Harness spec 1.1.0: one plan, prototypes and the library shared; the CLI implements it

The spec: plan_write and plan_update (new, shared, offered in every mode) and
plan_submit (now shared) keep one structured plan — findings, objectives,
phases of tasks — in place of the todo list, which lives on as a former name
of plan_write. The shared system text is one text for both projects, with
variables for what differs; the mode texts, a prototypes block and a library
block are shared. acp.md: the client hands the device what only it knows
(context, library, prototypes), the plan travels as a structure (plan_state),
library calls carry the chat's scope, and a client may rewind a session.
loop.json says its numbers as numbers. Four conformance areas: plan,
prototype, library_scope, toolcall_index.

The CLI: the plan is kept per session in the store and drawn above the prompt
and on the approval card; the prompt is assembled from the spec's texts with
their variables filled; the link reads the instance's instructions,
personalization, knowledge scope and prototype offer, sends the plan as a
structure and answers rewind; library calls to the instance carry the session
as scope; a prototype written in the terminal is saved as a file and named in
the transcript; a tool-call fragment without an index continues the last call;
the default theme is Moria; dead exports and Hermes leftovers removed.

Co-Authored-By: Claude Fable 5.1 <noreply@anthropic.com>

tests/lembas-library.test.ts

@@ -14,7 +14,7 @@ afterEach(() => {
 })
 
 function fakeLembasMcp() {
-  const calls: { auth: string; name?: string; args?: unknown }[] = []
+  const calls: { auth: string; name?: string; args?: unknown; meta?: unknown }[] = []
   const server = Bun.serve({
     port: 0,
     async fetch(req) {
@@ -35,7 +35,8 @@ function fakeLembasMcp() {
           ],
         })
       if (msg.method === "tools/call") {
-        calls.push({ auth, name: msg.params.name, args: msg.params.arguments })
+        // `_meta.lembas` alone: the SDK adds a progress token of its own beside it.
+        calls.push({ auth, name: msg.params.name, args: msg.params.arguments, ...(msg.params._meta?.lembas ? { meta: msg.params._meta.lembas } : {}) })
         return reply({ content: [{ type: "text", text: `ok: ${msg.params.name}` }], isError: false })
       }
       return Response.json({ jsonrpc: "2.0", id: msg.id, error: { code: -32601, message: "no" } })
@@ -68,6 +69,39 @@ test("the instance's library replaces this machine's, under the tools' own names
   expect(lembas.calls).toEqual([{ auth: "Bearer lmb_lib", name: "memory_add", args: { content: "Prefers tabs." } }])
 })
 
+test("a session the client gave a library scope sends its id on every call to the instance's library; base passes through", async () => {
+  const lembas = fakeLembasMcp()
+  mkdirSync(join(paths.config, "lembas"), { recursive: true })
+  writeFileSync(join(paths.config, "lembas.json"), JSON.stringify({ instances: { ai: { base_url: lembas.base, connection: "ai", logged_in_at: "" } } }))
+  writeFileSync(join(paths.config, "lembas", "ai.key"), "lmb_lib\n", { mode: 0o600 })
+  writeFileSync(join(paths.config, "connections.yaml"), "connections:\n  f:\n    dialect: openai-chat\n    base_url: http://127.0.0.1:1/v1\n    models: { m: {} }\n", { mode: 0o600 })
+  writeFileSync(join(paths.config, "config.yaml"), "model: f/m\nlibrary: lembas\n")
+  const app = createApp({ cwd: mkdtempSync(join(tmpdir(), "ph-lib-")), asker: { ask: async (): Promise<AskReply> => ({ kind: "once" }) } })
+  stops.push(() => void app.close())
+  await app.mcpReady
+  await Bun.sleep(50)
+  const search = app.engine.o.tools.find((t) => t.name === "notes_search")!
+  const ctx = () => ({ ...app.engine.o.toolCtx, signal: new AbortController().signal })
+  // Nothing said about the session's library: no scope, as before.
+  await search.run({ query: "a" } as never, ctx())
+  expect(lembas.calls[0]).toEqual({ auth: "Bearer lmb_lib", name: "notes_search", args: { query: "a" } })
+  // The client named the bases: the session's id rides on the call as _meta.lembas.scope, and
+  // the instance answers within that chat's scope (beside the SDK's own progress token); `base`
+  // is the model's word, passed untouched.
+  app.setContext({ library: { bases: [{ id: "kb1", name: "Manuals" }] } }, "ai")
+  await search.run({ query: "b", base: "Manuals" } as never, ctx())
+  expect(lembas.calls[1]).toEqual({ auth: "Bearer lmb_lib", name: "notes_search", args: { query: "b", base: "Manuals" }, meta: { scope: app.engine.sessionId } })
+  // The prompt names what the session may search.
+  expect(app.engine.o.system("manual", app.engine.model)).toContain("Knowledge searches here cover only: Manuals. Finding nothing there means nothing is there, not that the library is empty.")
+  // Said again with no bases: the account's whole library — nothing named to the model, while the
+  // scope still rides (the instance answers in the chat's data group).
+  app.setContext({ library: { bases: [] } }, "ai")
+  await search.run({ query: "c" } as never, ctx())
+  expect(lembas.calls[2]!.meta).toEqual({ scope: app.engine.sessionId })
+  expect(app.engine.o.system("manual", app.engine.model)).not.toContain("Knowledge searches here cover only")
+  expect(app.engine.o.system("manual", app.engine.model)).toContain("search it with knowledge_search")
+})
+
 test("without a login it says so and keeps this machine's library", () => {
   writeFileSync(join(paths.config, "lembas.json"), JSON.stringify({ instances: {} }))
   writeFileSync(join(paths.config, "connections.yaml"), "connections:\n  f:\n    dialect: openai-chat\n    base_url: http://127.0.0.1:1/v1\n    models: { m: {} }\n", { mode: 0o600 })