feat: pluggable harness adapters + native multiSelect AskUserQuestion (0.11.0)

[AltanS]

Summary

Two big things ship in 0.11.0, plus UI and safety hardening:

1. Pluggable harness adapters. The single Claude-only block-grammar gate is replaced by a HarnessAdapter registry, so open-source contributors can add codex / pi / opencode without touching the core. Claude's detectors move lib/grammar/ → lib/harness/claude/. The model-generic race-guard engine (lib/harness/guard.ts) is now the only module allowed to touch the network — enforced by an import fence (fence.test.ts) and a per-adapter conformance suite (conformance.ts). See HARNESS_CONTRIBUTING.md.

2. Native multiSelect AskUserQuestion. Claude's checkbox questions up-level to tappable checkbox rows, with the terminal as the single source of truth (a digit is an XOR — no optimistic local state). Submit is a closed-loop macro: it walks the ❯ pointer onto the "Submit" row and verifies a fresh read before ever pressing Enter — it never blind-sends — then advances to the review/confirm screen.

UI

• Interactive prompts render in a bordered panel lifted off the terminal mirror (elevated option rows, leading key-digit badges, family-aware caption) — previously they were nearly invisible against the terminal.
• Keys and Quick menus dock in-flow above the controls row instead of a fixed overlay; a ResizeObserver re-pins the shrunk mirror to the bottom so the prompt/cursor stays visible.
• The "Sent" toast moves from a bottom overlay (which covered the terminal tail) to a slim row below the header.
• The build stamp marks a dirty working tree (<sha>-dirty) so the footer never claims HEAD when the build carries uncommitted work.

Safety hardening (from a 4-pass Fable review of the working tree)

All critical + medium findings implemented; low/judgment items were surfaced separately.

• Per-pane serialization of multi-select actions — two overlapping Submit macros can no longer both auto-confirm past the review screen (closes the single-device remount path; shrinks the multi-device path to the read→send window).
• The mid-walk identity check includes checkbox state, so an external flip aborts the walk rather than shipping a set the user never saw.
• Toggle digits are validated against the model; the detector requires a real "Submit" row and bails past 9 options; the incomplete-answers warning is role="alert".
• Registry prototype-chain crash guard, multi-line import-fence hole, conformance key-grammar coverage + fail-closed cohorts, dock Close-button reachability, dirty-sha robustness, long-token wrapping.

Bug fix

• Numbered-list-in-body detection in prompt-select + wizard: a plan's numbered steps inside a dialog body no longer break menu detection — the menu is taken as the trailing 1..m run, so plan-approval prompts up-level correctly.

Verification

• web: 694 tests (Vitest) · bridge: 168 tests (Bun) · both-side tsc clean · bun run build clean · scripts/check-version.sh ✓ (0.11.0 consistent across manifest, package.json, web/package.json, CHANGELOG).
• The multiSelect choreography and the ~2s Submit timing were live-verified against the collie-demo sandbox session.

🤖 Generated with Claude Code