@aihq/harness 0.2.0-rc.0 → 0.2.0

package/NOTICE

@@ -0,0 +1,41 @@
+AI Harness (aih)
+Copyright 2026 The AI Harness (aih) authors
+
+This product is licensed under the Apache License, Version 2.0 (see LICENSE).
+
+## Third-party notices
+
+Some parts of aih re-express only the *shape* or *vocabulary* of concepts from
+other open-source projects — no source was copied. These are attributed inline:
+src/internals/cli-registry.ts (@canonical/harnesses registry shape; RevealUI
+degradation vocabulary) and src/internals/sarif.ts (@razroo/isolint SARIF
+envelope shape).
+
+aih also ports policy DATA verbatim from LeanHarness
+(https://github.com/fernandonetom/lean-harness), which is MIT-licensed. The
+command-classification and risk-gate lexicons in src/guardrails/command-policy.ts
+and src/guardrails/risk-gates.ts reproduce its `.lh/policies/commands.yml` and
+`.lh/policies/risk-gates.yml` (patterns, reasons, and category names). Per the
+MIT license, its copyright and permission notice follow:
+
+    MIT License
+
+    Copyright (c) 2026 LeanHarness contributors
+
+    Permission is hereby granted, free of charge, to any person obtaining a copy
+    of this software and associated documentation files (the "Software"), to deal
+    in the Software without restriction, including without limitation the rights
+    to use, copy, modify, merge, publish, distribute, sublicense, and/or sell
+    copies of the Software, and to permit persons to whom the Software is
+    furnished to do so, subject to the following conditions:
+
+    The above copyright notice and this permission notice shall be included in
+    all copies or substantial portions of the Software.
+
+    THE SOFTWARE IS PROVIDED "AS IS", WITHOUT WARRANTY OF ANY KIND, EXPRESS OR
+    IMPLIED, INCLUDING BUT NOT LIMITED TO THE WARRANTIES OF MERCHANTABILITY,
+    FITNESS FOR A PARTICULAR PURPOSE AND NONINFRINGEMENT. IN NO EVENT SHALL THE
+    AUTHORS OR COPYRIGHT HOLDERS BE LIABLE FOR ANY CLAIM, DAMAGES OR OTHER
+    LIABILITY, WHETHER IN AN ACTION OF CONTRACT, TORT OR OTHERWISE, ARISING FROM,
+    OUT OF OR IN CONNECTION WITH THE SOFTWARE OR THE USE OR OTHER DEALINGS IN THE
+    SOFTWARE.

package/README.md

@@ -39,11 +39,32 @@ architecture — all from one command surface.
 
 ## Install
 
+```bash
+npm install -g @aihq/harness      # then run: aih --help
+```
+
+Verify the install's origin — every release is published with build provenance:
+
+```bash
+npm audit signatures
+```
+
+<details><summary>From source (contributors)</summary>
+
 ```bash
 npm install        # deps
 npm run build      # → dist/cli.js  (bin: aih)
 node dist/cli.js --help
 ```
+</details>
+
+## Quickstart
+
+```bash
+aih doctor              # read-only: is the workstation ready for AI coding?
+aih init .              # preview the full repo bootstrap (dry-run — nothing is written)
+aih init . --apply      # apply it
+```
 
 ## Command surface
 
@@ -59,6 +80,7 @@ node dist/cli.js --help
 | `aih scaffold` | Create the canonical context dir (`--context-dir`, default `ai-coding`) — INDEX/SKILL skeleton, an agent **`SETUP-TASKS.md`** playbook (fill context + guardrails from the code), a write-once `project-guardrails.md`, a secret deny-list, and a pre-commit hook. (Bootloaders are `bootstrap-ai`'s job.) |
 | `aih guardrails` | Generate `.gitleaks.toml`, `.pre-commit-config.yaml`, and a CI license gate that blocks AGPL/strong-copyleft. |
 | `aih secrets` | Scan for plaintext `.env*`/`secrets/` and write agent deny rules + vault-injection guidance. `--verify` is the **secret-scan CI gate** (exit 1 when plaintext secrets exist); `--sarif <file>` emits one error-level result per path for GitHub code-scanning. |
+| `aih trust` | Vet, pin, and gate external GitHub repos and skills before an agent acquires them. `scan <target>` grades danger (auto-exec hooks, dependency-confusion, typosquat, incoming-MCP, secrets) and emits SARIF; `allow`/`pin` record reviewed sources + pinned SHAs in org policy; `list`/`verify` audit the committed policy and trust-lock evidence. |
 | `aih mcp` | Generate the MCP server config **for the targeted CLIs** (`--cli`/`--all-tools`, default claude): Claude/Cursor/Kiro/Kimi get their correct project file written (`.mcp.json`, `.cursor/mcp.json`, …); Codex (TOML), Copilot, OpenCode, Zed, and global-config tools get exact per-tool guidance instead of a file aih would get wrong. Scopes: local/project/remote. For locked-down orgs, `--mode offline` (vendored local-command servers) or `--mode none` (no MCP + a CLI-tool fallback) plus a `managed-mcp.json` admin template. |
 | `aih sandbox` | Generate a devcontainer + managed sandbox settings (egress allowlist, `failIfUnavailable`). |
 | `aih telemetry` | Inject OpenTelemetry env, a redacting Bindplane collector, and an analytics fetcher (usage + skills endpoints → `{ usage_report, skills }`). |
@@ -294,8 +316,7 @@ npm run build     # tsup → dist/
 ```
 
 Stack: TypeScript (ESM) · commander · zod · vitest · biome · tsup. See
-[`.github/AGENT_TASKS.md`](.github/AGENT_TASKS.md) for architecture, the
-contributor/agent workflow, and delegatable tasks.
+[CONTRIBUTING.md](CONTRIBUTING.md) for the contributor workflow.
 
 ## License
 

package/dist/{chunk-S7XFTZJW.js → chunk-2P5QRFQK.js}

@@ -14602,7 +14602,7 @@ var TOOL_HINTS = {
   comby: "comby \u2014 brew install comby \xB7 bash <(curl -sL get.comby.dev)",
   jq: "jq \u2014 brew install jq \xB7 apt install jq \xB7 scoop install jq",
   gh: "GitHub CLI \u2014 brew install gh \xB7 winget install GitHub.cli \xB7 cli.github.com",
-  "code-review-graph": "pip install code-review-graph (or uvx code-review-graph serve)",
+  "code-review-graph": "pip install code-review-graph==2.3.6 (or uvx code-review-graph@2.3.6 serve)",
   claude: "Claude Code \u2014 npm i -g @anthropic-ai/claude-code",
   codex: "Codex CLI \u2014 npm i -g @openai/codex",
   cursor: "Cursor editor \u2014 cursor.com",
@@ -22322,11 +22322,13 @@ var TOOLS = [
     tool: "code-review-graph",
     bin: "code-review-graph",
     tier: "optional",
+    // Pinned to match the uvx MCP runners (src/mcp/servers.ts + src/workspace/templates.ts);
+    // bump in lockstep. PEP 508 `==` form — pip/uv reject the uvx `@2.3.6` shorthand.
     options: [
-      { pm: "uv", argv: ["uv", "tool", "install", "code-review-graph"] },
-      { pm: "pip", argv: ["pip", "install", "code-review-graph"] }
+      { pm: "uv", argv: ["uv", "tool", "install", "code-review-graph==2.3.6"] },
+      { pm: "pip", argv: ["pip", "install", "code-review-graph==2.3.6"] }
     ],
-    manual: "pip install code-review-graph"
+    manual: "pip install code-review-graph==2.3.6"
   }
 ];
 var PM_BINARIES = [
@@ -25291,7 +25293,7 @@ import { isAbsolute as isAbsolute9 } from "path";
 
 // src/program.ts
 import { Command } from "commander";
-var VERSION = "0.1.0";
+var VERSION = "0.2.0";
 function buildProgram() {
   const program = new Command();
   program.name("aih").description("Enterprise AI Bootstrapping Harness \u2014 governed, proxy-safe AI coding setup").version(VERSION).showHelpAfterError("(add --help for usage)");
@@ -25873,4 +25875,4 @@ export {
   VERSION,
   buildProgram
 };
-//# sourceMappingURL=chunk-S7XFTZJW.js.map
+//# sourceMappingURL=chunk-2P5QRFQK.js.map