repo-harness 0.9.0 → 0.9.1

package/README.es.md

@@ -85,7 +85,7 @@ artifacts.
 ## Novedades
 
 Las notas de versión viven en [`docs/CHANGELOG.md`](docs/CHANGELOG.md). La línea
-actual es `0.9.0`.
+actual es `0.9.1`.
 
 ## Cómo funciona
 
@@ -419,8 +419,8 @@ Guards habituales:
 
 ## Release actual
 
-- npm package: `repo-harness@0.9.0`
-- Generated workflow stamp: `repo-harness@0.9.0+template@0.9.0`
+- npm package: `repo-harness@0.9.1`
+- Generated workflow stamp: `repo-harness@0.9.1+template@0.9.1`
 - GitHub repository: `Ancienttwo/repo-harness`
 - Release history: [`docs/CHANGELOG.md`](docs/CHANGELOG.md)
 

package/README.fr.md

@@ -85,7 +85,7 @@ l'emportent.
 ## Nouveautés
 
 Les notes de version vivent dans [`docs/CHANGELOG.md`](docs/CHANGELOG.md). La
-ligne actuelle est `0.9.0`.
+ligne actuelle est `0.9.1`.
 
 ## Comment ça marche
 
@@ -424,8 +424,8 @@ Guards courants :
 
 ## Release actuelle
 
-- npm package : `repo-harness@0.9.0`
-- Generated workflow stamp : `repo-harness@0.9.0+template@0.9.0`
+- npm package : `repo-harness@0.9.1`
+- Generated workflow stamp : `repo-harness@0.9.1+template@0.9.1`
 - GitHub repository : `Ancienttwo/repo-harness`
 - Release history : [`docs/CHANGELOG.md`](docs/CHANGELOG.md)
 

package/README.ja.md

@@ -75,7 +75,7 @@ review、checks、handoff と食い違う場合は、source artifacts を優先
 ## What's New
 
 リリースノートは [`docs/CHANGELOG.md`](docs/CHANGELOG.md) にあります。現在の
-ラインは `0.9.0` です。
+ラインは `0.9.1` です。
 
 ## 仕組み
 
@@ -398,8 +398,8 @@ hook がブロックしたときは、まず terminal の構造化された出
 
 ## 現在の Release
 
-- npm package：`repo-harness@0.9.0`
-- Generated workflow stamp：`repo-harness@0.9.0+template@0.9.0`
+- npm package：`repo-harness@0.9.1`
+- Generated workflow stamp：`repo-harness@0.9.1+template@0.9.1`
 - GitHub repository：`Ancienttwo/repo-harness`
 - Release history：[`docs/CHANGELOG.md`](docs/CHANGELOG.md)
 

package/README.md

@@ -85,7 +85,7 @@ active plan, contract, review, checks, or handoff, the source artifacts win.
 ## What's New
 
 Release notes live in [`docs/CHANGELOG.md`](docs/CHANGELOG.md). The current line
-is `0.9.0`.
+is `0.9.1`.
 
 ## How It Works
 
@@ -282,15 +282,19 @@ user-level hook adapters, configures Waza runtime skills, persists a brain root
 under `~/.repo-harness/config.json`, and configures CodeGraph MCP. In an
 interactive terminal it asks Y/n before installing the external skills and
 CodeGraph pieces (Enter keeps today's default of installing both); non-TTY
-runs and `--json` stay unprompted with the same default-on behavior. It does
-not apply repo-local workflow files to the current directory. `repo-harness
-init` remains a compatibility alias for existing scripts.
+runs and `--json` stay unprompted with the same default-on behavior. Passing
+`--no-external-skills` or `--no-codegraph` explicitly also skips that item's
+prompt unprompted, which is the escape hatch for PTY-allocating CI (for
+example `docker run -t`). It does not apply repo-local workflow files to the
+current directory. `repo-harness init` remains a compatibility alias for
+existing scripts.
 
 For an Agent-owned, read-only bootstrap audit, run `repo-harness setup check
---json` or add `--check-updates` for version advisories. `setup check` is
-not a runtime hook: it does not write user-level files, install updates, or
-register adapters. It emits `agent_actions` with the reason, risk, target files,
-optional command, and verification surface for the Agent to execute deliberately.
+--json` or add `--check-updates` for version and adopted-repo refresh
+advisories. `setup check` is not a runtime hook: it does not write user-level
+files, install updates, run `adopt`, or register adapters. It emits
+`agent_actions` with the reason, risk, target files, optional command, and
+verification surface for the Agent to execute deliberately.
 `repo-harness init-hook` remains a compatibility alias.
 
 ### Install and refresh examples
@@ -312,6 +316,17 @@ repo-harness update --check
 repo-harness adopt --repo /path/to/repo
 ```
 
+`repo-harness install --target codex|both --location global` also resolves and
+persists the Codex delegation mode read by the delegation-advisor hook: pass
+`--delegation-mode auto|explicit` for non-interactive use, or answer the
+one-line interactive prompt shown in a TTY (Enter keeps the current choice,
+defaulting to `explicit` when nothing is configured yet). The chosen mode is
+written to `delegation.mode` in `~/.repo-harness/config.json`, merged with
+existing keys such as `brainRoot`; this global value takes precedence over a
+repo's `.ai/harness/policy.json` `delegation.mode`. The step never fires for
+`--target claude`, and with no flag and no TTY it leaves the file untouched —
+it never writes a silent default.
+
 ### 3. Preview the repo-local contract
 
 ```bash
@@ -612,8 +627,8 @@ Most common guards:
 
 ## Current Release
 
-- npm package: `repo-harness@0.9.0`
-- Generated workflow stamp: `repo-harness@0.9.0+template@0.9.0`
+- npm package: `repo-harness@0.9.1`
+- Generated workflow stamp: `repo-harness@0.9.1+template@0.9.1`
 - GitHub repository: `Ancienttwo/repo-harness`
 - Release history: [`docs/CHANGELOG.md`](docs/CHANGELOG.md)
 

package/README.zh-CN.md

@@ -75,7 +75,7 @@ review、checks 或 handoff 冲突，以 source artifacts 为准。
 
 ## What's New
 
-Release notes 见 [`docs/CHANGELOG.md`](docs/CHANGELOG.md)，当前版本线是 `0.9.0`。
+Release notes 见 [`docs/CHANGELOG.md`](docs/CHANGELOG.md)，当前版本线是 `0.9.1`。
 
 ## 工作原理
 
@@ -244,9 +244,10 @@ root 持久化到 `~/.repo-harness/config.json`，并配置 CodeGraph MCP。它
 默认迁移成 repo-local workflow。`repo-harness init` 保留为兼容 alias，给已有脚本用。
 
 如果要让 Agent 做只读 bootstrap audit，运行 `repo-harness setup check
---json`；需要版本提示时加 `--check-updates`。`setup check` 不是 runtime hook：
-它不会写 user-level files、安装更新或注册 adapters，只输出带 reason、risk、
-targets、可选 command 和 verification 的 `agent_actions`，由 Agent 再显式执行。
+--json`；需要版本和已接入仓库刷新提示时加 `--check-updates`。`setup check`
+不是 runtime hook：它不会写 user-level files、安装更新、执行 `adopt` 或注册
+adapters，只输出带 reason、risk、targets、可选 command 和 verification 的
+`agent_actions`，由 Agent 再显式执行。
 `repo-harness init-hook` 保留为兼容 alias。
 
 ### 安装和刷新例子
@@ -451,8 +452,8 @@ hook block 工作时，先看 terminal 里的结构化输出。核心字段是
 
 ## 当前 Release
 
-- npm package：`repo-harness@0.9.0`
-- Generated workflow stamp：`repo-harness@0.9.0+template@0.9.0`
+- npm package：`repo-harness@0.9.1`
+- Generated workflow stamp：`repo-harness@0.9.1+template@0.9.1`
 - GitHub repository：`Ancienttwo/repo-harness`
 - Release history：[`docs/CHANGELOG.md`](docs/CHANGELOG.md)
 

package/assets/AGENTS.md

@@ -37,7 +37,7 @@ Owns the workflow-engine-contract-assets capability boundary declared in .ai/con
 - Architecture domain: `workflow-engine`
 - Architecture capability: `contract-assets`
 - Architecture module: `docs/architecture/modules/workflow-engine/contract-assets.md`
-- Last architecture event: 2026-07-05T04:35:33+0800
+- Last architecture event: 2026-07-06T13:54:27+0800
 - Last changed path: `.ai/harness/policy.json`
 - Severity: high
 - Change type: workflow-surface

package/assets/CLAUDE.md

@@ -37,7 +37,7 @@ Owns the workflow-engine-contract-assets capability boundary declared in .ai/con
 - Architecture domain: `workflow-engine`
 - Architecture capability: `contract-assets`
 - Architecture module: `docs/architecture/modules/workflow-engine/contract-assets.md`
-- Last architecture event: 2026-07-05T04:35:33+0800
+- Last architecture event: 2026-07-06T13:54:27+0800
 - Last changed path: `.ai/harness/policy.json`
 - Severity: high
 - Change type: workflow-surface

package/assets/hooks/AGENTS.md

@@ -49,7 +49,7 @@ Owns the runtime-harness-hook-adapters capability boundary declared in .ai/conte
 - Architecture domain: `runtime-harness`
 - Architecture capability: `hook-adapters`
 - Architecture module: `docs/architecture/modules/runtime-harness/hook-adapters.md`
-- Last architecture event: 2026-07-05T13:45:11+0800
+- Last architecture event: 2026-07-06T13:54:06+0800
 - Last changed path: `assets/hooks/codex-delegation-advisor.sh`
 - Severity: high
 - Change type: workflow-surface

package/assets/hooks/CLAUDE.md

@@ -49,7 +49,7 @@ Owns the runtime-harness-hook-adapters capability boundary declared in .ai/conte
 - Architecture domain: `runtime-harness`
 - Architecture capability: `hook-adapters`
 - Architecture module: `docs/architecture/modules/runtime-harness/hook-adapters.md`
-- Last architecture event: 2026-07-05T13:45:11+0800
+- Last architecture event: 2026-07-06T13:54:06+0800
 - Last changed path: `assets/hooks/codex-delegation-advisor.sh`
 - Severity: high
 - Change type: workflow-surface

package/assets/hooks/codex-delegation-advisor.sh

@@ -56,6 +56,19 @@ JSON_INPUT="$input" REPO_ROOT="${HOOK_REPO_ROOT:-$(pwd)}" bun -e '
     return null;
   }
 
+  function readGlobalDelegationMode() {
+    try {
+      const home = process.env.HOME;
+      if (!home) return null;
+      const raw = fs.readFileSync(path.join(home, ".repo-harness", "config.json"), "utf8");
+      const parsed = JSON.parse(raw);
+      const mode = parsed && parsed.delegation && parsed.delegation.mode;
+      return mode === "auto" || mode === "explicit" ? mode : null;
+    } catch {
+      return null;
+    }
+  }
+
   let input;
   try {
     input = JSON.parse(process.env.JSON_INPUT || "");
@@ -91,7 +104,6 @@ JSON_INPUT="$input" REPO_ROOT="${HOOK_REPO_ROOT:-$(pwd)}" bun -e '
     { name: "chinese-subagent", pattern: /交给\s*子代理|使用多个\s*(agent|代理)|并行(调查|研究|处理|执行|agent|代理)/i },
   ];
   const trigger = triggers.find((entry) => entry.pattern.test(prompt) && !(entry.skipDiscussion && isDelegationDiscussion(prompt)));
-  if (!trigger) process.exit(0);
 
   const repoRoot = process.env.REPO_ROOT || process.cwd();
 
@@ -102,6 +114,16 @@ JSON_INPUT="$input" REPO_ROOT="${HOOK_REPO_ROOT:-$(pwd)}" bun -e '
   } catch {
     policyDelegation = {};
   }
+
+  const globalDelegationMode = readGlobalDelegationMode();
+  const effectiveDelegationMode = globalDelegationMode || (policyDelegation.mode === "auto" ? "auto" : "explicit");
+
+  const explicit = Boolean(trigger);
+  if (!explicit) {
+    if (effectiveDelegationMode !== "auto") process.exit(0);
+    if (isDelegationDiscussion(prompt)) process.exit(0);
+  }
+
   const maxAgents = Number.isInteger(policyDelegation.max_agents) ? policyDelegation.max_agents : 3;
   const maxDepth = Number.isInteger(policyDelegation.max_depth) ? policyDelegation.max_depth : 1;
   const preferredRunners =
@@ -122,17 +144,17 @@ JSON_INPUT="$input" REPO_ROOT="${HOOK_REPO_ROOT:-$(pwd)}" bun -e '
   const state = {
     version: 1,
     eligible: true,
-    explicit: true,
+    explicit,
     spawned: false,
     fallback_used: false,
-    mode: "explicit",
+    mode: explicit ? "explicit" : "auto",
     max_agents: maxAgents,
     max_depth: maxDepth,
     allow_parallel_writers: false,
-    stop_fallback: true,
+    stop_fallback: explicit,
     preferred_runners: preferredRunners,
     fallback_runner: fallbackRunner,
-    trigger: trigger.name,
+    trigger: explicit ? trigger.name : "auto-mode",
     prompt_hash: crypto.createHash("sha1").update(prompt).digest("hex"),
     scope_source: scope?.source || "unscoped",
     scope_id: scope?.id || "",
@@ -151,7 +173,9 @@ JSON_INPUT="$input" REPO_ROOT="${HOOK_REPO_ROOT:-$(pwd)}" bun -e '
   const context = [
     "[repo-harness:delegation]",
     "",
-    "The current user prompt explicitly enabled bounded delegation.",
+    explicit
+      ? "The current user prompt explicitly enabled bounded delegation."
+      : "Repo policy delegation.mode=auto is standing user authorization for bounded delegation, selected by the user at install time. This satisfies the user-authorization requirement for native subagents (spawn_agent) when the dispatch conditions below are met.",
     "",
     "Treat the active task contract (tasks/contracts/<active-plan-stem>.contract.md) as the authoritative execution brief: Goal, Scope, Allowed Paths, and Exit Criteria. Do not re-derive scope from this conversation.",
     "",

package/assets/reference-configs/external-tooling.md

@@ -41,7 +41,9 @@ brain config, package-manager globals, or user-authored sibling hook entries.
 runtime by default. Third-party tooling and CodeGraph registration stay
 readiness findings from `repo-harness setup check` unless the update command is
 run with an explicit opt-in such as `--with-external-skills` or
-`--configure-codegraph`.
+`--configure-codegraph`. Repo-local workflow refresh stays on
+`repo-harness adopt`; `setup check --check-updates` reports an Agent action when
+the current adopted repo's dry-run adoption plan has pending operations.
 
 The cross-review skills are **harness-owned and self-contained** — their source
 lives in `assets/skills/<skill>/` and they wrap the peer CLI (`codex exec` /
@@ -121,13 +123,13 @@ cd ~/.claude/skills/gstack && ./setup --host codex
 Both hosts:
 
 ```bash
-npx -y skills add tw93/Waza -g -a claude-code codex -s think hunt check health -y
+bunx skills add tw93/Waza -g -a claude-code codex -s think hunt check health -y
 ```
 
 Single host:
 
 ```bash
-npx -y skills add tw93/Waza -g -a claude-code -s think hunt check health -y
+bunx skills add tw93/Waza -g -a claude-code -s think hunt check health -y
 ```
 
 Replace `claude-code` with `codex` when installing for Codex only.
@@ -156,13 +158,13 @@ done
 Both hosts:
 
 ```bash
-npx -y skills add hylarucoder/hai-stack -g -a claude-code codex -s geju -y
+bunx skills add hylarucoder/hai-stack -g -a claude-code codex -s geju -y
 ```
 
 Single host:
 
 ```bash
-npx -y skills add hylarucoder/hai-stack -g -a claude-code -s geju -y
+bunx skills add hylarucoder/hai-stack -g -a claude-code -s geju -y
 ```
 
 Replace `claude-code` with `codex` when installing for Codex only.
@@ -204,7 +206,9 @@ command directly unless local policy explicitly opts into vendoring.
 ### Runtime Ownership Boundary
 
 `repo-harness setup check --target <host> --check-updates --json` reports the
-execution base as separate `runtime.*` checks. Keep the boundary explicit:
+execution base as separate `runtime.*` checks and reports repo-local adoption
+refresh as `repo.adopt-refresh` when the current repo has opted in. Keep the
+boundary explicit:
 
 | Capability | Owner | Required for |
 |---|---|---|
@@ -424,7 +428,7 @@ cd ~/.claude/skills/gstack && git pull && ./setup --host codex
 ### Waza
 
 ```bash
-npx -y skills update
+bunx skills update
 for d in think hunt check health; do
   rsync -a --delete ~/.agents/skills/$d/ ~/.codex/skills/$d/
 done
@@ -443,7 +447,7 @@ done
 ### hai-stack
 
 ```bash
-npx -y skills update
+bunx skills update
 rsync -a --delete ~/.agents/skills/geju/ ~/.codex/skills/geju/
 diff -qr ~/.agents/skills/geju ~/.codex/skills/geju
 ```

package/assets/skill-version.json

@@ -1,6 +1,6 @@
 {
-  "version": "0.9.0",
-  "templateVersion": "0.9.0",
+  "version": "0.9.1",
+  "templateVersion": "0.9.1",
   "skillName": "repo-harness",
   "contractId": "tasks-first-harness-v1",
   "compatibility": {
@@ -191,6 +191,10 @@
     {
       "version": "0.9.0",
       "description": "Adds a bugfix task profile with root-cause evidence gating, distills contract-brief prompts and templates, makes the agent fleet and geju first-class dependencies, adds a frontend task profile and archcontext boundary bridge, and lands the EXECUTION_BOUNDARY anti-extras clause across delegated runners"
+    },
+    {
+      "version": "0.9.1",
+      "description": "Hardens the Bun-first installer and setup-check path with bunx skills probes, PATH readback hints, and explicit Codex delegation-mode selection"
     }
   ],
   "generatedProjectStamp": {

package/assets/templates/helpers/architecture-event.ts

@@ -645,6 +645,13 @@ function findLatestMatchingFile(dir: string, token: string, extension: string):
   return files.at(-1) || "(none yet)";
 }
 
+function activePendingRequestFile(file: string): string {
+  if (!file || file === "unknown") return "(none)";
+  if (file.includes("/archive/")) return "(none)";
+  if (!existsSync(file)) return "(none)";
+  return isPendingRequest(file) ? file : "(none)";
+}
+
 function collectFiles(dir: string): string[] {
   if (!existsSync(dir)) return [];
   const files: string[] = [];
@@ -680,7 +687,7 @@ function renderContractBlock(args: Args): string {
   const severity = args.options.severity || "unknown";
   const changeType = args.options.changeType || "unknown";
   const lspProfile = args.options.lspProfile || "typescript-lsp";
-  const requestFile = args.options.requestFile || "unknown";
+  const requestFile = activePendingRequestFile(args.options.requestFile || "");
 
   return [
     "<!-- BEGIN ARCHITECTURE CONTRACT -->",

package/assets/templates/helpers/capability-resolver.ts

@@ -27,9 +27,9 @@ export type CapabilityRegistry = {
 
 // archcontext-boundaries-v1 is a deliberately narrow, read-only export of the
 // capability registry shaped as a subset of ArchitectureNode (archcontext.node/v1).
-// See tests/fixtures/archcontext/architecture-node.subset.schema.json for the
-// vendored schema subset and docs/researches/20260705-archcontext-capability-filing-handover.md
-// for why this stays a read-only bridge (no archctx runtime dependency).
+// Tests derive the bridge subset from archctx-contracts' authoritative schema;
+// docs/researches/20260705-archcontext-capability-filing-handover.md explains
+// why this stays a read-only bridge with no archctx CLI/daemon runtime dependency.
 export type ArchContextBoundaryNode = {
   schemaVersion: "archcontext.node/v1";
   id: string;

package/assets/templates/helpers/check-agent-tooling.sh

@@ -709,7 +709,7 @@ function inspectWazaSkill(host, skill, skillLock, skillItems, upstreamSkills) {
 function detectWaza() {
   const skillLockPath = path.join(HOME, ".agents", ".skill-lock.json");
   const skillLock = readJson(skillLockPath);
-  const skillsResult = run("npx", ["-y", "skills", "ls", "-g", "--json"], { timeoutMs: 1500 });
+  const skillsResult = run("bunx", ["skills", "ls", "-g", "--json"], { timeoutMs: 1500 });
   const skillItems = skillsResult.ok ? parseJson(skillsResult.stdout) || [] : [];
   const wazaEntries = Object.entries(skillLock?.skills || {}).filter(([, meta]) => meta?.source === WAZA_SOURCE_REPO);
   const upstream = fetchWazaUpstreamSkills();
@@ -815,7 +815,7 @@ function detectWaza() {
         : "Local Waza SKILL.md and shared rule files match upstream GitHub raw content.";
 
   const status = summarizeWazaStatus(hostStatuses);
-  const installCommand = `npx -y skills add tw93/Waza -g -a ${
+  const installCommand = `bunx skills add tw93/Waza -g -a ${
     hostMode === "both" ? "claude-code codex" : hostMode === "claude" ? "claude-code" : "codex"
   } -s think hunt check health -y`;
   const syncCommand = SELECTED_HOSTS.map((host) => buildWazaHostSyncCommand(host)).join(" && ");
@@ -878,8 +878,8 @@ function detectRuntimeCapabilities(waza) {
     ),
     npx: commandCapability(
       "npx",
-      "external Skills CLI bootstrap/update commands for Waza and Mermaid",
-      "external-skills-cli",
+      "no repo-harness usage; Skills CLI bootstrap/update for Waza and Mermaid runs through bunx instead",
+      "npm-registry",
       false
     ),
     skills_cli: {
@@ -889,7 +889,7 @@ function detectRuntimeCapabilities(waza) {
       owner: "external-skills-cli",
       required: false,
       required_for: "Waza/Mermaid external skill bootstrap; repo-harness reports this as an explicit exception boundary",
-      command: "npx -y skills ls -g --json",
+      command: "bunx skills ls -g --json",
     },
     bash: commandCapability(
       "bash",

package/assets/templates/helpers/context-contract-sync.sh

@@ -155,6 +155,19 @@ metadata_value() {
   ' "$file" 2>/dev/null
 }
 
+active_pending_request_file() {
+  local file="$1"
+  if [[ -z "$file" || "$file" == "unknown" || "$file" == *"/archive/"* || ! -f "$file" ]]; then
+    echo "(none)"
+    return 0
+  fi
+  if [[ "$(metadata_value "$file" "Status" | tr '[:upper:]' '[:lower:]')" == "pending" ]]; then
+    echo "$file"
+  else
+    echo "(none)"
+  fi
+}
+
 format_active_workstreams() {
   local dir="$1"
   local count=0
@@ -440,6 +453,7 @@ if [[ "$latest_snapshot" != "(none yet)" ]]; then
   semantic_diagram_source="$latest_snapshot"
 fi
 active_workstreams="$(format_active_workstreams "$workstream_dir")"
+pending_request_file="$(active_pending_request_file "${request_file:-}")"
 
 block_tmp="$(mktemp)"
 cat > "$block_tmp" <<EOF_BLOCK
@@ -466,7 +480,7 @@ cat > "$block_tmp" <<EOF_BLOCK
 - Latest snapshot: \`${latest_snapshot}\`
 - Semantic diagram source: \`${semantic_diagram_source}\`
 - Latest human diagram: \`${latest_human_diagram}\`
-- Pending architecture request: \`${request_file:-unknown}\`
+- Pending architecture request: \`${pending_request_file}\`
 
 ## Active Workstreams
 

package/install.ps1

@@ -4,6 +4,7 @@ $PackageName = "repo-harness"
 $PackageVersion = if ($env:REPO_HARNESS_VERSION) { $env:REPO_HARNESS_VERSION } else { "latest" }
 $BunInstall = if ($env:BUN_INSTALL) { $env:BUN_INSTALL } else { Join-Path $HOME ".bun" }
 $BunBin = Join-Path $BunInstall "bin"
+$OriginalPath = $env:PATH
 
 function Add-BunToPath {
   if (Test-Path $BunBin) {
@@ -49,5 +50,12 @@ if (-not $Version) {
 Write-Host "repo-harness $Version installed."
 Write-Host ""
 Write-Host "Next:"
-Write-Host "  repo-harness init"
+Write-Host "  repo-harness install"
 Write-Host "  repo-harness adopt --dry-run"
+
+$PathSep = [System.IO.Path]::PathSeparator
+if ("$PathSep$OriginalPath$PathSep" -notlike "*$PathSep$BunBin$PathSep*") {
+  Write-Host ""
+  Write-Host "To use repo-harness in new shells, add to your PATH:"
+  Write-Host "  $BunBin"
+}

package/install.sh

@@ -1,6 +1,8 @@
 #!/usr/bin/env sh
 set -eu
 
+ORIGINAL_PATH="${PATH:-}"
+
 PACKAGE_NAME="repo-harness"
 PACKAGE_VERSION="${REPO_HARNESS_VERSION:-latest}"
 
@@ -67,5 +69,14 @@ verify_repo_harness
 
 log ""
 log "Next:"
-log "  repo-harness init"
+log "  repo-harness install"
 log "  repo-harness adopt --dry-run"
+
+case ":$ORIGINAL_PATH:" in
+  *":$BUN_INSTALL_DIR/bin:"*) ;;
+  *)
+    log ""
+    log "To use repo-harness in new shells, add to your shell profile:"
+    log "  export PATH=\"$BUN_INSTALL_DIR/bin:\$PATH\""
+    ;;
+esac

package/package.json

@@ -1,6 +1,6 @@
 {
   "name": "repo-harness",
-  "version": "0.9.0",
+  "version": "0.9.1",
   "description": "Installs, migrates, audits, and repairs repo-local agentic development harnesses",
   "license": "MIT",
   "repository": {
@@ -57,6 +57,7 @@
     "@types/bun": "latest",
     "@types/cors": "^2.8.17",
     "@types/express": "^5.0.0",
+    "archctx-contracts": "0.2.1",
     "typescript": "^6.0.3"
   },
   "dependencies": {

package/scripts/AGENTS.md

@@ -37,7 +37,7 @@ Owns the workflow-engine-inspection-migration capability boundary declared in .a
 - Architecture domain: `workflow-engine`
 - Architecture capability: `inspection-migration`
 - Architecture module: `docs/architecture/modules/workflow-engine/inspection-migration.md`
-- Last architecture event: 2026-07-05T04:35:41+0800
+- Last architecture event: 2026-07-06T13:54:43+0800
 - Last changed path: `scripts/lib/project-init-lib.sh`
 - Severity: high
 - Change type: workflow-surface

package/scripts/CLAUDE.md

@@ -37,7 +37,7 @@ Owns the workflow-engine-inspection-migration capability boundary declared in .a
 - Architecture domain: `workflow-engine`
 - Architecture capability: `inspection-migration`
 - Architecture module: `docs/architecture/modules/workflow-engine/inspection-migration.md`
-- Last architecture event: 2026-07-05T04:35:41+0800
+- Last architecture event: 2026-07-06T13:54:43+0800
 - Last changed path: `scripts/lib/project-init-lib.sh`
 - Severity: high
 - Change type: workflow-surface

package/scripts/architecture-event.ts

@@ -645,6 +645,13 @@ function findLatestMatchingFile(dir: string, token: string, extension: string):
   return files.at(-1) || "(none yet)";
 }
 
+function activePendingRequestFile(file: string): string {
+  if (!file || file === "unknown") return "(none)";
+  if (file.includes("/archive/")) return "(none)";
+  if (!existsSync(file)) return "(none)";
+  return isPendingRequest(file) ? file : "(none)";
+}
+
 function collectFiles(dir: string): string[] {
   if (!existsSync(dir)) return [];
   const files: string[] = [];
@@ -680,7 +687,7 @@ function renderContractBlock(args: Args): string {
   const severity = args.options.severity || "unknown";
   const changeType = args.options.changeType || "unknown";
   const lspProfile = args.options.lspProfile || "typescript-lsp";
-  const requestFile = args.options.requestFile || "unknown";
+  const requestFile = activePendingRequestFile(args.options.requestFile || "");
 
   return [
     "<!-- BEGIN ARCHITECTURE CONTRACT -->",

package/scripts/capability-resolver.ts

@@ -27,9 +27,9 @@ export type CapabilityRegistry = {
 
 // archcontext-boundaries-v1 is a deliberately narrow, read-only export of the
 // capability registry shaped as a subset of ArchitectureNode (archcontext.node/v1).
-// See tests/fixtures/archcontext/architecture-node.subset.schema.json for the
-// vendored schema subset and docs/researches/20260705-archcontext-capability-filing-handover.md
-// for why this stays a read-only bridge (no archctx runtime dependency).
+// Tests derive the bridge subset from archctx-contracts' authoritative schema;
+// docs/researches/20260705-archcontext-capability-filing-handover.md explains
+// why this stays a read-only bridge with no archctx CLI/daemon runtime dependency.
 export type ArchContextBoundaryNode = {
   schemaVersion: "archcontext.node/v1";
   id: string;

package/scripts/check-agent-tooling.sh

@@ -709,7 +709,7 @@ function inspectWazaSkill(host, skill, skillLock, skillItems, upstreamSkills) {
 function detectWaza() {
   const skillLockPath = path.join(HOME, ".agents", ".skill-lock.json");
   const skillLock = readJson(skillLockPath);
-  const skillsResult = run("npx", ["-y", "skills", "ls", "-g", "--json"], { timeoutMs: 1500 });
+  const skillsResult = run("bunx", ["skills", "ls", "-g", "--json"], { timeoutMs: 1500 });
   const skillItems = skillsResult.ok ? parseJson(skillsResult.stdout) || [] : [];
   const wazaEntries = Object.entries(skillLock?.skills || {}).filter(([, meta]) => meta?.source === WAZA_SOURCE_REPO);
   const upstream = fetchWazaUpstreamSkills();
@@ -815,7 +815,7 @@ function detectWaza() {
         : "Local Waza SKILL.md and shared rule files match upstream GitHub raw content.";
 
   const status = summarizeWazaStatus(hostStatuses);
-  const installCommand = `npx -y skills add tw93/Waza -g -a ${
+  const installCommand = `bunx skills add tw93/Waza -g -a ${
     hostMode === "both" ? "claude-code codex" : hostMode === "claude" ? "claude-code" : "codex"
   } -s think hunt check health -y`;
   const syncCommand = SELECTED_HOSTS.map((host) => buildWazaHostSyncCommand(host)).join(" && ");
@@ -878,8 +878,8 @@ function detectRuntimeCapabilities(waza) {
     ),
     npx: commandCapability(
       "npx",
-      "external Skills CLI bootstrap/update commands for Waza and Mermaid",
-      "external-skills-cli",
+      "no repo-harness usage; Skills CLI bootstrap/update for Waza and Mermaid runs through bunx instead",
+      "npm-registry",
       false
     ),
     skills_cli: {
@@ -889,7 +889,7 @@ function detectRuntimeCapabilities(waza) {
       owner: "external-skills-cli",
       required: false,
       required_for: "Waza/Mermaid external skill bootstrap; repo-harness reports this as an explicit exception boundary",
-      command: "npx -y skills ls -g --json",
+      command: "bunx skills ls -g --json",
     },
     bash: commandCapability(
       "bash",

package/scripts/context-contract-sync.sh

@@ -155,6 +155,19 @@ metadata_value() {
   ' "$file" 2>/dev/null
 }
 
+active_pending_request_file() {
+  local file="$1"
+  if [[ -z "$file" || "$file" == "unknown" || "$file" == *"/archive/"* || ! -f "$file" ]]; then
+    echo "(none)"
+    return 0
+  fi
+  if [[ "$(metadata_value "$file" "Status" | tr '[:upper:]' '[:lower:]')" == "pending" ]]; then
+    echo "$file"
+  else
+    echo "(none)"
+  fi
+}
+
 format_active_workstreams() {
   local dir="$1"
   local count=0
@@ -440,6 +453,7 @@ if [[ "$latest_snapshot" != "(none yet)" ]]; then
   semantic_diagram_source="$latest_snapshot"
 fi
 active_workstreams="$(format_active_workstreams "$workstream_dir")"
+pending_request_file="$(active_pending_request_file "${request_file:-}")"
 
 block_tmp="$(mktemp)"
 cat > "$block_tmp" <<EOF_BLOCK
@@ -466,7 +480,7 @@ cat > "$block_tmp" <<EOF_BLOCK
 - Latest snapshot: \`${latest_snapshot}\`
 - Semantic diagram source: \`${semantic_diagram_source}\`
 - Latest human diagram: \`${latest_human_diagram}\`
-- Pending architecture request: \`${request_file:-unknown}\`
+- Pending architecture request: \`${pending_request_file}\`
 
 ## Active Workstreams
 

package/scripts/init-project.sh

@@ -345,6 +345,7 @@ EOF
     ensure_gitignore_entry .gitignore ""
     ensure_gitignore_entry .gitignore "# External references"
     ensure_gitignore_entry .gitignore "_ref/"
+    ensure_gitignore_entry .gitignore ".archcontext/"
     ensure_gitignore_entry .gitignore ".codegraph/"
     ensure_gitignore_entry .gitignore ""
     ensure_gitignore_entry .gitignore "# Local operations state"

package/scripts/lib/project-init-lib.sh

@@ -15,6 +15,7 @@ coverage/
 
 # External references
 _ref/
+.archcontext/
 .codegraph/
 
 # Local operations state
@@ -1979,7 +1980,7 @@ pi_write_harness_policy() {
     "fallback_runner": "main-thread",
     "brief_source": "tasks/contracts/<stem>.contract.md",
     "runner_rule": "the active task contract is the authoritative execution brief consumed by contract-run; native subagent (Claude) or codex-subagent (Codex's own native subagent) is an optional parallelism accelerator, preferred first per host. Degrade to codex-exec, then sequential main-thread, on the SAME contract when spawn is unavailable, sandboxed, or unreliable. Runner-availability fallback MUST be recorded in the contract-run manifest and MUST NOT silently succeed; it is a runner-availability fallback, not a product-semantics compatibility fallback.",
-    "rule": "UserPromptSubmit.delegation only injects bounded subagent context after explicit user authorization such as /delegate, /parallel, spawn subagents, or parallel investigation"
+    "rule": "UserPromptSubmit.delegation only injects bounded subagent context after explicit user authorization such as /delegate, /parallel, spawn subagents, or parallel investigation. Setting delegation.mode to \"auto\" makes UserPromptSubmit.delegation inject bounded subagent context on prompts without explicit trigger words, with explicit=false and stop_fallback disabled. The global ~/.repo-harness/config.json delegation.mode value, when exactly \"auto\" or \"explicit\", takes precedence over this repo policy value."
   },
   "sidecar_research": {
     "default": true,

package/scripts/migrate-project-template.sh

@@ -1026,6 +1026,7 @@ migrate_workflow() {
   ensure_gitignore_entry "$repo_gitignore" "*.tgz"
   ensure_gitignore_entry "$repo_gitignore" "# External references"
   ensure_gitignore_entry "$repo_gitignore" "_ref/"
+  ensure_gitignore_entry "$repo_gitignore" ".archcontext/"
   ensure_gitignore_entry "$repo_gitignore" ".codegraph/"
   ensure_gitignore_entry "$repo_gitignore" "# Local operations state"
   ensure_gitignore_entry "$repo_gitignore" "_ops/"

package/src/cli/commands/delegation-mode.ts

@@ -0,0 +1,79 @@
+/**
+ * Global Codex delegation-mode config — the write side of layer (1) in the
+ * delegation-advisor hook's resolution order: (1) this file's
+ * `delegation.mode` in `~/.repo-harness/config.json` wins; (2) repo
+ * `.ai/harness/policy.json` `delegation.mode`; (3) default "explicit". This
+ * module only owns persisting the user's global choice; the hook's read-side
+ * resolution logic is owned elsewhere.
+ *
+ * Shares `~/.repo-harness/config.json` with brain-root.ts
+ * (`repoHarnessConfigPath`), so every read/write here merges with unknown
+ * top-level keys (e.g. `brainRoot`) and unknown keys nested inside an
+ * existing `delegation` object — it never clobbers them.
+ */
+
+import * as fs from 'fs';
+import { repoHarnessConfigPath } from './brain-root';
+import { atomicWriteFileSync, deepEqual, formatJson, readJsonOrEmpty } from '../installer/shared';
+
+export type DelegationMode = 'auto' | 'explicit';
+
+export const VALID_DELEGATION_MODES: readonly DelegationMode[] = ['auto', 'explicit'];
+
+export interface RepoHarnessUserConfigWithDelegation {
+  delegation?: { mode?: DelegationMode; [key: string]: unknown };
+  [key: string]: unknown;
+}
+
+export interface ConfigureDelegationModeResult {
+  path: string;
+  mode: DelegationMode;
+  action: 'created' | 'updated' | 'unchanged';
+}
+
+function readUserConfig(env?: NodeJS.ProcessEnv): RepoHarnessUserConfigWithDelegation {
+  try {
+    const parsed = readJsonOrEmpty<RepoHarnessUserConfigWithDelegation>(repoHarnessConfigPath(env));
+    return parsed && typeof parsed === 'object' && !Array.isArray(parsed) ? parsed : {};
+  } catch (_error) {
+    return {};
+  }
+}
+
+function existingDelegationObject(config: RepoHarnessUserConfigWithDelegation): Record<string, unknown> {
+  const { delegation } = config;
+  return delegation && typeof delegation === 'object' && !Array.isArray(delegation)
+    ? (delegation as Record<string, unknown>)
+    : {};
+}
+
+/** Currently persisted global mode, if any — used as the interactive prompt's default. */
+export function configuredDelegationMode(env?: NodeJS.ProcessEnv): DelegationMode | undefined {
+  const mode = existingDelegationObject(readUserConfig(env)).mode;
+  return mode === 'auto' || mode === 'explicit' ? mode : undefined;
+}
+
+/**
+ * Persist `delegation.mode`, merging with existing top-level keys (e.g.
+ * `brainRoot`) and existing keys nested inside `delegation` itself. Reports
+ * `unchanged` when the merged result matches what's already on disk, so
+ * re-installs with the same choice don't churn the file.
+ */
+export function configureDelegationMode(
+  mode: DelegationMode,
+  env?: NodeJS.ProcessEnv,
+): ConfigureDelegationModeResult {
+  const configPath = repoHarnessConfigPath(env);
+  const current = readUserConfig(env);
+  const existed = fs.existsSync(configPath);
+  const next: RepoHarnessUserConfigWithDelegation = {
+    ...current,
+    delegation: { ...existingDelegationObject(current), mode },
+  };
+
+  if (existed && deepEqual(current, next)) {
+    return { path: configPath, mode, action: 'unchanged' };
+  }
+  atomicWriteFileSync(configPath, formatJson(next));
+  return { path: configPath, mode, action: existed ? 'updated' : 'created' };
+}

package/src/cli/commands/init-hook.ts

@@ -16,6 +16,7 @@ import { Command } from 'commander';
 import { runDoctor, type CheckStatus, type DoctorReport } from './doctor';
 import { runStatus, type StatusReport } from './status';
 import type { InstallTargetSpec } from './install';
+import { planAdoption } from '../../core/adoption/plan';
 
 export type InitHookTarget = InstallTargetSpec;
 export type InitHookStatus = 'ok' | 'attention' | 'blocked';
@@ -144,6 +145,10 @@ function verificationCommand(target: InitHookTarget, checkUpdates: boolean): str
   return `repo-harness setup check --target ${target}${checkUpdates ? ' --check-updates' : ''} --json`;
 }
 
+function shellQuoteArg(value: string): string {
+  return `'${value.replace(/'/g, "'\\''")}'`;
+}
+
 function addAction(actions: InitHookAction[], action: InitHookAction): void {
   if (actions.some((entry) => entry.id === action.id)) return;
   actions.push(action);
@@ -220,6 +225,75 @@ function statusChecks(
   return checks;
 }
 
+function adoptionRefreshCheck(
+  report: StatusReport,
+  target: InitHookTarget,
+  checkUpdates: boolean,
+  actions: InitHookAction[],
+): InitHookCheck {
+  const id = 'repo.adopt-refresh';
+  const title = 'Repo-local adoption refresh';
+  if (!checkUpdates) {
+    return {
+      id,
+      title,
+      status: 'na',
+      source: 'status',
+      detail: 'disabled; run setup check with --check-updates to evaluate repo-local adopt refresh',
+    };
+  }
+
+  if (!report.repo.inGitRepo || !report.repo.repoRoot) {
+    return {
+      id,
+      title,
+      status: 'na',
+      source: 'status',
+      detail: 'current directory is not inside a git repo',
+    };
+  }
+
+  if (!report.repo.optIn) {
+    return {
+      id,
+      title,
+      status: 'na',
+      source: 'status',
+      detail: `repo is not repo-harness adopted (${report.repo.optInMarker} missing)`,
+    };
+  }
+
+  const plan = planAdoption({ repoRoot: report.repo.repoRoot, mode: 'standard', apply: false });
+  if (plan.summary.plannedTotal === 0) {
+    return {
+      id,
+      title,
+      status: 'ok',
+      source: 'status',
+      detail: `up-to-date; ${plan.summary.total} operations skipped`,
+    };
+  }
+
+  const command = `repo-harness adopt --repo ${shellQuoteArg(report.repo.repoRoot)}`;
+  addAction(actions, {
+    id: 'repo.adopt-refresh',
+    status: 'needs_agent',
+    reason: 'The current adopted repo has pending repo-harness adoption plan operations.',
+    requires_agent: true,
+    risk: 'Updates repo-local workflow files; review the adopt dry-run first and preserve user-owned content.',
+    command,
+    targets: [report.repo.repoRoot],
+    verification: verificationCommand(target, checkUpdates),
+  });
+  return {
+    id,
+    title,
+    status: 'needs_agent',
+    source: 'status',
+    detail: `planned=${plan.summary.plannedTotal}; skipped=${plan.summary.skippedTotal}; user_owned=${plan.summary.userOwnedFilesTouched}; command=${command}`,
+  };
+}
+
 function parseActionCommand(detail: string): string | undefined {
   const direct = detail.match(/agent_action=([^;]+)/);
   if (direct) return direct[1].trim();
@@ -591,6 +665,7 @@ export function runInitHook(opts: InitHookOptions = {}): InitHookReport {
 
   const checks: InitHookCheck[] = [
     ...statusChecks(statusReport, target, checkUpdates, actions),
+    adoptionRefreshCheck(statusReport, target, checkUpdates, actions),
     ...doctorChecks(doctorReport, target, checkUpdates, actions),
     ...globalRulesChecks(target, opts.env, checkUpdates, actions),
     ...runtimeCapabilityChecks(toolingProbe.report, target, checkUpdates, actions),

package/src/cli/commands/install.ts

@@ -17,12 +17,21 @@
 
 import type { Location } from '../installer/types';
 import { ALL_TARGETS, getTarget, listTargetIds } from '../installer/targets/registry';
+import { configureDelegationMode, type DelegationMode } from './delegation-mode';
 
 export type InstallTargetSpec = 'codex' | 'claude' | 'both';
 
 export interface InstallCommandOptions {
   target: InstallTargetSpec;
   location: Location;
+  /**
+   * Codex delegation mode to persist to `~/.repo-harness/config.json`
+   * `delegation.mode`. Only takes effect for the codex/both targets at the
+   * global location; `undefined` performs no write at all (the caller
+   * resolved neither an explicit flag nor an interactive answer — never a
+   * silent default).
+   */
+  delegationMode?: DelegationMode;
 }
 
 export interface InstallCommandResult {
@@ -78,7 +87,12 @@ function runAdapterAction(action: AdapterAction, opts: InstallCommandOptions): I
 }
 
 export function runInstall(opts: InstallCommandOptions): InstallCommandResult {
-  return runAdapterAction('install', opts);
+  const result = runAdapterAction('install', opts);
+  if (opts.delegationMode !== undefined && opts.target !== 'claude' && opts.location === 'global') {
+    const outcome = configureDelegationMode(opts.delegationMode);
+    result.lines.push(`[codex] ${outcome.action}: ${outcome.path} (delegation.mode=${outcome.mode})`);
+  }
+  return result;
 }
 
 export function runUninstall(opts: InstallCommandOptions): InstallCommandResult {

package/src/cli/commands/validators.ts

@@ -8,6 +8,7 @@
 import type { InstallTargetSpec } from './install';
 import type { Location } from '../installer/types';
 import type { AdoptionMode } from '../../core/adoption/modes';
+import { VALID_DELEGATION_MODES, type DelegationMode } from './delegation-mode';
 
 // ---------------------------------------------------------------------------
 // Target
@@ -72,3 +73,17 @@ export function assertBrainMode(raw: string, commandName: string): string {
   );
   process.exit(2);
 }
+
+// ---------------------------------------------------------------------------
+// Delegation mode
+// ---------------------------------------------------------------------------
+
+export function assertDelegationMode(raw: string, commandName: string): DelegationMode {
+  if ((VALID_DELEGATION_MODES as readonly string[]).includes(raw)) {
+    return raw as DelegationMode;
+  }
+  console.error(
+    `repo-harness ${commandName}: invalid --delegation-mode "${raw}" (expected: ${VALID_DELEGATION_MODES.join(', ')})`,
+  );
+  process.exit(2);
+}

package/src/cli/index.ts

@@ -10,6 +10,7 @@ import { Command } from 'commander';
 import { createInterface } from 'readline/promises';
 import { askConfirm } from './tty-prompt';
 import { runInstall, runUninstall, type InstallTargetSpec } from './commands/install';
+import { configuredDelegationMode, type DelegationMode } from './commands/delegation-mode';
 import { runInit, runInteractiveInit, type InitBrainMode } from './commands/init';
 import { runHook } from './commands/hook';
 import { CLI_VERSION, formatStatus, runStatus } from './commands/status';
@@ -37,8 +38,10 @@ import {
   assertLocation,
   assertAdoptionMode,
   assertBrainMode,
+  assertDelegationMode,
 } from './commands/validators';
 import type { HookEvent, RouteId } from './hook/route-registry';
+import type { Location } from './installer/types';
 
 export const SUBCOMMANDS = [
   'init',
@@ -129,6 +132,64 @@ export async function resolveOptionalRuntimeDeps(
   return { externalSkills, codegraph };
 }
 
+export interface ResolveDelegationModeOptions {
+  interactive: boolean;
+  input?: NodeJS.ReadableStream;
+  output?: NodeJS.WritableStream;
+}
+
+/**
+ * Resolve the Codex delegation-mode choice for `install --location global`.
+ * Only applies to the codex/both targets at the global location — every
+ * other combination (notably --target claude) resolves to `undefined`
+ * without prompting or touching `~/.repo-harness/config.json`.
+ *
+ * Non-interactive: an explicit `--delegation-mode <mode>` always wins
+ * (validated; exits 2 on an unknown value). With no flag and no TTY, this
+ * returns `undefined` so the caller skips the config write entirely — no
+ * silent default is ever persisted.
+ *
+ * Interactive: reuses the shared Y/n `askConfirm` helper, framed as keeping
+ * vs. switching away from the resolved default (the value already persisted
+ * in `~/.repo-harness/config.json`, else "explicit").
+ */
+export async function resolveDelegationMode(
+  rawOpts: { target: InstallTargetSpec; delegationMode?: string },
+  location: Location,
+  cmd: OptionSourceLookup | undefined,
+  opts: ResolveDelegationModeOptions,
+): Promise<DelegationMode | undefined> {
+  const applies = location === 'global' && rawOpts.target !== 'claude';
+
+  if (rawOpts.delegationMode !== undefined) {
+    const validated = assertDelegationMode(rawOpts.delegationMode, 'install');
+    return applies ? validated : undefined;
+  }
+  if (!applies || !opts.interactive || cmd?.getOptionValueSource('delegationMode') === 'cli') {
+    return undefined;
+  }
+
+  const input = opts.input ?? process.stdin;
+  const output = opts.output ?? process.stdout;
+  const rl = createInterface({ input, output, terminal: false });
+  try {
+    const current = configuredDelegationMode() ?? 'explicit';
+    const other: DelegationMode = current === 'auto' ? 'explicit' : 'auto';
+    const detail = (mode: DelegationMode): string =>
+      mode === 'auto'
+        ? 'hook injects bounded-delegation context on substantive prompts; policy standing authorization'
+        : 'only on /parallel, /delegate, explicit delegation wording';
+    const keepCurrent = await askConfirm(
+      rl,
+      output,
+      `Codex delegation mode: keep "${current}" (${detail(current)}) instead of "${other}" (${detail(other)})?`,
+    );
+    return keepCurrent ? current : other;
+  } finally {
+    rl.close();
+  }
+}
+
 async function runGlobalRuntimeBootstrap(
   commandName: 'init' | 'install',
   rawOpts: GlobalRuntimeCommandOptions,
@@ -441,6 +502,10 @@ export function buildProgram(): Command {
     .description('Install the repo-harness global runtime; with --location, install only hook adapters')
     .option('--target <target>', `Target host: ${TARGET_HELP}`, 'both')
     .option('--location <location>', `Adapter-only install location: ${LOCATION_HELP}`)
+    .option(
+      '--delegation-mode <mode>',
+      'Codex delegation mode for --location global installs (codex/both targets only): auto|explicit',
+    )
     .option('--no-cli', 'Skip installing the repo-harness CLI globally')
     .option('--no-sync-skill', 'Skip refreshing repo-harness skill aliases under host skill roots')
     .option('--no-hooks', 'Skip global hook adapter installation during full runtime install')
@@ -448,16 +513,24 @@ export function buildProgram(): Command {
     .option('--no-codegraph', 'Skip CodeGraph CLI/MCP configuration')
     .option('--brain-root <path>', 'Brain vault root to persist for repo-harness brain commands')
     .option('--json', 'Output JSON instead of human-readable text')
-    .action(async (rawOpts: GlobalRuntimeCommandOptions & { location?: string }, cmd: Command) => {
+    .action(async (rawOpts: GlobalRuntimeCommandOptions & { location?: string; delegationMode?: string }, cmd: Command) => {
       const target = assertTarget(rawOpts.target, 'install');
       if (rawOpts.location === undefined) {
         await runGlobalRuntimeBootstrap('install', rawOpts, cmd);
         return;
       }
       const location = assertLocation(rawOpts.location!, 'install');
+      const interactive = process.stdin.isTTY === true && process.stdout.isTTY === true && rawOpts.json !== true;
+      const delegationMode = await resolveDelegationMode(
+        { target, delegationMode: rawOpts.delegationMode },
+        location,
+        cmd,
+        { interactive },
+      );
       const result = runInstall({
         target,
         location,
+        delegationMode,
       });
       for (const line of result.lines) console.log(line);
       process.exit(result.exitCode);