@aihq/harness 0.2.0-rc.0 → 0.3.0

package/NOTICE

@@ -0,0 +1,41 @@
+AI Harness (aih)
+Copyright 2026 The AI Harness (aih) authors
+
+This product is licensed under the Apache License, Version 2.0 (see LICENSE).
+
+## Third-party notices
+
+Some parts of aih re-express only the *shape* or *vocabulary* of concepts from
+other open-source projects — no source was copied. These are attributed inline:
+src/internals/cli-registry.ts (@canonical/harnesses registry shape; RevealUI
+degradation vocabulary) and src/internals/sarif.ts (@razroo/isolint SARIF
+envelope shape).
+
+aih also ports policy DATA verbatim from LeanHarness
+(https://github.com/fernandonetom/lean-harness), which is MIT-licensed. The
+command-classification and risk-gate lexicons in src/guardrails/command-policy.ts
+and src/guardrails/risk-gates.ts reproduce its `.lh/policies/commands.yml` and
+`.lh/policies/risk-gates.yml` (patterns, reasons, and category names). Per the
+MIT license, its copyright and permission notice follow:
+
+    MIT License
+
+    Copyright (c) 2026 LeanHarness contributors
+
+    Permission is hereby granted, free of charge, to any person obtaining a copy
+    of this software and associated documentation files (the "Software"), to deal
+    in the Software without restriction, including without limitation the rights
+    to use, copy, modify, merge, publish, distribute, sublicense, and/or sell
+    copies of the Software, and to permit persons to whom the Software is
+    furnished to do so, subject to the following conditions:
+
+    The above copyright notice and this permission notice shall be included in
+    all copies or substantial portions of the Software.
+
+    THE SOFTWARE IS PROVIDED "AS IS", WITHOUT WARRANTY OF ANY KIND, EXPRESS OR
+    IMPLIED, INCLUDING BUT NOT LIMITED TO THE WARRANTIES OF MERCHANTABILITY,
+    FITNESS FOR A PARTICULAR PURPOSE AND NONINFRINGEMENT. IN NO EVENT SHALL THE
+    AUTHORS OR COPYRIGHT HOLDERS BE LIABLE FOR ANY CLAIM, DAMAGES OR OTHER
+    LIABILITY, WHETHER IN AN ACTION OF CONTRACT, TORT OR OTHERWISE, ARISING FROM,
+    OUT OF OR IN CONNECTION WITH THE SOFTWARE OR THE USE OR OTHER DEALINGS IN THE
+    SOFTWARE.

package/README.md

@@ -7,18 +7,22 @@
 [![Node ≥20](https://img.shields.io/badge/node-%E2%89%A520-339933.svg)](package.json)
 
 <p align="center">
-  <img src="docs/assets/aih-overview.svg" alt="aih — extract corporate trust, self-heal the runtime, tune the workstation, bootstrap a governed repo, and run AI coding safely behind any proxy" width="100%">
+  <img src="docs/assets/aih-overview.svg" alt="aih — extract corporate trust, self-heal the runtime, tune the workstation, bootstrap a governed repo, and run AI-assisted coding behind a proxy" width="100%">
 </p>
 
-A cross-platform CLI that prepares developer workstations and repositories for
-**safe, governed AI-assisted coding behind a corporate proxy**. It extracts
-corporate trust, tunes local inference, hardens repos with guardrails, wires up
+A cross-platform CLI that helps prepare developer workstations and repositories for
+**reviewable, governed AI-assisted coding behind a corporate proxy**. It extracts
+corporate trust, tunes local inference, adds repo guardrails, wires up
 MCP / observability / sandboxing, and lays down a tool-agnostic context
 architecture — all from one command surface.
 
-> Turns the architectural blueprint *"Enterprise DevSecOps AI Bootstrapping:
+> Implements the architectural blueprint *"Enterprise DevSecOps AI Bootstrapping:
 > Cryptographic Trust, Local Performance Optimization, and Unified Observability"*
-> into a real, tested product.
+> as a tested CLI.
+
+> **Provided as open-source software under Apache-2.0 on an "AS IS" basis.** No warranty,
+> support obligation, SLA, indemnity, consulting, or professional advice is provided. `aih`
+> is dry-run by default — review the plan before running `--apply`. See [DISCLAIMER.md](DISCLAIMER.md).
 
 ## Design posture
 
@@ -39,11 +43,32 @@ architecture — all from one command surface.
 
 ## Install
 
+```bash
+npm install -g @aihq/harness      # then run: aih --help
+```
+
+Verify the install's origin — every release is published with build provenance:
+
+```bash
+npm audit signatures
+```
+
+<details><summary>From source (contributors)</summary>
+
 ```bash
 npm install        # deps
 npm run build      # → dist/cli.js  (bin: aih)
 node dist/cli.js --help
 ```
+</details>
+
+## Quickstart
+
+```bash
+aih doctor              # read-only: is the workstation ready for AI coding?
+aih init .              # preview the full repo bootstrap (dry-run — nothing is written)
+aih init . --apply      # apply it
+```
 
 ## Command surface
 
@@ -59,6 +84,7 @@ node dist/cli.js --help
 | `aih scaffold` | Create the canonical context dir (`--context-dir`, default `ai-coding`) — INDEX/SKILL skeleton, an agent **`SETUP-TASKS.md`** playbook (fill context + guardrails from the code), a write-once `project-guardrails.md`, a secret deny-list, and a pre-commit hook. (Bootloaders are `bootstrap-ai`'s job.) |
 | `aih guardrails` | Generate `.gitleaks.toml`, `.pre-commit-config.yaml`, and a CI license gate that blocks AGPL/strong-copyleft. |
 | `aih secrets` | Scan for plaintext `.env*`/`secrets/` and write agent deny rules + vault-injection guidance. `--verify` is the **secret-scan CI gate** (exit 1 when plaintext secrets exist); `--sarif <file>` emits one error-level result per path for GitHub code-scanning. |
+| `aih trust` | Vet, pin, and gate external GitHub repos and skills before an agent acquires them. `scan <target>` grades danger (auto-exec hooks, dependency-confusion, typosquat, incoming-MCP, secrets) and emits SARIF; `allow`/`pin` record reviewed sources + pinned SHAs in org policy; `list`/`verify` audit the committed policy and trust-lock evidence. |
 | `aih mcp` | Generate the MCP server config **for the targeted CLIs** (`--cli`/`--all-tools`, default claude): Claude/Cursor/Kiro/Kimi get their correct project file written (`.mcp.json`, `.cursor/mcp.json`, …); Codex (TOML), Copilot, OpenCode, Zed, and global-config tools get exact per-tool guidance instead of a file aih would get wrong. Scopes: local/project/remote. For locked-down orgs, `--mode offline` (vendored local-command servers) or `--mode none` (no MCP + a CLI-tool fallback) plus a `managed-mcp.json` admin template. |
 | `aih sandbox` | Generate a devcontainer + managed sandbox settings (egress allowlist, `failIfUnavailable`). |
 | `aih telemetry` | Inject OpenTelemetry env, a redacting Bindplane collector, and an analytics fetcher (usage + skills endpoints → `{ usage_report, skills }`). |
@@ -294,8 +320,7 @@ npm run build     # tsup → dist/
 ```
 
 Stack: TypeScript (ESM) · commander · zod · vitest · biome · tsup. See
-[`.github/AGENT_TASKS.md`](.github/AGENT_TASKS.md) for architecture, the
-contributor/agent workflow, and delegatable tasks.
+[CONTRIBUTING.md](CONTRIBUTING.md) for the contributor workflow.
 
 ## License