@osfactory/har 0.64.2 → 1.0.0-rc.1

package/dist/templates/har-boilerplate/setup-infra.sh

@@ -1,178 +0,0 @@
-#!/usr/bin/env bash
-# Sets up shared infrastructure for all agents.
-# Starts the docker compose services listed in HARNESS_INFRA_SERVICES, creates
-# the template database (when "db" is enabled), and starts optional shared app
-# services (ecosystem.shared.config.cjs). One instance serves every agent slot.
-# Idempotent — safe to run multiple times.
-#
-# Usage: ./.har/setup-infra.sh
-set -euo pipefail
-
-SCRIPT_DIR="$(cd "$(dirname "${BASH_SOURCE[0]}")" && pwd)"
-REPO_ROOT="$(cd "$SCRIPT_DIR/.." && pwd)"
-COMPOSE_FILE="$SCRIPT_DIR/docker-compose.agent.yml"
-INFRA_STATE="$SCRIPT_DIR/state/infra.env"
-
-# shellcheck source=/dev/null
-source "$SCRIPT_DIR/harness.env"
-# shellcheck source=/dev/null
-source "$SCRIPT_DIR/agent-slot.sh"
-
-COMPOSE_PROJECT="har-${HARNESS_PROJECT_NAME}"
-PSQL="har_pg psql -d postgres"
-
-log() { echo "==> $*" >&2; }
-
-har_compose_service_running() {
-  local service="$1"
-  docker ps --filter "name=${COMPOSE_PROJECT}-${service}-1" --format '{{.Names}}' 2>/dev/null \
-    | grep -q "^${COMPOSE_PROJECT}-${service}-1\$"
-}
-
-har_resolve_infra_port() {
-  local var_name="$1"
-  local default_port="$2"
-  local scan_start="$3"
-  local scan_end="$4"
-  local service="${5:-}"
-  local current="${!var_name:-}"
-
-  if [ -n "$current" ] && { ! port_in_use "$current" || { [ -n "$service" ] && har_compose_service_running "$service"; }; }; then
-    echo "$current"
-    return 0
-  fi
-  har_allocate_port "$default_port" "$scan_start" "$scan_end"
-}
-
-mkdir -p "$(dirname "$INFRA_STATE")"
-if [ -f "$INFRA_STATE" ]; then
-  # shellcheck source=/dev/null
-  source "$INFRA_STATE"
-fi
-
-DB_PORT="$(har_resolve_infra_port AGENT_DB_PORT \
-  "${HARNESS_DB_PORT_DEFAULT:-15432}" \
-  "${HARNESS_DB_PORT_SCAN_START:-15432}" \
-  "${HARNESS_DB_PORT_SCAN_END:-15499}" \
-  db)"
-MINIO_PORT="$(har_resolve_infra_port AGENT_MINIO_PORT \
-  "${HARNESS_MINIO_PORT_DEFAULT:-19000}" \
-  "${HARNESS_MINIO_PORT_SCAN_START:-19000}" \
-  "${HARNESS_MINIO_PORT_SCAN_END:-19099}" \
-  minio)"
-MINIO_CONSOLE_PORT="$(har_resolve_infra_port AGENT_MINIO_CONSOLE_PORT \
-  "${HARNESS_MINIO_CONSOLE_PORT_DEFAULT:-19001}" \
-  "${HARNESS_MINIO_CONSOLE_PORT_SCAN_START:-19001}" \
-  "${HARNESS_MINIO_CONSOLE_PORT_SCAN_END:-19099}")"
-BROWSER_PORT="$(har_resolve_infra_port AGENT_BROWSER_PORT \
-  "${HARNESS_BROWSER_PORT_DEFAULT:-13001}" \
-  "${HARNESS_BROWSER_PORT_SCAN_START:-13001}" \
-  "${HARNESS_BROWSER_PORT_SCAN_END:-13099}" \
-  headless-browser)"
-MAILPIT_WEB_PORT="$(har_resolve_infra_port AGENT_MAILPIT_WEB_PORT \
-  "${HARNESS_MAILPIT_WEB_PORT_DEFAULT:-18025}" \
-  "${HARNESS_MAILPIT_WEB_PORT_SCAN_START:-18025}" \
-  "${HARNESS_MAILPIT_WEB_PORT_SCAN_END:-18099}" \
-  mailpit)"
-MAILPIT_SMTP_PORT="$(har_resolve_infra_port AGENT_MAILPIT_SMTP_PORT \
-  "${HARNESS_MAILPIT_SMTP_PORT_DEFAULT:-11025}" \
-  "${HARNESS_MAILPIT_SMTP_PORT_SCAN_START:-11025}" \
-  "${HARNESS_MAILPIT_SMTP_PORT_SCAN_END:-11099}")"
-
-export AGENT_DB_PORT="$DB_PORT"
-export AGENT_MINIO_PORT="$MINIO_PORT"
-export AGENT_MINIO_CONSOLE_PORT="$MINIO_CONSOLE_PORT"
-export AGENT_BROWSER_PORT="$BROWSER_PORT"
-export AGENT_MAILPIT_WEB_PORT="$MAILPIT_WEB_PORT"
-export AGENT_MAILPIT_SMTP_PORT="$MAILPIT_SMTP_PORT"
-
-cat > "$INFRA_STATE" <<EOF
-# Persisted by setup-infra.sh — host ports for shared docker compose services.
-export AGENT_DB_PORT=${DB_PORT}
-export AGENT_MINIO_PORT=${MINIO_PORT}
-export AGENT_MINIO_CONSOLE_PORT=${MINIO_CONSOLE_PORT}
-export AGENT_BROWSER_PORT=${BROWSER_PORT}
-export AGENT_MAILPIT_WEB_PORT=${MAILPIT_WEB_PORT}
-export AGENT_MAILPIT_SMTP_PORT=${MAILPIT_SMTP_PORT}
-EOF
-
-SERVICES="${HARNESS_INFRA_SERVICES:-}"
-
-if [ -n "$SERVICES" ]; then
-  log "Starting shared infrastructure (project: $COMPOSE_PROJECT): $SERVICES"
-  AGENT_DB_PORT="$DB_PORT" \
-  AGENT_MINIO_PORT="$MINIO_PORT" \
-  AGENT_MINIO_CONSOLE_PORT="$MINIO_CONSOLE_PORT" \
-  AGENT_BROWSER_PORT="$BROWSER_PORT" \
-  AGENT_MAILPIT_WEB_PORT="$MAILPIT_WEB_PORT" \
-  AGENT_MAILPIT_SMTP_PORT="$MAILPIT_SMTP_PORT" \
-    docker compose -p "$COMPOSE_PROJECT" -f "$COMPOSE_FILE" up -d $SERVICES
-else
-  log "No shared infra services enabled in harness.env (HARNESS_INFRA_SERVICES)"
-fi
-
-# Wait for PostgreSQL and prepare the template database
-if har_infra_enabled db; then
-  log "Waiting for PostgreSQL on port $DB_PORT..."
-  for i in $(seq 1 30); do
-    if har_pg pg_isready -q 2>/dev/null; then
-      log "PostgreSQL is ready."
-      break
-    fi
-    if [ "$i" = "30" ]; then
-      echo "Error: PostgreSQL did not become ready within 30 seconds." >&2
-      exit 1
-    fi
-    sleep 1
-  done
-
-  log "Enabling pg_stat_statements extension..."
-  $PSQL -c "CREATE EXTENSION IF NOT EXISTS pg_stat_statements" 2>/dev/null || true
-
-  if [ -n "${HARNESS_TEMPLATE_DB:-}" ]; then
-    if $PSQL -tAc "SELECT 1 FROM pg_database WHERE datname = '$HARNESS_TEMPLATE_DB'" | grep -q 1; then
-      log "Template database '$HARNESS_TEMPLATE_DB' already exists. Skipping creation."
-    else
-      log "Creating template database '$HARNESS_TEMPLATE_DB'..."
-      $PSQL -c "CREATE DATABASE $HARNESS_TEMPLATE_DB"
-
-      if [ -n "${HARNESS_DB_MIGRATE_CMD:-}" ] && [ "$HARNESS_DB_MIGRATE_CMD" != "echo 'TODO: set migrate command'" ]; then
-        log "Running migrations..."
-        PGPASSWORD=password PGHOST=localhost PGPORT="$DB_PORT" PGUSER=postgres \
-          PGDATABASE="$HARNESS_TEMPLATE_DB" \
-          bash -c "cd '$REPO_ROOT' && $HARNESS_DB_MIGRATE_CMD"
-      fi
-
-      if [ -n "${HARNESS_DB_SEED_CMD:-}" ] && [ "$HARNESS_DB_SEED_CMD" != "echo 'TODO: set seed command'" ]; then
-        log "Running seeds..."
-        PGPASSWORD=password PGHOST=localhost PGPORT="$DB_PORT" PGUSER=postgres \
-          PGDATABASE="$HARNESS_TEMPLATE_DB" \
-          bash -c "cd '$REPO_ROOT' && $HARNESS_DB_SEED_CMD"
-      fi
-
-      log "Marking '$HARNESS_TEMPLATE_DB' as a PostgreSQL template..."
-      $PSQL -c "UPDATE pg_database SET datistemplate = true WHERE datname = '$HARNESS_TEMPLATE_DB'"
-      log "Template database ready: $HARNESS_TEMPLATE_DB"
-    fi
-  fi
-fi
-
-# Shared app services — supporting services of a monolith/monorepo that agents
-# depend on but do not modify. Started ONCE on fixed ports, shared by all slots.
-# Create .har/ecosystem.shared.config.cjs (PM2 format, processes named
-# "har-${HARNESS_PROJECT_NAME}-shared-<name>") only when the primary app needs
-# sibling services running.
-SHARED_ECOSYSTEM="$SCRIPT_DIR/ecosystem.shared.config.cjs"
-if [ -f "$SHARED_ECOSYSTEM" ]; then
-  log "Starting shared app services from ecosystem.shared.config.cjs..."
-  (cd "$REPO_ROOT" && $(har_pkg_exec) pm2 startOrReload "$SHARED_ECOSYSTEM" >/dev/null)
-  log "Shared app services running (pm2 ls | grep har-${HARNESS_PROJECT_NAME}-shared-)."
-fi
-
-echo ""
-log "Infrastructure is ready."
-har_infra_enabled db               && log "  PostgreSQL: localhost:$DB_PORT"
-har_infra_enabled minio            && log "  MinIO:      http://localhost:${MINIO_CONSOLE_PORT}"
-har_infra_enabled headless-browser && log "  Browser:    http://localhost:${BROWSER_PORT}"
-har_infra_enabled mailpit          && log "  Mailpit:    http://localhost:${MAILPIT_WEB_PORT}"
-exit 0

package/dist/templates/har-boilerplate/stages/README.sh

@@ -1,11 +0,0 @@
-#!/usr/bin/env bash
-# Per-stage scripts live here (e.g. ./.har/stages/browser-e2e.sh <agent-id>).
-#
-# Read .har/STAGES.md for the authoring guide: the stage script contract,
-# command vs script stages, and how verificationStages controls verify --full.
-#
-# Scaffold a new one with:
-#   har env add-stage <id> --custom --script
-
-echo "Add stage scripts under .har/stages/ and register them in stages.json — see .har/STAGES.md." >&2
-exit 1

package/dist/templates/har-boilerplate/teardown.sh

@@ -1,87 +0,0 @@
-#!/usr/bin/env bash
-# Safely tears down one agent: stops PM2, drops DB, removes bucket, cleans up files.
-# The session's git branch is KEPT by default so you can push it / open a PR —
-# pass --delete-branch to remove it too.
-#
-# Usage: ./.har/teardown.sh <agent-id> [--delete-branch]
-set -euo pipefail
-
-SCRIPT_DIR="$(cd "$(dirname "${BASH_SOURCE[0]}")" && pwd)"
-REPO_ROOT="$(cd "$SCRIPT_DIR/.." && pwd)"
-
-# shellcheck source=/dev/null
-source "$SCRIPT_DIR/harness.env"
-# shellcheck source=/dev/null
-source "$SCRIPT_DIR/agent-slot.sh"
-
-AGENT_ID="${1:?Usage: teardown.sh <agent-id> [--delete-branch]}"
-DELETE_BRANCH=false
-
-for arg in "${@:2}"; do
-  case "$arg" in
-    --delete-branch) DELETE_BRANCH=true ;;
-  esac
-done
-
-validate_agent_id "$AGENT_ID"
-
-echo "==> Tearing down agent ${AGENT_ID}..."
-
-# Resolve the session from the registry; fall back to the legacy fixed path so
-# pre-registry sessions stay removable.
-REGISTRY_FILE="$(slot_registry_file "$AGENT_ID")"
-WORKTREE_PATH=""
-WORK_DIR=""
-BRANCH=""
-if [ -f "$REGISTRY_FILE" ]; then
-  WORKTREE_PATH="$(read_slot_field "$REGISTRY_FILE" worktreePath || true)"
-  WORK_DIR="$(read_slot_field "$REGISTRY_FILE" workDir || true)"
-  BRANCH="$(read_slot_field "$REGISTRY_FILE" branch || true)"
-fi
-[ -n "$WORKTREE_PATH" ] || WORKTREE_PATH="$HOME/worktrees/${HARNESS_PROJECT_NAME}-agent-${AGENT_ID}"
-
-PM2_REGEX="$(har_pm2_delete_regex "$AGENT_ID")"
-$(har_pkg_exec) pm2 delete "$PM2_REGEX" 2>/dev/null || true
-echo "✓ Stopped PM2 processes"
-
-if har_infra_enabled db; then
-  har_pg psql -d postgres -c \
-    "SELECT pg_terminate_backend(pid) FROM pg_stat_activity WHERE datname='agent_${AGENT_ID}';" \
-    >/dev/null 2>&1 || true
-  har_pg dropdb --if-exists "agent_${AGENT_ID}" 2>/dev/null || true
-  echo "✓ Dropped database: agent_${AGENT_ID}"
-fi
-
-if har_infra_enabled minio; then
-  curl -sf -X DELETE "http://minioadmin:minioadmin@localhost:19000/agent-${AGENT_ID}?force=true" \
-    >/dev/null 2>&1 || true
-  echo "✓ Removed MinIO bucket: agent-${AGENT_ID}"
-fi
-
-rm -f "$REPO_ROOT/.env.agent.${AGENT_ID}"
-rm -f "$REPO_ROOT/ecosystem.agent.${AGENT_ID}.config.cjs"
-if [ -n "$WORK_DIR" ] && [ -d "$WORK_DIR" ]; then
-  rm -f "$WORK_DIR/.env.agent.${AGENT_ID}"
-  rm -f "$WORK_DIR/ecosystem.agent.${AGENT_ID}.config.cjs"
-fi
-
-if [ -d "$WORKTREE_PATH" ]; then
-  rm -f "$WORKTREE_PATH/.env.agent.${AGENT_ID}"
-  rm -f "$WORKTREE_PATH/ecosystem.agent.${AGENT_ID}.config.cjs"
-  git -C "$REPO_ROOT" worktree remove "$WORKTREE_PATH" --force 2>/dev/null || rm -rf "$WORKTREE_PATH"
-  echo "✓ Removed worktree: $WORKTREE_PATH"
-fi
-git -C "$REPO_ROOT" worktree prune 2>/dev/null || true
-
-if [ -n "$BRANCH" ]; then
-  if [ "$DELETE_BRANCH" = true ]; then
-    git -C "$REPO_ROOT" branch -D "$BRANCH" 2>/dev/null || true
-    echo "✓ Deleted branch: $BRANCH"
-  else
-    echo "✓ Kept branch: $BRANCH (push it or delete with: git branch -D $BRANCH)"
-  fi
-fi
-
-remove_slot_registry "$AGENT_ID"
-
-echo "✓ Agent ${AGENT_ID} torn down"

package/dist/templates/har-boilerplate/verify.sh

@@ -1,249 +0,0 @@
-#!/usr/bin/env bash
-# Progressive verification pipeline for an agent environment.
-# Outputs JSON to stdout (machine contract), human-readable progress to stderr.
-# Passing steps omit `output`. `har env verify` streams progress only.
-#
-# Usage: ./.har/verify.sh <agent-id> [--full]
-#
-# Quick (default): ecosystem smoke + health only
-# Full (--full):   + conventional tests, lint, readiness, and every registered
-#                  stage in stages.json verificationStages (see .har/STAGES.md)
-# Stock steps are examples. Replace them during adaptation to match this repo.
-set -euo pipefail
-
-SCRIPT_DIR="$(cd "$(dirname "${BASH_SOURCE[0]}")" && pwd)"
-REPO_ROOT="$(cd "$SCRIPT_DIR/.." && pwd)"
-
-# shellcheck source=/dev/null
-source "$SCRIPT_DIR/harness.env"
-# shellcheck source=/dev/null
-source "$SCRIPT_DIR/agent-slot.sh"
-
-AGENT_ID="${1:?Usage: verify.sh <agent-id> [--full]}"
-FULL=""
-
-for arg in "${@:2}"; do
-  [ "$arg" = "--full" ] && FULL=1
-done
-
-validate_agent_id "$AGENT_ID"
-
-API_PORT=$(( HARNESS_API_BASE_PORT + AGENT_ID * 10 ))
-
-ENV_FILE="$(resolve_agent_env_file "$AGENT_ID" "$REPO_ROOT")" || {
-  echo "No .env.agent.${AGENT_ID} found." >&2
-  har_suggest_launch "$AGENT_ID" >&2
-  exit 1
-}
-
-set -a
-# shellcheck source=/dev/null
-source "$ENV_FILE"
-set +a
-
-WORK_DIR="$(resolve_agent_work_dir "$ENV_FILE")"
-API_PORT="${API_PORT:-$(( HARNESS_API_BASE_PORT + AGENT_ID * 10 ))}"
-
-echo "==> Verifying agent ${AGENT_ID} (work dir: ${WORK_DIR})..." >&2
-REG_FILE="$(slot_registry_file "$AGENT_ID")"
-echo "    Work dir: ${WORK_DIR}" >&2
-echo "    Env file: ${ENV_FILE}" >&2
-if [ -f "$REG_FILE" ]; then
-  echo "    Registry: ${REG_FILE}" >&2
-else
-  echo "    Registry: missing (${REG_FILE})" >&2
-fi
-
-OVERALL_PASS=true
-START_TOTAL=$(now_ms)
-RESULTS_JSON="[]"
-
-run_step() {
-  local name="$1"
-  local cmd="$2"
-  local start end elapsed exit_code output
-
-  printf "  → %-40s" "$name..." >&2
-  start=$(now_ms)
-
-  set +e
-  output=$(cd "$WORK_DIR" && set -a && . "$ENV_FILE" && set +a && eval "$cmd" 2>&1)
-  exit_code=$?
-  set -e
-
-  end=$(now_ms)
-  elapsed=$(( end - start ))
-
-  local pass_bool
-  if [ "$exit_code" = "0" ]; then
-    echo "✓ (${elapsed}ms)" >&2
-    pass_bool="true"
-  else
-    echo "✗ (${elapsed}ms)" >&2
-    echo "$output" | head -30 | sed 's/^/    /' >&2
-    pass_bool="false"
-    OVERALL_PASS=false
-  fi
-
-  record_step_result "$name" "$pass_bool" "$elapsed" "$output"
-
-  if [ "$pass_bool" = "false" ] && [ -z "$FULL" ]; then
-    return 1
-  fi
-}
-
-run_http_step() {
-  local name="$1"
-  local url="$2"
-  local start end elapsed exit_code output
-
-  printf "  → %-40s" "$name..." >&2
-  start=$(now_ms)
-
-  set +e
-  output=$(curl -sf "$url" 2>&1)
-  exit_code=$?
-  set -e
-
-  end=$(now_ms)
-  elapsed=$(( end - start ))
-
-  local pass_bool
-  if [ "$exit_code" = "0" ]; then
-    echo "✓ (${elapsed}ms)" >&2
-    pass_bool="true"
-  else
-    echo "✗ (${elapsed}ms)" >&2
-    pass_bool="false"
-    OVERALL_PASS=false
-  fi
-
-  record_step_result "$name" "$pass_bool" "$elapsed" "$output"
-
-  if [ "$pass_bool" = "false" ] && [ -z "$FULL" ]; then
-    return 1
-  fi
-}
-
-node_package_script_exists() {
-  local script="$1"
-  "${NODE_BIN:-node}" -e "
-const fs = require('fs');
-const pkg = JSON.parse(fs.readFileSync('package.json', 'utf8'));
-const script = process.argv[1];
-process.exit(pkg.scripts && pkg.scripts[script] ? 0 : 1);
-" "$script"
-}
-
-run_node_script_or_skip() {
-  local name="$1"
-  local script="$2"
-  if node_package_script_exists "$script"; then
-    run_step "$name" "${NPM_BIN:-npm} run ${script}"
-  else
-    run_step "$name" "echo 'No ${script} script configured; skipping.'"
-  fi
-}
-
-run_node_quick_smoke() {
-  if node_package_script_exists typecheck; then
-    run_step "node-typecheck" '${NPM_BIN:-npm} run typecheck'
-  elif node_package_script_exists build; then
-    run_step "node-build" '${NPM_BIN:-npm} run build'
-  else
-    run_step "node-package-load" '${NODE_BIN:-node} -e "require(\"./package.json\")"'
-  fi
-}
-
-run_quick_smoke() {
-  case "${HARNESS_ECOSYSTEM:-none}" in
-    node)
-      run_node_quick_smoke
-      ;;
-    python)
-      run_step "python-compile" '${PYTHON_BIN:-python3} -m compileall -q .'
-      ;;
-    go)
-      run_step "go-build" '${GO_BIN:-go} build ./...'
-      ;;
-    rust)
-      run_step "rust-check" '${CARGO_BIN:-cargo} check'
-      ;;
-    java)
-      run_step "java-compile" 'if [ -x ./mvnw ]; then ./mvnw -q -DskipTests compile; elif command -v mvn >/dev/null 2>&1; then mvn -q -DskipTests compile; elif [ -x ./gradlew ]; then ./gradlew classes; elif command -v gradle >/dev/null 2>&1; then gradle classes; else echo "No Maven/Gradle command found; adapt verify.sh for this Java repo."; fi'
-      ;;
-    ruby)
-      run_step "ruby-smoke" '${RUBY_BIN:-ruby} -e "puts RUBY_VERSION"'
-      ;;
-    custom|none|*)
-      run_step "smoke-not-configured" 'echo "No stock smoke for HARNESS_ECOSYSTEM=${HARNESS_ECOSYSTEM:-none}; adapt .har/verify.sh for this repo."'
-      ;;
-  esac
-}
-
-run_full_checks() {
-  case "${HARNESS_ECOSYSTEM:-none}" in
-    node)
-      run_node_script_or_skip "unit-tests" test || true
-      run_node_script_or_skip "lint" lint || true
-      ;;
-    python)
-      run_step "unit-tests" 'if ${PYTHON_BIN:-python3} -c "import pytest" >/dev/null 2>&1; then ${PYTHON_BIN:-python3} -m pytest -q; else echo "pytest not installed; adapt verify.sh for this Python repo."; fi' || true
-      ;;
-    go)
-      run_step "unit-tests" '${GO_BIN:-go} test ./...' || true
-      ;;
-    rust)
-      run_step "unit-tests" '${CARGO_BIN:-cargo} test' || true
-      ;;
-    java)
-      run_step "unit-tests" 'if [ -x ./mvnw ]; then ./mvnw -q test; elif command -v mvn >/dev/null 2>&1; then mvn -q test; elif [ -x ./gradlew ]; then ./gradlew test; elif command -v gradle >/dev/null 2>&1; then gradle test; else echo "No Maven/Gradle command found; adapt verify.sh for this Java repo."; fi' || true
-      ;;
-    ruby)
-      run_step "unit-tests" 'if command -v "${BUNDLE_BIN:-bundle}" >/dev/null 2>&1 && [ -f Gemfile ]; then "${BUNDLE_BIN:-bundle}" exec rake test 2>/dev/null || "${BUNDLE_BIN:-bundle}" exec rspec; else echo "No Ruby test command detected; adapt verify.sh for this Ruby repo."; fi' || true
-      ;;
-    custom|none|*)
-      run_step "unit-tests" 'echo "No stock full checks for HARNESS_ECOSYSTEM=${HARNESS_ECOSYSTEM:-none}; adapt .har/verify.sh for this repo."' || true
-      ;;
-  esac
-}
-
-# ── Verification stages ─────────────────────────────────────────────────────
-# These stock steps are intentionally generic conventions. Adapt this section
-# to the repository's real commands from package.json, Makefile, CI, pyproject,
-# Cargo.toml, go.mod, pom.xml, etc.
-run_quick_smoke || { [ -z "$FULL" ] && true; }
-run_http_step "api-health" "http://localhost:${API_PORT}${HARNESS_HEALTH_CHECK_PATH}" || { [ -z "$FULL" ] && true; }
-
-if [ -n "$FULL" ]; then
-  run_full_checks
-  run_step "readiness" "run_readiness_if_configured \"$AGENT_ID\"" || true
-  # Registered verification stages from .har/stages.json (see .har/STAGES.md).
-  # Every stage listed in verificationStages with a registered script/command
-  # runs here -- plugins and custom stages alike.
-  while IFS=$'\t' read -r STAGE_ID STAGE_CMD; do
-    [ -n "$STAGE_ID" ] || continue
-    run_step "$STAGE_ID" "$STAGE_CMD" || true
-  done < <(list_registered_verification_stage_commands "$SCRIPT_DIR" "$AGENT_ID")
-fi
-
-# ── Output results ────────────────────────────────────────────────────────────
-
-END_TOTAL=$(now_ms)
-TOTAL_MS=$(( END_TOTAL - START_TOTAL ))
-
-node -e "
-const results = $RESULTS_JSON;
-const overall = results.length > 0 && results.every(r => r.pass);
-const out = {
-  status: overall ? 'pass' : 'fail',
-  agent_id: $AGENT_ID,
-  total_ms: $TOTAL_MS,
-  stages: results,
-};
-process.stdout.write(JSON.stringify(out, null, 2) + '\n');
-" 2>/dev/null || echo "{\"status\":\"fail\",\"agent_id\":${AGENT_ID},\"stages\":[]}"
-
-if [ "$OVERALL_PASS" = "false" ]; then
-  exit 1
-fi

package/dist/templates/har-boilerplate-cli/README.md

@@ -1,157 +0,0 @@
-# .har — Agent Harness (CLI / library profile)
-
-This directory is the **agent harness** for this repository. It lets AI coding agents run the project in isolated git worktrees with optional Docker-backed shared infra.
-
-Generated and maintained by [`har`](https://github.com/os-factory/har). Run `har env maintain` when the repo stack changes.
-
-**The harness is how you run this project.** Launch a slot to exercise the code in isolation; don't hand-roll setup. If a harness command fails, fix the harness or report it — don't silently fall back to ad-hoc commands.
-
-## What's in here
-
-| File | Purpose |
-|------|---------|
-| `README.md` | This file — index of the harness |
-| `manifest.json` | Generator metadata (version, profile, checksums) — do not edit |
-| `harness.env` | Shared config: worktree default, `HARNESS_INFRA_SERVICES`, toolchain provisioning (`HARNESS_ECOSYSTEM`, `HARNESS_INSTALL_CMD`), migrate/seed commands |
-| `stages.json` | Machine-readable registry of runnable harness stages |
-| `stages/` | Optional custom stage scripts registered from `stages.json` |
-| `runs/` | Run history from `har env` / MCP only — `.har/runs/YYYY-MM-DD/HH-mm-ss_<stageId>_agent-<id>.json` (gitignore) |
-| `artifacts/` | Stage outputs: reports, traces, screenshots, logs |
-| `agent-slot.sh` | Shared agent-id validation (reads limits from `harness.env`) |
-| `setup-infra.sh` | Start optional Docker Compose stack + template database |
-| `launch.sh` | Launch one agent slot (git worktree by default, toolchain provisioning, env file) |
-| `provision-toolchain.sh` | Install deps and write toolchain paths (`PYTHON_BIN`, `NPM_BIN`, …) to `.env.agent.<id>` |
-| `verify.sh` | Verification pipeline (smoke by default; --full adds tests, lint, e2e) |
-| `teardown.sh` | Tear down one agent slot (worktree + env file) |
-| `agent-cli.sh` | Inspect slot status, run commands in the work dir |
-| `docker-compose.agent.yml` | Shared infrastructure containers (services listed in `HARNESS_INFRA_SERVICES`) |
-| `CLAUDE.agent.md` | Detailed instructions for coding agents |
-| `justfile` | Optional shortcuts (requires `just`) |
-
-No PM2 or `ecosystem.agent.template.cjs` in this profile — agents run project commands directly in their worktree.
-
-## Quick start
-
-**Preferred — har CLI or MCP** (persists run history under `.har/runs/`):
-
-```bash
-har env launch 1
-har env verify 1
-har env verify 1 --full
-har env teardown 1
-```
-
-In Cursor with HAR MCP configured: use `har_launch_environment`, `har_run_verification`, and `har_teardown_environment`.
-
-**Shell fallback** (no CLI/MCP installed):
-
-```bash
-./.har/setup-infra.sh          # when HARNESS_INFRA_SERVICES is non-empty
-./.har/launch.sh 1
-./.har/verify.sh 1             # quick: ecosystem smoke (compile/import/build)
-./.har/verify.sh 1 --full      # + conventional tests, lint, browser-e2e (if installed)
-./.har/teardown.sh 1
-```
-
-Read **`stages.json`** and **`verificationStages`**. Optional: `har env add-plugin playwright`.
-
-## Verification contract
-
-Steps in `verify.sh` are **project-specific examples** — adapt them to your stack
-during `har env init` / `har env maintain` / benchmark setup. The table describes
-each tier's intent, not a fixed command list.
-
-| Mode | Command | Typical steps |
-|------|---------|---------------|
-| Quick | `har env verify <id>` or `verify.sh <id>` | Stock ecosystem smoke: compile / import / build conventions |
-| Full | `har env verify <id> --full` or `verify.sh <id> --full` | Stock conventional tests/lint + optional readiness smoke, **browser-e2e** when `stages/browser-e2e.sh` exists |
-
-The stock commands are deliberately generic conventions keyed by
-`HARNESS_ECOSYSTEM`. Replace them with the repository's real commands during
-adaptation; do not leave Node/npm, Python, Go, Rust, Java, or Ruby defaults in
-place when they do not match the project.
-
-For repos that need runtime services, distinguish health from usability. If the
-harness skips slow local-dev setup, document the skipped steps and add a minimal
-bootstrap/readiness check when agents need default data, credentials, or an
-authenticated workflow.
-
-Use `har env launch 1 --no-worktree` or `./.har/launch.sh 1 --no-worktree` only when working in the repo root.
-
-## Run history
-
-| Entry point | Writes `.har/runs/`? |
-|-------------|------------------------|
-| `./.har/*.sh` | No |
-| `har env …` / MCP | Yes — main checkout `.har/runs/YYYY-MM-DD/` |
-
-With worktree slots, tests run in the worktree; run JSON lives in the main repo. See `workDir` in each record.
-
-## For coding agents
-
-**Start here:** read [`AGENTS.md`](../AGENTS.md) at the repo root for a short pointer, then [`.har/CLAUDE.agent.md`](./CLAUDE.agent.md) for full instructions.
-
-Prefer HAR MCP tools or `har env …` for launch, verify, and teardown. Use `./.har/*.sh` only when the CLI is not installed.
-
-Work in the isolated git worktree created by launch. Use `./.har/agent-cli.sh <id> exec ...` to run ad-hoc project commands in that work dir.
-
-When the project needs Postgres, Redis, or similar, add the service to `docker-compose.agent.yml` (or keep one from the menu), list it in `HARNESS_INFRA_SERVICES` in `harness.env`, and use `setup-infra.sh` — never run raw `docker compose` for shared infra. Shared services run once on fixed ports and serve every agent slot.
-
-## Port & shared services (CLI profile)
-
-This profile has **no PM2 app ports** — agents run project commands directly in their worktree. Port variables in `harness.env` exist for optional test servers and for shared Docker infra.
-
-### Port allocation
-
-| Layer | Scope | Rule | On conflict |
-|-------|-------|------|-------------|
-| Shared Postgres | Per machine | `HARNESS_DB_PORT_DEFAULT` | Scan `HARNESS_DB_PORT_SCAN_START..END` |
-| Other compose services | Per machine | `HARNESS_*_PORT_DEFAULT` for that service | Scan configured ranges in `harness.env` |
-
-When a repo adds a local HTTP server for integration tests, prefer reading ports from `.env.agent.<id>` or `./.har/agent-cli.sh <id>` rather than hardcoding values.
-
-### Shared vs per-slot
-
-| Resource | Model | Configuration |
-|----------|-------|---------------|
-| Postgres / Redis / mail / … | One shared container on a scanned host port | `HARNESS_INFRA_SERVICES` + matching vars in `harness.env` |
-| Per-slot databases | Cloned from template DB when `db` is enabled | `launch.sh` |
-| Application code | Isolated git worktree per slot | `HARNESS_USE_WORKTREE=true` |
-
-### Do not
-
-- Hardcode `15432` or other default infra ports in tests — read `AGENT_DB_PORT` from `.env.agent.<id>` or `har_pg`
-- Run raw `docker compose` for harness infrastructure — use `setup-infra.sh`
-
-## Maintaining this harness
-
-When the project stack changes (new test commands, database needs, env vars):
-
-```bash
-har env maintain
-```
-
-The authoring agent updates scripts and this README. Review changes before committing.
-
-**Do not** put runtime behavior in YAML — edit the scripts directly.
-
-## Session lifecycle
-
-Every `launch` starts a **fresh session**: a new git worktree from the **main
-checkout's current HEAD** at
-`~/worktrees/<base-branch>-<sha4>-har-agent-<id>-<rand4>`, on a branch of the same name.
-Switch that checkout to your intended base before launch. The session is recorded in
-`.har/slots/agent-<id>.json` (the slot registry) — status, verify, and teardown resolve
-the work dir through it. Make ALL file edits under the work dir printed by launch,
-never in the main checkout.
-
-- Occupied slots always block a new launch: `har env complete <id>` (or `teardown <id>`),
-  then `har env launch <id>`. A new launch never chooses `main` for you — switch the
-  main checkout to your intended base first.
-- `teardown` removes the worktree but **keeps the session branch** so you can push it
-  or open a PR (`--delete-branch` to drop it).
-- If launch fails after creating a worktree/env file, resume with
-  `har env launch <id> --resume` or `har env recover <id>`.
-- `har env complete <id>` finishes a session: full verify (recorded as a validation),
-  then teardown — branch kept.
-- `--no-worktree` runs the slot from the repo root instead (single-agent mode).