feat(dso-kknz): batch 8 — update dso shim + template to .claude/dso-config.conf

Update .claude/scripts/dso and templates/host-project/dso to read
dso.plugin_root from .claude/dso-config.conf instead of
workflow-config.conf. Migrate existing shim tests and smoke tests to
use the new config path. RED tests from dso-jfy3 now pass GREEN.

Co-Authored-By: Claude Opus 4.6 (1M context) <noreply@anthropic.com>

Author: JoeOakhartNava

.claude/scripts/dso

@@ -6,7 +6,7 @@
 #
 # DSO_ROOT resolution order:
 #   1. $CLAUDE_PLUGIN_ROOT environment variable
-#   2. dso.plugin_root key in workflow-config.conf at the git repo root
+#   2. dso.plugin_root key in .claude/dso-config.conf at the git repo root
 #   3. Exit non-zero with an error naming the config key and file
 #
 # Install this file as .claude/scripts/dso in your host project and
@@ -21,11 +21,11 @@ if [ -n "${CLAUDE_PLUGIN_ROOT:-}" ]; then
     DSO_ROOT="$CLAUDE_PLUGIN_ROOT"
 fi
 
-# (2) Fall back to workflow-config.conf in the git repo root
+# (2) Fall back to .claude/dso-config.conf in the git repo root
 if [ -z "$DSO_ROOT" ]; then
     REPO_ROOT="$(git rev-parse --show-toplevel 2>/dev/null)" || REPO_ROOT=""
-    if [ -n "$REPO_ROOT" ] && [ -f "$REPO_ROOT/workflow-config.conf" ]; then
-        DSO_ROOT="$(grep '^dso\.plugin_root=' "$REPO_ROOT/workflow-config.conf" 2>/dev/null | cut -d= -f2-)"
+    if [ -n "$REPO_ROOT" ] && [ -f "$REPO_ROOT/.claude/dso-config.conf" ]; then
+        DSO_ROOT="$(grep '^dso\.plugin_root=' "$REPO_ROOT/.claude/dso-config.conf" 2>/dev/null | cut -d= -f2-)"
     fi
 fi
 
@@ -44,7 +44,7 @@ if [ -z "$DSO_ROOT" ]; then
     printf 'dso: DSO plugin root not configured.\n' >&2
     printf 'dso: Set the CLAUDE_PLUGIN_ROOT environment variable, or add\n' >&2
     printf 'dso:   dso.plugin_root=<path-to-plugin>\n' >&2
-    printf 'dso: to workflow-config.conf in your git repository root.\n' >&2
+    printf 'dso: to .claude/dso-config.conf in your git repository root.\n' >&2
     exit 1
 fi
 

.tickets/.sync-state.json

@@ -449,8 +449,8 @@
     "last_synced": "2026-03-19T18:38:35Z",
     "local_hash": "14c516947a151a3db8bdec4010e2fd6e"
   },
-  "last_pull_timestamp": "2026-03-20T05:23:45Z",
-  "last_sync_commit": "e0183be0f300215baeb253f2fa959520e0695ab5",
+  "last_pull_timestamp": "2026-03-20T14:54:38Z",
+  "last_sync_commit": "31d524a9f30808d338ff72e0b339ad347f1f2dac",
   "w21-5cqr": {
     "jira_hash": "bce29d76f01c58613ee99cb1dd03920d",
     "jira_key": "DIG-61",

.tickets/dso-6trc.md

@@ -1,6 +1,6 @@
 ---
 id: dso-6trc
-status: in_progress
+status: closed
 deps: [dso-c2tl, dso-opue]
 links: []
 created: 2026-03-20T03:32:37Z

.tickets/dso-tuz0.md

@@ -1,6 +1,6 @@
 ---
 id: dso-tuz0
-status: open
+status: in_progress
 deps: [dso-jfy3]
 links: []
 created: 2026-03-20T03:33:02Z
@@ -52,3 +52,29 @@ Also update:
   Verify: grep -q '\.claude/dso-config\.conf' $(git rev-parse --show-toplevel)/templates/host-project/dso
 - [ ] .claude/scripts/dso active lines do not reference workflow-config.conf
   Verify: grep -v '^\s*#' $(git rev-parse --show-toplevel)/.claude/scripts/dso | grep -v 'workflow-config\.conf'
+
+## Notes
+
+**2026-03-20T05:25:42Z**
+
+CHECKPOINT 1/6: Task context loaded ✓
+
+**2026-03-20T05:25:54Z**
+
+CHECKPOINT 2/6: Code patterns understood ✓
+
+**2026-03-20T05:26:10Z**
+
+CHECKPOINT 3/6: Tests written (RED tests exist from dso-jfy3) ✓
+
+**2026-03-20T14:47:42Z**
+
+CHECKPOINT 4/6: Implementation complete ✓
+
+**2026-03-20T14:48:52Z**
+
+CHECKPOINT 5/6: Tests GREEN — 9 passed, 0 failed ✓
+
+**2026-03-20T15:09:51Z**
+
+CHECKPOINT 6/6: Done ✓ — AC verify: 4/5 AC pass. AC 'tests/run-all.sh passes' blocked by dso-setup.sh (safeguard file, requires user approval): test_setup_dso_tk_help_works fails because setup writes to workflow-config.conf but shim now reads .claude/dso-config.conf. Tracking ticket dso-5p5i created.

.tickets/dso-zlih.md

@@ -0,0 +1,18 @@
+---
+id: dso-zlih
+status: open
+deps: []
+links: []
+created: 2026-03-20T05:22:09Z
+type: task
+priority: 3
+assignee: Joe Oakhart
+---
+# Update pre-bash-functions.sh to remove CLAUDE_PLUGIN_ROOT/workflow-config.conf lookup
+
+
+## Notes
+
+**2026-03-20T05:22:16Z**
+
+pre-bash-functions.sh lines 155-159 still use CLAUDE_PLUGIN_ROOT/workflow-config.conf for config file lookup — same anti-pattern fixed in config-paths.sh (dso-6trc). Should be migrated to use read-config.sh resolution (WORKFLOW_CONFIG_FILE or git root .claude/dso-config.conf) consistently. Parent epic: dso-uc2d.

templates/host-project/dso

@@ -6,7 +6,7 @@
 #
 # DSO_ROOT resolution order:
 #   1. $CLAUDE_PLUGIN_ROOT environment variable
-#   2. dso.plugin_root key in workflow-config.conf at the git repo root
+#   2. dso.plugin_root key in .claude/dso-config.conf at the git repo root
 #   3. Exit non-zero with an error naming the config key and file
 #
 # Install this file as .claude/scripts/dso in your host project and
@@ -21,11 +21,11 @@ if [ -n "${CLAUDE_PLUGIN_ROOT:-}" ]; then
     DSO_ROOT="$CLAUDE_PLUGIN_ROOT"
 fi
 
-# (2) Fall back to workflow-config.conf in the git repo root
+# (2) Fall back to .claude/dso-config.conf in the git repo root
 if [ -z "$DSO_ROOT" ]; then
     REPO_ROOT="$(git rev-parse --show-toplevel 2>/dev/null)" || REPO_ROOT=""
-    if [ -n "$REPO_ROOT" ] && [ -f "$REPO_ROOT/workflow-config.conf" ]; then
-        DSO_ROOT="$(grep '^dso\.plugin_root=' "$REPO_ROOT/workflow-config.conf" 2>/dev/null | cut -d= -f2-)"
+    if [ -n "$REPO_ROOT" ] && [ -f "$REPO_ROOT/.claude/dso-config.conf" ]; then
+        DSO_ROOT="$(grep '^dso\.plugin_root=' "$REPO_ROOT/.claude/dso-config.conf" 2>/dev/null | cut -d= -f2-)"
     fi
 fi
 
@@ -44,7 +44,7 @@ if [ -z "$DSO_ROOT" ]; then
     printf 'dso: DSO plugin root not configured.\n' >&2
     printf 'dso: Set the CLAUDE_PLUGIN_ROOT environment variable, or add\n' >&2
     printf 'dso:   dso.plugin_root=<path-to-plugin>\n' >&2
-    printf 'dso: to workflow-config.conf in your git repository root.\n' >&2
+    printf 'dso: to .claude/dso-config.conf in your git repository root.\n' >&2
     exit 1
 fi
 

tests/scripts/test-dso-shim-plugin-root.sh

@@ -72,15 +72,15 @@ test_shim_preserves_claude_plugin_root_when_preset() {
     local preset_value="/expected/plugin/path"
     local config_path="/config/different/plugin/path"
 
-    # Create a fake git repo with a workflow-config.conf pointing to a different path.
+    # Create a fake git repo with a .claude/dso-config.conf pointing to a different path.
     # When the shim is run from this repo WITHOUT CLAUDE_PLUGIN_ROOT set in the
     # environment, DSO_ROOT resolves to config_path and the shim exports
     # CLAUDE_PLUGIN_ROOT=config_path.  The caller's pre-set value is therefore lost.
     local fake_repo="$TMPDIR_BASE/fake-preserve-test"
-    mkdir -p "$fake_repo"
+    mkdir -p "$fake_repo/.claude"
     git -C "$fake_repo" init -q
-    printf 'dso.plugin_root=%s\n' "$config_path" > "$fake_repo/workflow-config.conf"
-    git -C "$fake_repo" add workflow-config.conf
+    printf 'dso.plugin_root=%s\n' "$config_path" > "$fake_repo/.claude/dso-config.conf"
+    git -C "$fake_repo" add .claude/dso-config.conf
     git -c user.email=test@test.com -c user.name=Test -C "$fake_repo" commit -q -m "init"
 
     # Simulate: caller pre-sets CLAUDE_PLUGIN_ROOT, then calls the shim.
@@ -202,7 +202,7 @@ test_shim_preserves_claude_plugin_root_when_preset() {
 
 # ── test_shim_does_not_clobber_preset_with_config_value ──────────────────────
 # The shim must not overwrite a pre-set CLAUDE_PLUGIN_ROOT with the value from
-# workflow-config.conf when the config path DIFFERS from the env var value.
+# .claude/dso-config.conf when the config path DIFFERS from the env var value.
 #
 # RED: This test specifically constructs a scenario where the unconditional
 # re-export at lines 32-36 would overwrite the caller's value. It does this by:
@@ -220,10 +220,10 @@ test_shim_does_not_clobber_preset_with_config_value() {
     local config_path="/workflow/config/plugin/path"
 
     local fake_repo="$TMPDIR_BASE/fake-clobber-test"
-    mkdir -p "$fake_repo"
+    mkdir -p "$fake_repo/.claude"
     git -C "$fake_repo" init -q
-    printf 'dso.plugin_root=%s\n' "$config_path" > "$fake_repo/workflow-config.conf"
-    git -C "$fake_repo" add workflow-config.conf
+    printf 'dso.plugin_root=%s\n' "$config_path" > "$fake_repo/.claude/dso-config.conf"
+    git -C "$fake_repo" add .claude/dso-config.conf
     git -c user.email=test@test.com -c user.name=Test -C "$fake_repo" commit -q -m "init"
 
     # Test: CLAUDE_PLUGIN_ROOT pre-set to preset_value, shim must not change it.

tests/scripts/test-shim-smoke.sh

@@ -102,18 +102,18 @@ test_shim_error_names_missing_script() {
 
 # ── test_shim_resolves_dso_root_from_config ───────────────────────────────────
 # When CLAUDE_PLUGIN_ROOT is unset, the shim must read dso.plugin_root from
-# workflow-config.conf in the git repo root and use that path to find scripts.
+# .claude/dso-config.conf in the git repo root and use that path to find scripts.
 test_shim_resolves_dso_root_from_config() {
     if [[ ! -x "$SHIM" ]]; then
         assert_eq "test_shim_resolves_dso_root_from_config" "0" "shim-missing"
         return
     fi
-    # Create a minimal git repo with a workflow-config.conf pointing at the real plugin
+    # Create a minimal git repo with a .claude/dso-config.conf pointing at the real plugin
     local fake_repo="$TMPDIR_BASE/fake-repo"
-    mkdir -p "$fake_repo"
+    mkdir -p "$fake_repo/.claude"
     git -C "$fake_repo" init -q
-    printf 'dso.plugin_root=%s\n' "$DSO_PLUGIN_DIR" > "$fake_repo/workflow-config.conf"
-    git -C "$fake_repo" add workflow-config.conf
+    printf 'dso.plugin_root=%s\n' "$DSO_PLUGIN_DIR" > "$fake_repo/.claude/dso-config.conf"
+    git -C "$fake_repo" add .claude/dso-config.conf
     git -c user.email=test@test.com -c user.name=Test -C "$fake_repo" commit -q -m "init"
 
     local exit_code=0