? "missing" : unmanagedExisting ? "will-merge" : "will-skip",
-      repairMode: unmanagedExisting ? "manual" : "mechanical",
+      action: changed ? "missing" : "will-skip",
+      repairMode: "mechanical",
       strategy: "copy-dir",
       changed,
-      summary: unmanagedExisting
-        ? `${relativePath}: existing non-phasegate directory requires manual review`
-        : changed ? `${relativePath}: deploy bundled skills` : `${relativePath}: already up to date`,
-      diff: unmanagedExisting ? "manual review required" : changed ? "+ bundled skills" : "no changes",
+      summary: changed ? `${relativePath}: deploy bundled skills` : `${relativePath}: already up to date`,
+      diff: changed ? `+ ${skills.length} bundled skills (${skillSet})` : "no changes",
       skillHint: null,
     };
   }
 
-  private personalSkillsHashInput(path: string, version: string, skillSet: "core" | "all"): string {
-    return `personal-skills:${path}:${version}:${skillSet}`;
+  private personalSkillsVersionHashInput(path: string, version: string, skillSet: "core" | "all", skills: readonly string[]): string {
+    return `personal-skills-version:${path}:${version}:${skillSet}:${skills.join(",")}`;
+  }
+
+  private personalSkillHashInput(path: string, skill: string, version: string, skillSet: "core" | "all"): string {
+    return `personal-skill:${path}:${skill}:${version}:${skillSet}`;
   }
 
   private async planSharedSkillDirectory(
@@ -817,13 +862,7 @@ export class RunInstallUseCase {
 
   private async deploySharedSkills(input: RunInstallInput, skills: readonly string[], skillSet: SkillSet): Promise<void> {
     const targetRoot = join(input.projectRoot, "skills");
-    await mkdir(targetRoot, { recursive: true });
-    for (const skill of skills) {
-      const source = join(input.harnessRoot, "skills", skill);
-      const target = join(targetRoot, skill);
-      await rm(target, { recursive: true, force: true });
-      await copyDirectory(source, target);
-    }
+    await copySelectedSkillDirectories(input.harnessRoot, targetRoot, skills);
     await writeFile(
       join(targetRoot, ".harness-version"),
       `${JSON.stringify({ version: input.phasegateVersion, deployedAt: new Date().toISOString(), skillSet }, null, 2)}\n`,