@manhd_d/ai-harness 0.12.0 → 0.14.0

package/capabilities/product/skills/harness-product-product-outcomes/SKILL.md

@@ -32,8 +32,7 @@ For customer lookup, propose task completion and observed latency as measures. W
 - Experiment does not silently expand collection or release scope
 
 ## Handoff
-State source revisions, requirement/decision IDs, approval status, unresolved questions, output paths,
-actual checks and next role. Use the module workflow; role names are not human authorization.
+Read the shared installed contract `.harness/capabilities/product/common/document-contract.md`; pass only affected scope and relevant perspectives.
 
 ## Constraints
 Follow Core permissions, clarification and project-conventions. Ask only consequential unknowns with

package/capabilities/product/skills/harness-product-product-research/SKILL.md

@@ -28,17 +28,13 @@ description: Research comparable products, user needs and implementation feasibi
 
 ## Template
 Read `.harness/capabilities/product/templates/research.md`; `aih new-doc research` creates only a missing
-draft. Reuse canonical existing documents and source pointers; never regenerate approved content by default.
+draft. Apply the shared document contract for authority, preservation and review.
 
 ## Example
 Synthetic illustration: With no browsing access, competitor claims are UNKNOWN and research questions are proposed rather than citations invented.
 
 ## Quality checklist
 - Retrieved facts, inferences and forecasts have provenance.
-- Actual decisions/status and source revisions distinguish approved facts from proposals.
-- Scope, relevant IDs, unresolved questions and verification limits are recorded.
 
 ## Handoff
-Use `.harness/capabilities/product/workflows/product-to-solution.md`; supply reviewed source/requirement
-IDs, output paths and actual owner decisions to the next BA/PO/SA/PM role as applicable. Return gaps
-to their owner; a single host may perform roles sequentially without claiming independent approval.
+Read the shared installed contract `.harness/capabilities/product/common/document-contract.md`; pass only affected scope and relevant perspectives.

package/capabilities/product/skills/harness-product-srs-generation/SKILL.md

@@ -29,17 +29,13 @@ description: Produce a testable Software Requirements Specification linked to ap
 
 ## Template
 Read `.harness/capabilities/product/templates/srs.md`; `aih new-doc srs` creates only a missing
-draft. Reuse canonical existing documents and source pointers; never regenerate approved content by default.
+draft. Apply the shared document contract for authority, preservation and review.
 
 ## Example
 Synthetic illustration: FR-001 defines search behavior; NFR-001 target is pending until agreed and is passed to Architecture for a scenario/test plan.
 
 ## Quality checklist
 - FR/NFR contracts, exception paths and trace IDs remain consistent.
-- Actual decisions/status and source revisions distinguish approved facts from proposals.
-- Scope, relevant IDs, unresolved questions and verification limits are recorded.
 
 ## Handoff
-Use `.harness/capabilities/product/workflows/product-to-solution.md`; supply reviewed source/requirement
-IDs, output paths and actual owner decisions to the next BA/PO/SA/PM role as applicable. Return gaps
-to their owner; a single host may perform roles sequentially without claiming independent approval.
+Read the shared installed contract `.harness/capabilities/product/common/document-contract.md`; pass only affected scope and relevant perspectives.

package/capabilities/product/skills/harness-product-techspec/SKILL.md

@@ -32,4 +32,4 @@ Idea: a static calculator needs UX/formula/build/accessibility evidence, no API
 Source revisions, requirement IDs, contracts, actual execution evidence and limits are distinguishable. Partial updates preserve approved text.
 
 ## Handoff
-Use `.harness/capabilities/product/workflows/techspec-maintenance.md`; pass evidence and proposed changes to review. Documentation remains pending-review until accepted.
+Read the shared installed contract `.harness/capabilities/product/common/document-contract.md`; pass only affected scope and relevant perspectives.

package/capabilities/product/skills/harness-product-traceability/SKILL.md

@@ -25,20 +25,16 @@ description: Maintain bidirectional links from document sources through BRD/PRD/
 
 ## Template
 Read `.harness/capabilities/product/templates/traceability.md`; `aih new-doc traceability` creates only a missing
-draft. Reuse canonical existing documents and source pointers; never regenerate approved content by default.
+draft. Apply the shared document contract for authority, preservation and review.
 
 ## Example
 Synthetic illustration: SRC-001 → FR-001 → US-001 → AC-US-001-01 → ADR-001/OpenSpec task/test links form a checkable chain.
 
 ## Quality checklist
 - Stable IDs, source versions and downstream gaps are maintained.
-- Actual decisions/status and source revisions distinguish approved facts from proposals.
-- Scope, relevant IDs, unresolved questions and verification limits are recorded.
 
 ## Handoff
-Use `.harness/capabilities/product/workflows/product-to-solution.md`; supply reviewed source/requirement
-IDs, output paths and actual owner decisions to the next BA/PO/SA/PM role as applicable. Return gaps
-to their owner; a single host may perform roles sequentially without claiming independent approval.
+Read the shared installed contract `.harness/capabilities/product/common/document-contract.md`; pass only affected scope and relevant perspectives.
 
 ## Continuous changes
 Extend the same matrix through scoped code/contracts and tests/raw evidence with their revisions.

package/capabilities/product/skills/harness-product-use-case-generation/SKILL.md

@@ -27,17 +27,13 @@ description: Translate requirement and story IDs into consistent main, alternati
 
 ## Template
 Read `.harness/capabilities/product/templates/use-cases.md`; `aih new-doc use-cases` creates only a missing
-draft. Reuse canonical existing documents and source pointers; never regenerate approved content by default.
+draft. Apply the shared document contract for authority, preservation and review.
 
 ## Example
 Synthetic illustration: UC-001 contains main lookup, no-result, permission denial and provider timeout paths linked to FR/AC.
 
 ## Quality checklist
 - Actor, precondition, result and alternate/error flows are explicit.
-- Actual decisions/status and source revisions distinguish approved facts from proposals.
-- Scope, relevant IDs, unresolved questions and verification limits are recorded.
 
 ## Handoff
-Use `.harness/capabilities/product/workflows/product-to-solution.md`; supply reviewed source/requirement
-IDs, output paths and actual owner decisions to the next BA/PO/SA/PM role as applicable. Return gaps
-to their owner; a single host may perform roles sequentially without claiming independent approval.
+Read the shared installed contract `.harness/capabilities/product/common/document-contract.md`; pass only affected scope and relevant perspectives.

package/capabilities/product/skills/harness-product-user-stories/SKILL.md

@@ -26,17 +26,13 @@ description: Turn approved requirements into atomic epics and user stories with
 
 ## Template
 Read `.harness/capabilities/product/templates/backlog.md`; `aih new-doc backlog` creates only a missing
-draft. Reuse canonical existing documents and source pointers; never regenerate approved content by default.
+draft. Apply the shared document contract for authority, preservation and review.
 
 ## Example
 Synthetic illustration: US-001: authorized employee finds a customer; links FR-001 and AC-US-001-01, with access-denial criteria.
 
 ## Quality checklist
 - Story has user value, dependency and observable acceptance.
-- Actual decisions/status and source revisions distinguish approved facts from proposals.
-- Scope, relevant IDs, unresolved questions and verification limits are recorded.
 
 ## Handoff
-Use `.harness/capabilities/product/workflows/product-to-solution.md`; supply reviewed source/requirement
-IDs, output paths and actual owner decisions to the next BA/PO/SA/PM role as applicable. Return gaps
-to their owner; a single host may perform roles sequentially without claiming independent approval.
+Read the shared installed contract `.harness/capabilities/product/common/document-contract.md`; pass only affected scope and relevant perspectives.

package/capabilities/product/templates/delivery-plan.md

@@ -1,18 +1,4 @@
-# Delivery plan and RAID register (optional)
+# Delivery plan — compatibility template
 
-Status: draft | PM: <person> | Planning horizon: <dates or TBD>
-
-## Milestones
-| Milestone | Scope / deliverables | Dependency | Estimate evidence | Proposed date | Accountable owner |
-| --- | --- | --- | --- | --- | --- |
-
-## RAID log
-| ID | Risk / Assumption / Issue / Dependency | Probability / impact (if evidenced) | Mitigation | Owner | Status |
-| --- | --- | --- | --- | --- | --- |
-
-## Communications / change control
-- Stakeholders and review cadence:
-- Scope change requests and PRD/BRD impact:
-- Escalation route:
-
-Never substitute invented effort, capacity or promised dates for team estimates.
+Status: draft / pending review
+Canonical template: .harness/templates/delivery-plan.md. Existing document paths remain project-owned; new-doc resolves this alias without migrating old documents.

package/cli/adapters.js

@@ -1,4 +1,5 @@
 import fs from 'node:fs';
+import { mavenModules } from './maven.js';
 import path from 'node:path';
 import { safe, readJson, manifest, HarnessError, check, loadLock, encode, digest } from './harness.js';
 import { scoreDataset } from '../scripts/score-eval.js';
@@ -23,11 +24,13 @@ function probe(root, file) {
   return fs.readFileSync(filename, 'utf8');
 }
 export function detect(root, source) {
-  const matches = [];
+  const matches = [], maven = mavenModules(root);
   for (const id of manifest(source).adapters) {
     const a = loadAdapter(source, id), evidence = [];
     for (const rule of a.detection) {
-      const body = probe(root, rule.file);
+      const probes = rule.file === 'pom.xml' ? maven.files : [{ file: rule.file, body: probe(root, rule.file) }];
+      for (const entry of probes) {
+      const body = entry.body;
       if (body === null) continue;
       let found;
       if (rule.kind === 'dependencies') {
@@ -41,7 +44,8 @@ export function detect(root, source) {
         }
         found = rule.values.filter(v => deps.has(v));
       } else found = rule.values.filter(v => body.includes(v));
-      if (found.length) evidence.push({ file: rule.file, kind: rule.kind, matched: found });
+      if (found.length) evidence.push({ file: entry.file, kind: rule.kind, matched: found });
+      }
     }
     if (evidence.length) matches.push({ id, evidence });
   }
@@ -51,8 +55,8 @@ export function detect(root, source) {
   const astroDetected = matches.some(match => match.id === 'astro');
   const filtered = matches.filter(match => !(astroDetected && match.id === 'react-nextjs'
     && !match.evidence.some(row => row.matched.includes('next'))));
-  return { status: 'ok', adapters: filtered.map(m => m.id).sort(), matches: filtered,
-    note: 'Heuristic, current target only; review evidence. No recursive monorepo scan or application execution.' };
+  return { status: 'ok', adapters: filtered.map(m => m.id).sort(), matches: filtered, warnings: maven.warnings,
+    note: 'Heuristic metadata only; bounded declared Maven modules (depth 2, 64 POMs, 4 MiB total). No application execution; other monorepos require scoped host discovery.' };
 }
 
 function installedAdapters(root) {

package/cli/agents.js

@@ -61,7 +61,7 @@ export function validateAgentConfig(config) {
     requireThat(agent.enabled === undefined || typeof agent.enabled === 'boolean', id + ' enabled');
   }
   const execution = config.execution;
-  fields(execution, ['mode', 'maxConcurrentAgents', 'maxRounds', 'autoEscalateToPremium'],
+  fields(execution, ['mode', 'maxConcurrentAgents', 'maxRounds', 'autoEscalateToPremium', 'autonomy', 'budget'],
     ['mode', 'maxConcurrentAgents', 'maxRounds', 'autoEscalateToPremium'], 'execution');
   requireThat(['single-agent', 'hybrid', 'multi-agent'].includes(execution.mode), 'execution mode');
   requireThat(Number.isSafeInteger(execution.maxConcurrentAgents) && execution.maxConcurrentAgents >= 1
@@ -70,6 +70,21 @@ export function validateAgentConfig(config) {
   requireThat(Number.isSafeInteger(execution.maxRounds) && execution.maxRounds >= 1 && execution.maxRounds <= 20,
     'maxRounds must be an integer from 1 to 20');
   requireThat(execution.autoEscalateToPremium === false, 'autoEscalateToPremium must be false; select premium explicitly');
+  if (execution.autonomy !== undefined) {
+    const a=execution.autonomy;
+    fields(a,['mode','actions','repositories'],['mode','actions','repositories'],'autonomy');
+    requireThat(['assisted','autopilot'].includes(a.mode),'autonomy mode');
+    const allowed=['read','edit','test','commit','push','create-pr','source-write','merge','release','deploy'];
+    requireThat(Array.isArray(a.actions)&&new Set(a.actions).size===a.actions.length&&a.actions.every(v=>allowed.includes(v)),'autonomy actions');
+    requireThat(Array.isArray(a.repositories)&&new Set(a.repositories).size===a.repositories.length&&a.repositories.every(v=>text(v)&&/^[A-Za-z0-9_.-]+\/[A-Za-z0-9_.-]+$/.test(v)),'autonomy repositories');
+    requireThat(a.mode!=='autopilot'||(a.actions.length>0&&a.repositories.length>0),'autopilot needs explicit actions and repository scope');
+  }
+  if (execution.budget !== undefined) {
+    const b=execution.budget;fields(b,['maxTokens','maxCost','currency'],[],'budget');
+    requireThat(b.maxTokens===undefined||(Number.isSafeInteger(b.maxTokens)&&b.maxTokens>0),'maxTokens');
+    requireThat(b.maxCost===undefined||(Number.isFinite(b.maxCost)&&b.maxCost>=0&&text(b.currency)),'maxCost/currency');
+    requireThat(b.maxTokens!==undefined||b.maxCost!==undefined,'budget needs a declared limit');
+  }
   const hosts = config.hosts ?? {};
   requireThat(isObject(hosts) && Object.keys(hosts).length <= 16, 'hosts map (max 16 profiles)');
   for (const [id, profile] of Object.entries(hosts)) {
@@ -97,10 +112,11 @@ function readConfiguration(root, relative) {
 }
 export function loadAgentConfig(root) { return readConfiguration(root, AGENT_CONFIG); }
 
-export function agentDefaults(source = SOURCE, preset = 'recommended') {
+export function agentDefaults(source = SOURCE, preset = 'recommended', host) {
   requireThat(PRESETS.includes(preset), 'unknown preset; use recommended, economy or custom');
   // Older alternate bundles remain usable; the packaged CLI supplies the new canonical seed.
-  const config = structuredClone(readConfiguration(source, DEFAULT_AGENTS) ?? readConfiguration(SOURCE, DEFAULT_AGENTS));
+  const seed = host === 'claude-code' ? 'config/agents.claude-code.json' : DEFAULT_AGENTS;
+  const config = structuredClone(readConfiguration(source, seed) ?? readConfiguration(SOURCE, seed));
   requireThat(config !== null, 'missing canonical default');
   if (preset === 'economy') {
     config.defaultModel = '@economy'; config.defaultReasoning = 'low';
@@ -120,7 +136,7 @@ export function registeredRoles(source, capabilities = []) {
     const metadata = readJson(safe(source, `capabilities/${id}/capability.json`));
     for (const file of metadata.agents ?? []) {
       const role = id + ':' + path.basename(file, '.md');
-      roles[role] = `capabilities/${id}/${file}`;
+      roles[role] = metadata.agent_aliases?.[file] ?? `capabilities/${metadata.asset_owner ?? id}/${file}`;
     }
   }
   return roles;
@@ -137,10 +153,10 @@ export function resolveAgent(config, id) {
 export function agentPlan(root, host) {
   if (host !== undefined) requireThat(typeof host === 'string' && SLUG.test(host), 'host ID');
   const config = loadAgentConfig(root);
-  const presets = [{ label: 'A', value: 'recommended', description: 'Sol, hybrid, at most two concurrent agents when supported.' },
+  const presets = [{ label: 'A', value: 'recommended', description: 'Keep the host-selected model; hybrid, at most two concurrent agents when supported.' },
     { label: 'B', value: 'economy', description: 'Economy model, single-agent roles.' },
     { label: 'C', value: 'custom', description: 'Edit provider/model/reasoning and role/host mappings explicitly.' }];
-  const note = 'Read-only declaration. No provider/model probing, native config writes, agent spawning, concurrency/token enforcement or usage tracking. Verify model access, effort and delegation in the actual host before execution.';
+  const note = 'Read-only declaration. No provider/model probing, native config writes, agent spawning, permission/concurrency/token enforcement or usage tracking. Autonomy and budget are declarations; verify actual user authorization and host limits. Verify model access, effort and delegation in the actual host before execution.';
   if (!config) return { status: 'not-configured', configured: false, presets, roles: [], note };
   const lock = readJson(safe(root, '.harness/lock.json'));
   const registry = registeredRoles(path.join(root, '.harness'), lock.capabilities ?? []);
@@ -151,9 +167,12 @@ export function agentPlan(root, host) {
     const active = requested.enabled && Object.hasOwn(registry, id);
     const mapping = profile.models?.[requested.provider + '/' + requested.model];
     const incompatible = !mapping && ((host === 'claude-code' &&
-      (!['anthropic', 'bedrock', 'vertex'].includes(requested.provider) || requested.model.startsWith('gpt-'))) ||
-      (host === 'gemini-cli' && (!['google', 'vertex'].includes(requested.provider) || requested.model.startsWith('gpt-'))));
-    return { ...requested, active, contract: registry[id] ? '.harness/' + registry[id] : null,
+      (!['host', 'anthropic', 'bedrock', 'vertex'].includes(requested.provider) || requested.model.startsWith('gpt-'))) ||
+      (host === 'gemini-cli' && (!['host', 'google', 'vertex'].includes(requested.provider) || requested.model.startsWith('gpt-'))));
+    const parts = registry[id]?.split('/');
+    const canonical = parts ? (parts[0] === 'core' ? 'core:' : parts[1] + ':') + path.basename(registry[id], '.md') : id;
+    const skills = registry[id] ? preferredSkills(fs.readFileSync(safe(path.join(root, '.harness'), registry[id]), 'utf8')) : { required: [], optional: [] };
+    return { ...requested, active, canonical_id: canonical, skills, contract: registry[id] ? '.harness/' + registry[id] : null,
       host_model: mapping ?? requested.model, host_reasoning: profile.reasoning?.[requested.reasoning] ?? requested.reasoning,
       mapping: mapping ? 'explicit-user-host-mapping' : 'requested',
       availability: active && incompatible ? 'incompatible-provider' : 'unverified',
@@ -163,3 +182,20 @@ export function agentPlan(root, host) {
     configured: true, host: host ?? null, presets, execution: config.execution, roles,
     missing_mappings: Object.keys(registry).filter(id => !Object.hasOwn(config.agents, id)), note };
 }
+
+export function preferredSkills(body) {
+  const result={required:[],optional:[]};
+  const section=body.split('## Preferred skills')[1]?.split(/\n## /)[0] ?? '';
+  for(const line of section.split(/\r?\n/)){
+    const kind=line.match(/^- (Required|Optional):/)?.[1]?.toLowerCase();if(!kind)continue;
+    result[kind].push(...[...line.matchAll(/harness-[a-z0-9-]+/g)].map(m=>m[0]));
+  }
+  for(const list of Object.values(result))if(new Set(list).size!==list.length)throw new HarnessError('Duplicate preferred skill');
+  return result;
+}
+export function validatePreferredSkills(body, known) {
+  if(!body.includes('## Preferred skills'))throw new HarnessError('Agent missing preferred skill declaration');
+  const declared=preferredSkills(body);
+  for(const name of [...declared.required,...declared.optional])if(!known.has(name))throw new HarnessError('Unknown preferred skill: '+name);
+  return declared;
+}

package/cli/capabilities.js

@@ -26,22 +26,44 @@ export function loadCapability(source, id) {
   const meta = readJson(safe(source, prefix + 'capability.json'));
   // Schema 1 supports optional role and template lists; legacy UI/UX stays valid.
   const required = ['schema_version', 'id', 'description', 'skills', 'workflows'];
-  const allowed = new Set([...required, 'agents', 'templates', 'module_version', 'requires', 'recommends', 'conflicts', 'compatible_adapters', 'verification', 'evaluation']);
+  const allowed = new Set([...required, 'agents', 'templates', 'module_version', 'requires', 'recommends', 'conflicts', 'compatible_adapters', 'verification', 'evaluation', 'asset_owner', 'template_aliases', 'agent_aliases']);
   if (!meta || typeof meta !== 'object' || Array.isArray(meta)
       || required.some(k => !Object.hasOwn(meta, k))
       || Object.keys(meta).some(k => !allowed.has(k))
       || meta.schema_version !== 1 || meta.id !== id
       || typeof meta.description !== 'string' || !meta.description.trim()) fail(`Invalid capability: ${id}`);
   validateContract(meta, 'capability', id);
+  const owner = meta.asset_owner ?? id;
+  if (typeof owner !== 'string' || !/^[a-z][a-z0-9-]*$/.test(owner)) fail('Invalid capability asset owner');
+  const assetPrefix = 'capabilities/' + owner + '/';
+  if (owner !== id) {
+    const ownerMeta = readJson(safe(source, assetPrefix + 'capability.json'));
+    if (ownerMeta?.asset_owner) fail('Capability profiles require a canonical owner');
+    const canonical = loadCapability(source, owner);
+    for (const key of ['skills','workflows','agents','templates']) {
+      if (!Array.isArray(meta[key] ?? []) || !(meta[key] ?? []).every(v => (canonical[key] ?? []).includes(v))) fail('Profile contains undeclared canonical ' + key);
+    }
+  }
+  for (const [field, list, pattern] of [
+    ['template_aliases', meta.templates ?? [], /^templates\/[a-z][a-z0-9-]*[.]md$/],
+    ['agent_aliases', meta.agents ?? [], /^core\/agents\/[a-z][a-z0-9-]*[.]md$/],
+  ]) {
+    const aliases = meta[field] ?? {};
+    if (!aliases || typeof aliases !== 'object' || Array.isArray(aliases)) fail('Invalid capability aliases');
+    for (const [from, to] of Object.entries(aliases)) {
+      if (!list.includes(from) || typeof to !== 'string' || !pattern.test(to)) fail('Invalid capability alias');
+      if (!fs.readFileSync(safe(source, to), 'utf8').trim()) fail('Empty canonical alias');
+    }
+  }
   if (!Array.isArray(meta.skills) || !meta.skills.length || !unique(meta.skills)
-      || !meta.skills.every(name => validName(name) && name.startsWith(`harness-${id}-`))) fail(`Invalid capability skills: ${id}`);
+      || !meta.skills.every(name => validName(name) && name.startsWith(`harness-${owner}-`))) fail(`Invalid capability skills: ${id}`);
   if (!Array.isArray(meta.workflows) || !meta.workflows.length || !unique(meta.workflows)
       || !meta.workflows.every(p => /^workflows\/[a-z][a-z0-9-]*\.md$/.test(p))) fail(`Invalid capability workflows: ${id}`);
   for (const name of meta.skills) {
-    skillMetadata(fs.readFileSync(safe(source, prefix + `skills/${name}/SKILL.md`), 'utf8'), name);
+    skillMetadata(fs.readFileSync(safe(source, assetPrefix + `skills/${name}/SKILL.md`), 'utf8'), name);
   }
   for (const workflow of meta.workflows) {
-    if (!fs.readFileSync(safe(source, prefix + workflow), 'utf8').trim()) fail(`Empty capability workflow: ${id}/${workflow}`);
+    if (!fs.readFileSync(safe(source, assetPrefix + workflow), 'utf8').trim()) fail(`Empty capability workflow: ${id}/${workflow}`);
   }
   for (const [kind, pattern] of [
     ['agents', new RegExp('^agents/[a-z][a-z0-9-]*[.]md$')],
@@ -50,7 +72,7 @@ export function loadCapability(source, id) {
     const entries = meta[kind] ?? [];
     if (!Array.isArray(entries) || !unique(entries) || !entries.every(p => typeof p === 'string' && pattern.test(p))) fail(`Invalid capability ${kind}: ${id}`);
     for (const file of entries) {
-      const body = fs.readFileSync(safe(source, prefix + file), 'utf8');
+      const body = fs.readFileSync(safe(source, assetPrefix + file), 'utf8');
       if (!body.trim()) fail(`Empty capability ${kind}: ${id}/${file}`);
       if (kind === 'agents' && !['## Inputs', '## Outputs', '## Permissions and limits', '## Handoff'].every(h => body.includes(h))) {
         fail(`Invalid capability agent contract: ${id}/${file}`);
@@ -65,10 +87,16 @@ export function loadCapability(source, id) {
   return { ...meta, agents: meta.agents ?? [], templates: meta.templates ?? [], checks, cases };
 }
 
+export const RETIRED_SKILLS = {
+  'harness-java-spring-kafka-outbox': 'Ask SA to assess requirements and existing contracts; no messaging pattern is selected by Harness.',
+  'harness-java-spring-database-migration': 'Use the approved SA data/deployment decision and project tooling; no universal migration recipe is installed.',
+  'harness-astro-cloudflare': 'Use approved hosting and provider documentation; Astro no longer selects a cloud provider.',
+  'harness-astro-microfrontend': 'Use approved SA module/deployment boundaries; no microfrontend recipe is installed.',
+};
 export function listCapabilities(source) {
   return (manifest(source).capabilities ?? []).map(id => {
-    const { description, skills, workflows, agents, templates, module_version, verification, evaluation } = loadCapability(source, id);
-    return { id, description, skills, workflows, agents, templates, module_version: module_version ?? null, verification: verification ?? null, evaluation: evaluation ?? null };
+    const { description, skills, workflows, agents, templates, module_version, verification, evaluation, asset_owner } = loadCapability(source, id);
+    return { id, description, skills, workflows, agents, templates, asset_owner: asset_owner ?? id, module_version: module_version ?? null, verification: verification ?? null, evaluation: evaluation ?? null };
   });
 }
 
@@ -86,7 +114,10 @@ export function skillCatalog(root, lock) {
 export function readSkill(root, lock, name) {
   if (!validName(name) || !name.startsWith('harness-')) fail('Invalid skill name');
   const relative = `.agents/skills/${name}/SKILL.md`;
-  if (!Object.hasOwn(lock.files, relative)) fail(`Skill is not installed: ${name}`);
+  if (!Object.hasOwn(lock.files, relative)) {
+    if (RETIRED_SKILLS[name]) return { status: 'planned', name, retired: true, executed: false, message: RETIRED_SKILLS[name] };
+    fail(`Skill is not installed: ${name}`);
+  }
   const content = payload(root, relative).toString('utf8');
   skillMetadata(content, name);
   return { status: 'ok', name, path: relative, content };

package/cli/checkpoint.js

@@ -0,0 +1,57 @@
+import fs from 'node:fs';
+import { safe, stat, digest, isObject, HarnessError } from './files.js';
+import { readConfig } from './project-config.js';
+import { redacted } from './verification-report.js';
+const requireThat=(v,m)=>{if(!v)throw new HarnessError('Invalid checkpoint: '+m);};
+const text=v=>typeof v==='string'&&v.trim().length>0&&v.length<=1024&&!/[\0\r\n]/.test(v);
+export function checkpointPath(id) {
+  requireThat(typeof id==='string'&&/^[a-z][a-z0-9]*(?:-[a-z0-9]+)*$/.test(id)&&id!=='archive','change ID');
+  return 'openspec/changes/'+id+'/checkpoint.json';
+}
+function references(root,rows,verify=false) {
+  requireThat(Array.isArray(rows),'reference list');
+  return rows.map(r=>{
+    requireThat(isObject(r)&&text(r.path)&&/^[a-f0-9]{64}$/.test(r.sha256),'local reference/digest');
+    const p=safe(root,r.path),info=stat(p);
+    requireThat(info?.isFile()&&info.size<=1024*1024,'reference missing/oversized');
+    const actual=digest(fs.readFileSync(p));if(verify)requireThat(actual===r.sha256,'evidence digest mismatch');
+    return {...r,current_sha256:actual,current:actual===r.sha256};
+  });
+}
+export function validateCheckpoint(root,id,row) {
+  requireThat(isObject(row)&&row.schema_version===1&&row.change_id===id,'schema/change mismatch');redacted(row);
+  requireThat(text(row.phase)&&text(row.summary)&&text(row.next_action),'phase/summary/next action');
+  requireThat(typeof row.timestamp==='string'&&/T.*(?:Z|[+-]\d\d:\d\d)$/.test(row.timestamp)&&Number.isFinite(Date.parse(row.timestamp)),'timezone timestamp');
+  references(root,row.baseline);
+  requireThat(Array.isArray(row.completed)&&Array.isArray(row.pending)&&Array.isArray(row.blockers),'task lists');
+  const ids=new Set();
+  for(const task of [...row.completed,...row.pending,...(row.in_progress?[row.in_progress]:[])]){
+    requireThat(isObject(task)&&text(task.id)&&!ids.has(task.id)&&text(task.summary),'unique task ID/summary');ids.add(task.id);
+  }
+  for(const task of row.completed)requireThat(references(root,task.evidence,true).length>0,'completed task needs evidence');
+  requireThat(row.in_progress===null||isObject(row.in_progress),'in_progress');
+  requireThat(row.blockers.every(text),'blockers');
+  requireThat(Array.isArray(row.external_sources)&&row.external_sources.every(s=>isObject(s)&&text(s.location)&&text(s.revision)),'external source declarations');
+  requireThat(Array.isArray(row.operations),'operation list');const operations=new Set();
+  for(const op of row.operations){
+    requireThat(isObject(op)&&text(op.id)&&!operations.has(op.id)&&text(op.action)&&text(op.target)&&['prepared','completed','unknown'].includes(op.status),'operation receipt');operations.add(op.id);
+    const refs=references(root,op.evidence,true);if(op.status==='completed')requireThat(refs.length>0,'completed operation needs evidence');
+  }
+  if(row.usage!==undefined){
+    requireThat(isObject(row.usage)&&text(row.usage.source),'measured usage source');
+    for(const k of ['tokens','cost','remaining_tokens'])if(row.usage[k]!==null&&row.usage[k]!==undefined)requireThat(Number.isFinite(row.usage[k])&&row.usage[k]>=0,'usage');
+    if(row.usage.cost!==null&&row.usage.cost!==undefined)requireThat(text(row.usage.currency),'cost currency');
+  }
+  return row;
+}
+export function resumePlan(root,id) {
+  const name=checkpointPath(id),row=readConfig(root,name);requireThat(row!==null,'checkpoint missing');validateCheckpoint(root,id,row);
+  const baseline=references(root,row.baseline),pendingOperations=row.operations.filter(o=>o.status!=='completed');
+  const revalidate=baseline.some(r=>!r.current);
+  return {status:row.blockers.length?'blocked':'planned',executed:false,change_id:id,checkpoint:name,
+    checkpoint_sha256:digest(fs.readFileSync(safe(root,name))),baseline,revalidate_required:revalidate,
+    phase:row.phase,summary:row.summary,completed:row.completed,pending:row.pending,in_progress:row.in_progress,blockers:row.blockers,
+    next_action:row.next_action,operations_to_reconcile:pendingOperations,
+    external_sources:row.external_sources.map(s=>({...s,availability:'unverified'})),usage:row.usage??null,
+    note:'Read-only recovery plan. Reconcile changed sources, completed evidence and unknown/prepared side effects against actual host/remote state before retrying. Receipts and usage are producer-declared; no remote operation, model or quota probe.'};
+}

package/cli/claude.js

@@ -0,0 +1,40 @@
+import fs from 'node:fs';
+import { safe, stat, HarnessError } from './files.js';
+export const CLAUDE_START = '<!-- ai-harness:claude:start -->';
+export const CLAUDE_END = '<!-- ai-harness:claude:end -->';
+export const CLAUDE_IMPORT = Buffer.from(CLAUDE_START + '\n@AGENTS.md\n' + CLAUDE_END);
+export function claudeBlock(data) {
+  const a=data.indexOf(CLAUDE_START), b=data.indexOf(CLAUDE_END);
+  if(a===-1 && b===-1)return null;
+  if(a===-1 || b<a || data.indexOf(CLAUDE_START,a+CLAUDE_START.length)!==-1 || data.indexOf(CLAUDE_END,b+CLAUDE_END.length)!==-1)
+    throw new HarnessError('CLAUDE.md has invalid Harness markers');
+  return data.subarray(a,b+CLAUDE_END.length);
+}
+function activeText(text) {
+  return text.replace(/^[ \t]*(\x60{3,}|~{3,})[^\r\n]*\r?\n[\s\S]*?^[ \t]*\1[ \t]*(?:\r?\n|$)/gm,'')
+    .replace(/\x60[^\x60\r\n]*\x60/g,'').replace(/<!--[\s\S]*?-->/g,'');
+}
+export function hasAgentsImport(text, nested=false) {
+  return new RegExp('(?:^|\\s)@' + (nested ? '\\.\\./' : '(?:\\./)?') + 'AGENTS\\.md(?=\\s|$)').test(activeText(text));
+}
+export function linkClaude(existing) {
+  const block=claudeBlock(existing);
+  if(block){if(block.toString().replaceAll('\r\n','\n')!==CLAUDE_IMPORT.toString())throw new HarnessError('CLAUDE managed import differs; reconcile before linking');return existing;}
+  if(hasAgentsImport(existing.toString('utf8')))return existing;
+  const newline=existing.includes(Buffer.from('\r\n'))?'\r\n':'\n';
+  const separator=existing.length?(existing.at(-1)===10?newline:newline+newline):'';
+  return Buffer.concat([existing,Buffer.from(separator),Buffer.from(CLAUDE_IMPORT.toString().replaceAll('\n',newline)+newline)]);
+}
+export function claudeReport(root) {
+  const files=[];
+  for(const name of ['CLAUDE.md','CLAUDE.local.md','.claude/CLAUDE.md']){
+    const p=safe(root,name),info=stat(p);if(!info)continue;
+    if(info.size>1024*1024)throw new HarnessError('Claude instruction file exceeds 1 MiB: '+name);
+    const body=fs.readFileSync(p,'utf8');
+    files.push({path:name,imports_agents:hasAgentsImport(body,name.startsWith('.claude/'))});
+  }
+  const linked=files.some(f=>f.imports_agents);
+  return {status:files.length&&!linked?'warning':'unverified',files,
+    warnings:files.length&&!linked?['Claude instructions may shadow AGENTS.md. Review actual version/settings; opt in to init/update --link-claude or configure the host to load both.']:[],
+    note:'Local import inspection only. Ancestor/global files, host version/plugin/settings and actual instruction loading are unverified; confirm with Claude /context. No native settings are changed.'};
+}

package/cli/comparison.js

@@ -0,0 +1,46 @@
+import { isObject, HarnessError } from './files.js';
+import { redacted } from './verification-report.js';
+const tasks=['spring-api','transaction-defect','maven-onboarding'];
+const metrics=['human_correction_rounds','unnecessary_questions','accepted_criteria','total_criteria','elapsed_seconds','tokens','cost'];
+const requireThat=(v,m)=>{if(!v)throw new HarnessError('Invalid real-task comparison: '+m);};
+export function comparisonTemplate(){
+ return {schema_version:1,status:'unperformed',metadata:{model:null,runtime:null,harness_commit:null,starting_commit:null,budget:null},tasks,
+   runs:tasks.flatMap(task=>['without-harness','with-harness'].flatMap(condition=>[1,2,3].map(repeat=>({task_id:task,condition,repeat,status:'UNPERFORMED',evidence:[],usage_source:null,currency:null,...Object.fromEntries(metrics.map(m=>[m,null]))}))))};
+}
+function distribution(values) {
+ if(!values.length)return {observed_runs:0,median:null,min:null,max:null};
+ const sorted=[...values].sort((a,b)=>a-b),i=Math.floor(sorted.length/2);
+ return {observed_runs:values.length,median:sorted.length%2?sorted[i]:(sorted[i-1]+sorted[i])/2,min:sorted[0],max:sorted.at(-1)};
+}
+export function summarizeComparison(report){
+ requireThat(isObject(report)&&report.schema_version===1&&isObject(report.metadata),'schema');redacted(report);
+ requireThat(Array.isArray(report.tasks)&&report.tasks.length===3&&new Set(report.tasks).size===3&&report.tasks.every(t=>typeof t==='string'&&/^[a-z][a-z0-9-]*$/.test(t)),'three unique task IDs');
+ requireThat(Array.isArray(report.runs)&&report.runs.length===18,'18 independent run slots');
+ const ids=new Set();
+ for(const row of report.runs){
+  requireThat(isObject(row)&&report.tasks.includes(row.task_id)&&['with-harness','without-harness'].includes(row.condition)&&[1,2,3].includes(row.repeat),'task/condition/repeat');
+  const id=row.task_id+'/'+row.condition+'/'+row.repeat;requireThat(!ids.has(id),'duplicate run');ids.add(id);
+  requireThat(['UNPERFORMED','COMPLETED','FAILED','INTERRUPTED','BLOCKED'].includes(row.status),'status');
+  requireThat(Array.isArray(row.evidence)&&row.evidence.every(v=>typeof v==='string'&&v.trim()&&!/[\0\r\n]/.test(v)),'evidence');
+  if(row.status!=='UNPERFORMED')requireThat(row.evidence.length>0,'observed run needs evidence');
+  for(const m of metrics){requireThat(row[m]===null||(typeof row[m]==='number'&&Number.isFinite(row[m])&&row[m]>=0),'metric '+m);
+    if(['human_correction_rounds','unnecessary_questions','accepted_criteria','total_criteria','tokens'].includes(m)&&row[m]!==null)requireThat(Number.isSafeInteger(row[m]),'integer metric '+m);
+  }
+  if(row.status==='UNPERFORMED')requireThat(metrics.every(m=>row[m]===null),'unperformed metrics must stay null');
+  if(row.accepted_criteria!==null)requireThat(row.total_criteria!==null&&row.accepted_criteria<=row.total_criteria,'accepted/total criteria');
+  if(row.tokens!==null||row.cost!==null)requireThat(typeof row.usage_source==='string'&&row.usage_source.trim(),'actual usage source');
+  if(row.cost!==null)requireThat(typeof row.currency==='string'&&row.currency.trim(),'cost currency');
+ }
+ const currencies=new Set(report.runs.filter(r=>r.cost!==null).map(r=>r.currency));
+ requireThat(currencies.size<=1,'mixed cost currencies');
+ for(const task of report.tasks)requireThat(new Set(report.runs.filter(r=>r.task_id===task&&r.total_criteria!==null).map(r=>r.total_criteria)).size<=1,'inconsistent acceptance totals');
+ const observed=report.runs.some(r=>r.status!=='UNPERFORMED');
+ if(observed)for(const key of ['model','runtime','harness_commit','starting_commit'])requireThat(typeof report.metadata[key]==='string'&&report.metadata[key].trim(),'metadata '+key);
+ const summaries=report.tasks.flatMap(task=>['without-harness','with-harness'].map(condition=>{
+  const rows=report.runs.filter(r=>r.task_id===task&&r.condition===condition);
+  return {task_id:task,condition,statuses:Object.fromEntries(['UNPERFORMED','COMPLETED','FAILED','INTERRUPTED','BLOCKED'].map(s=>[s,rows.filter(r=>r.status===s).length])),
+    metrics:Object.fromEntries(metrics.map(m=>[m,distribution(rows.map(r=>r[m]).filter(v=>v!==null))]))};
+ }));
+ return {status:'ok',executed:false,observed_runs:report.runs.filter(r=>r.status!=='UNPERFORMED').length,summaries,
+  note:'Summarizes manually supplied observations only. Null is unknown, not zero. Retain all failures/interruptions; independently review evidence, equal acceptance criteria and matching model/task/budget. No productivity claim or model execution is inferred.'};
+}

package/cli/composition.js

@@ -73,6 +73,7 @@ export function validateRegistry(source) {
   const graph = new Map();
   for (const {kind,id,data} of entries) {
     const owner=moduleRef(kind,id);
+    if (data.asset_owner && !declared.has(moduleRef('capability',data.asset_owner))) throw new HarnessError('Unknown capability asset owner');
     for (const field of ['requires','recommends','conflicts']) {
       for (const ref of data[field] ?? []) {
         if (!declared.has(ref)) throw new HarnessError(`Unknown ${field} reference ${ref} in ${owner}`);

package/cli/files.js

@@ -1,6 +1,7 @@
 import fs from 'node:fs';
 import path from 'node:path';
 import { createHash } from 'node:crypto';
+import { claudeBlock } from './claude.js';
 import { fileURLToPath } from 'node:url';
 
 // Resolve from the installed package, never the consumer's cwd or npm's bin symlink.
@@ -100,7 +101,7 @@ export function payload(root, name) {
   const filename = safe(root, name);
   if (!stat(filename)) return null;
   const data = fs.readFileSync(filename);
-  return name === 'AGENTS.md' ? block(data) : data;
+  return name === 'AGENTS.md' ? block(data) : name === 'CLAUDE.md' ? claudeBlock(data) : data;
 }
 
 export function manifest(source) {