@osfactory/har 0.64.2 → 1.0.0-rc.1

package/dist/templates/har-boilerplate-ios/stages.json

@@ -32,9 +32,11 @@
     {
       "id": "verify",
       "kind": "verify",
-      "description": "Verification pipeline (quick smoke by default; --full runs the registry's verificationStages)",
+      "description": "Verification pipeline: runs stages.json verificationStages in order (tier \"quick\" by default; --full runs the whole list)",
       "command": "./.har/verify.sh {agentId}",
-      "acceptsArgs": ["--full"],
+      "acceptsArgs": [
+        "--full"
+      ],
       "artifacts": [
         {
           "path": ".har/artifacts",
@@ -61,6 +63,44 @@
       "kind": "teardown",
       "description": "Remove worktree and env file for the slot",
       "command": "./.har/teardown.sh {agentId}"
+    },
+    {
+      "id": "build",
+      "kind": "test",
+      "tier": "quick",
+      "description": "Xcode build smoke (compile-only, unsigned)",
+      "command": "${XCODEBUILD_BIN:-xcodebuild} build ${XC_FLAGS} -scheme \"${XC_SCHEME}\" -destination \"${XC_DESTINATION}\" -derivedDataPath \"${XC_DERIVED}\" CODE_SIGNING_ALLOWED=NO | xcbeautify 2>/dev/null || ${XCODEBUILD_BIN:-xcodebuild} build ${XC_FLAGS} -scheme \"${XC_SCHEME}\" -destination \"${XC_DESTINATION}\" -derivedDataPath \"${XC_DERIVED}\" CODE_SIGNING_ALLOWED=NO",
+      "requiresAgentId": true
+    },
+    {
+      "id": "unit-tests",
+      "kind": "test",
+      "tier": "full",
+      "description": "Xcode unit tests (signed: simulator installs the host app)",
+      "command": "${XCODEBUILD_BIN:-xcodebuild} test ${XC_FLAGS} -scheme \"${XC_SCHEME}\" -destination \"${XC_DESTINATION}\" -derivedDataPath \"${XC_DERIVED}\" | xcbeautify 2>/dev/null || ${XCODEBUILD_BIN:-xcodebuild} test ${XC_FLAGS} -scheme \"${XC_SCHEME}\" -destination \"${XC_DESTINATION}\" -derivedDataPath \"${XC_DERIVED}\"",
+      "requiresAgentId": true
+    },
+    {
+      "id": "lint",
+      "kind": "test",
+      "tier": "full",
+      "description": "SwiftLint (skips when not installed)",
+      "command": "command -v \"${HARNESS_SWIFTLINT_CMD:-swiftlint}\" >/dev/null 2>&1 && \"${HARNESS_SWIFTLINT_CMD:-swiftlint}\" --quiet || echo \"swiftlint not installed — skipping\"",
+      "requiresAgentId": true
+    },
+    {
+      "id": "readiness",
+      "kind": "test",
+      "tier": "full",
+      "description": "Project readiness smoke (HARNESS_READINESS_CMD)",
+      "script": "stages/readiness.sh",
+      "requiresAgentId": true
     }
+  ],
+  "verificationStages": [
+    "build",
+    "unit-tests",
+    "lint",
+    "readiness"
   ]
 }

package/dist/templates/migration-prompt.md

@@ -0,0 +1,54 @@
+Migrate the `.har/` harness in this repository from the pre-1.0 shape to the 1.0 configuration surface.
+
+## What changes and why
+
+In 1.0 the harness machinery lives once, in the `@osfactory/har` package. `.har/` keeps only what is yours:
+
+- **config** — `harness.env` (pure `KEY=value`, schema-validated)
+- **stages** — `stages.json` + `.har/stages/*.sh` (verification as data)
+- **hooks** — `.har/hooks/{pre-launch,post-launch,pre-verify,pre-teardown,post-teardown}.sh` (custom lifecycle behavior)
+- **plugins** — `.har/plugins/<id>/` local plugins for anything bigger (`har plugin create <id>`)
+
+The `./.har/*.sh` entry points become thin shims (`exec har env … "$@"` with a pinned `npx` fallback), so every surface — raw scripts, `har env`, MCP tools — writes the same run/validation records. Your muscle memory (`./.har/launch.sh 1`, `./.har/verify.sh 1 --full`, `har env launch 1`) keeps working before, during, and after.
+
+{{MIGRATION_SECTION}}
+
+## Step 3 — Lift each residue item
+
+For every row in the residue table above, read its backup under `.har/migrate/backup/` and move the project-specific behavior into the 1.0 model:
+
+- **config** → a `harness.env` schema key (see `@har/schemas` HarnessEnvSchema). Custom keys the schema rejects: keep the value inside the hook/stage that consumes it.
+- **stage** → a `stages.json` entry (plain `command`, or a script in `.har/stages/`), listed in `verificationStages` if it gates verify.
+- **hook** → the matching `.har/hooks/<hook>.sh`. Hooks receive `HAR_HOOK`, `AGENT_ID`, `WORK_DIR`, `ENV_FILE`, `HAR_HARNESS_DIR`, `HAR_PORT_<NAME>` (contract `HAR_HOOK_CONTRACT=1`). Failing `pre-*` hooks abort the operation; `post-*` failures warn unless `HARNESS_HOOK_POST_FAILURE=fail`. Make hooks executable.
+- **plugin** → `har plugin create <id>` scaffolds a local plugin in `.har/plugins/<id>/`; then `har env add-plugin <id>`.
+- **review** → usually nothing to keep (the package runtime covers it) — confirm, then move on.
+
+Compare each backup against its replacement only for **project-specific** logic. Do not restore vendored machinery — that is what 1.0 removes.
+
+## Step 4 — Heavily customized harness? Consider eject
+
+If the backups show deep patches to the machinery itself (not just config/stages/hooks material), `har env eject` vendors the full runtime into `.har/runtime/` and hands you ownership of the scripts — explicit, supported, reversible with `har env adopt`. Prefer lifting into hooks when the patch is a lifecycle side effect; eject only when you truly need to own the runtime.
+
+## Step 5 — Verify the migration
+
+1. `har env doctor` — must pass (contract: 1.0, no errors).
+2. `har env maintain` — drift report should show only files you deliberately adapted.
+3. Full verify on **every configured agent slot** that is in use; at minimum:
+   - `har env launch 1`
+   - `har env verify 1 --full` (or `./.har/verify.sh 1 --full` — same records either way)
+   - `har env complete 1` (or `har env teardown 1`)
+4. Exercise anything you lifted into hooks/stages (e.g. per-slot data stores exist in the work dir, custom checks run in `--full`).
+
+## Step 6 — Finalize
+
+Record the migration and clean up the migration artifacts (`.har/migrate/`, this prompt):
+
+    har env maintain --finalize --summary "Migrated pre-1.0 harness to the 1.0 config surface: <what you lifted where>"
+
+## Rules
+
+1. Never edit `.har/manifest.json` by hand — it is managed by the har CLI.
+2. Do not delete `.har/migrate/backup/` until finalize — it is the only copy of the pre-1.0 adaptations.
+3. Keep `stages.json` stage ids stable — run records and Mission Control reference them.
+4. Update `.har/README.md` and `.har/CLAUDE.agent.md` if commands or workflow notes changed.
+5. Commit the migrated harness (shims, `harness.env`, `stages.json`, `.har/hooks/`) once verified — `.har/migrate/` and this prompt are transient and stay untracked.

package/dist/templates/plugins/custom-stage-skeleton.sh

@@ -12,31 +12,22 @@
 # Usage: ./.har/stages/__STAGE_ID__.sh <agent-id> [extra args...]
 set -euo pipefail
 
-SCRIPT_DIR="$(cd "$(dirname "${BASH_SOURCE[0]}")" && pwd)"
-HARNESS_DIR="$(cd "$SCRIPT_DIR/.." && pwd)"
+# 1.0 stage surface: the runner exports WORK_DIR, ENV_FILE, AGENT_ID and
+# HAR_HARNESS_DIR, with harness.env and the slot env file already sourced —
+# agent-slot.sh is retired (1.0 migration).
+HARNESS_DIR="${HAR_HARNESS_DIR:-$(cd "$(dirname "${BASH_SOURCE[0]}")/.." && pwd)}"
 REPO_ROOT="$(cd "$HARNESS_DIR/.." && pwd)"
-# agent-slot.sh expects SCRIPT_DIR to be .har/ (slot registry lives there)
-SCRIPT_DIR="$HARNESS_DIR"
 
-# shellcheck source=/dev/null
-source "$HARNESS_DIR/harness.env"
-# shellcheck source=/dev/null
-source "$HARNESS_DIR/agent-slot.sh"
+AGENT_ID="${1:-${AGENT_ID:?Usage: __STAGE_ID__.sh <agent-id> [extra args...]}}"
+now_ms() { node -e 'process.stdout.write(String(Date.now()))' 2>/dev/null || echo 0; }
 
-AGENT_ID="${1:?Usage: __STAGE_ID__.sh <agent-id> [extra args...]}"
-validate_agent_id "$AGENT_ID"
-
-ENV_FILE="$(resolve_agent_env_file "$AGENT_ID" "$REPO_ROOT")" || {
-  echo "No .env.agent.${AGENT_ID} found." >&2
-  har_suggest_launch "$AGENT_ID" >&2
-  exit 1
+# JSON-escape step output; truncate to 50 lines in node (avoids SIGPIPE under pipefail).
+escape_step_output() {
+  printf '%s' "$1" | node -e "let d='';process.stdin.on('data',c=>d+=c);process.stdin.on('end',()=>{const s=d.trim().split('\n').slice(0,50).join('\n');process.stdout.write(JSON.stringify(s))})" 2>/dev/null || echo '""'
 }
-set -a
-# shellcheck source=/dev/null
-source "$ENV_FILE"
-set +a
 
-WORK_DIR="$(resolve_agent_work_dir "$ENV_FILE")"
+ENV_FILE="${ENV_FILE:?No slot env for agent ${AGENT_ID} — run ./.har/launch.sh ${AGENT_ID} first}"
+WORK_DIR="${WORK_DIR:?No slot work dir for agent ${AGENT_ID} — run ./.har/launch.sh ${AGENT_ID} first}"
 ARTIFACTS_DIR="$HARNESS_DIR/artifacts/__STAGE_ID__"
 mkdir -p "$ARTIFACTS_DIR"
 

package/dist/templates/plugins/gitleaks/.github/workflows/gitleaks.yml

@@ -1,5 +1,5 @@
 # Secrets scanning with the official Gitleaks action.
-# Installed by `har env add-plugin gitleaks` (skip with --skip-ci).
+# Installed by `har env add-plugin gitleaks --with-ci` (CI files are skipped by default).
 #
 # This CI run is what produces org-level scanning evidence that compliance
 # platforms (Vanta, Drata, …) can ingest via your GitHub organization.

package/dist/templates/plugins/gitleaks/.har/stages/GITLEAKS.md

@@ -63,7 +63,7 @@ same config governs local stage runs and CI.
 
 ## CI and compliance platforms (Vanta, Drata, …)
 
-The optional workflow `.github/workflows/gitleaks.yml` (skipped with `--skip-ci`)
+The optional workflow `.github/workflows/gitleaks.yml` (installed only with `--with-ci`)
 runs the official [`gitleaks/gitleaks-action`](https://github.com/gitleaks/gitleaks-action)
 on pushes and pull requests.
 

package/dist/templates/plugins/gitleaks/.har/stages/secrets-scan.sh

@@ -12,21 +12,16 @@
 # See: ./.har/stages/GITLEAKS.md for the adaptation guide.
 set -euo pipefail
 
-SCRIPT_DIR="$(cd "$(dirname "${BASH_SOURCE[0]}")" && pwd)"
-HARNESS_DIR="$(cd "$SCRIPT_DIR/.." && pwd)"
+# 1.0 stage surface: the runner exports WORK_DIR, ENV_FILE, AGENT_ID and
+# HAR_HARNESS_DIR, with harness.env and the slot env file already sourced —
+# agent-slot.sh is retired (1.0 migration).
+HARNESS_DIR="${HAR_HARNESS_DIR:-$(cd "$(dirname "${BASH_SOURCE[0]}")/.." && pwd)}"
 REPO_ROOT="$(cd "$HARNESS_DIR/.." && pwd)"
-# agent-slot.sh expects SCRIPT_DIR to be .har/ (slot registry lives there)
-SCRIPT_DIR="$HARNESS_DIR"
 
-# shellcheck source=/dev/null
-source "$HARNESS_DIR/harness.env"
-# shellcheck source=/dev/null
-source "$HARNESS_DIR/agent-slot.sh"
-
-AGENT_ID="${1:?Usage: secrets-scan.sh <agent-id> [dir|git]}"
+AGENT_ID="${1:-${AGENT_ID:?Usage: secrets-scan.sh <agent-id> [dir|git]}}"
 MODE="${2:-dir}"
 
-validate_agent_id "$AGENT_ID"
+now_ms() { node -e 'process.stdout.write(String(Date.now()))' 2>/dev/null || echo 0; }
 
 if [ "$MODE" != "dir" ] && [ "$MODE" != "git" ]; then
   echo "Error: unknown mode '$MODE' — expected 'dir' or 'git'." >&2
@@ -53,18 +48,8 @@ REPORT_PATH="$ARTIFACT_DIR/report.json"
 SCAN_LOG="$ARTIFACT_DIR/gitleaks.log"
 
 # ── Resolve agent env ─────────────────────────────────────────────────────────
-ENV_FILE="$(resolve_agent_env_file "$AGENT_ID" "$REPO_ROOT")" || {
-  echo "No .env.agent.${AGENT_ID} found." >&2
-  har_suggest_launch "$AGENT_ID" >&2
-  exit 1
-}
-
-set -a
-# shellcheck source=/dev/null
-source "$ENV_FILE"
-set +a
-
-WORK_DIR="$(resolve_agent_work_dir "$ENV_FILE")"
+ENV_FILE="${ENV_FILE:?No slot env for agent ${AGENT_ID} — run ./.har/launch.sh ${AGENT_ID} first}"
+WORK_DIR="${WORK_DIR:?No slot work dir for agent ${AGENT_ID} — run ./.har/launch.sh ${AGENT_ID} first}"
 
 GITLEAKS_VERSION="$(gitleaks version 2>/dev/null | head -1 || echo unknown)"
 log "gitleaks ${GITLEAKS_VERSION} — ${MODE} scan of $WORK_DIR"

package/dist/templates/plugins/gitleaks/README.md

@@ -16,7 +16,7 @@ What it adds:
 - `.gitleaks.toml` — default config extending the built-in ruleset with harness
   allowlists (skipped if the repo already has one)
 - `.github/workflows/gitleaks.yml` — official `gitleaks/gitleaks-action` CI
-  workflow (skip with `--skip-ci`)
+  workflow (opt in with `--with-ci`)
 
 Requirements: the `gitleaks` binary on PATH (`brew install gitleaks` or a
 [release binary](https://github.com/gitleaks/gitleaks/releases)). No package.json

package/dist/templates/plugins/gitleaks/template.manifest.json

@@ -16,15 +16,30 @@
         "kind": "directory",
         "description": "Redacted JSON findings report and scan log"
       }
-    ]
+    ],
+    "tier": "full"
   },
   "files": [
-    { "src": ".har/stages/secrets-scan.sh", "dest": ".har/stages/secrets-scan.sh", "executable": true },
-    { "src": ".har/stages/GITLEAKS.md",     "dest": ".har/stages/GITLEAKS.md" }
+    {
+      "src": ".har/stages/secrets-scan.sh",
+      "dest": ".har/stages/secrets-scan.sh",
+      "executable": true
+    },
+    {
+      "src": ".har/stages/GITLEAKS.md",
+      "dest": ".har/stages/GITLEAKS.md"
+    }
   ],
   "optionalFiles": [
-    { "src": ".gitleaks.toml",                "dest": ".gitleaks.toml" },
-    { "src": ".github/workflows/gitleaks.yml", "dest": ".github/workflows/gitleaks.yml", "skipFlag": "skipCi" }
+    {
+      "src": ".gitleaks.toml",
+      "dest": ".gitleaks.toml"
+    },
+    {
+      "src": ".github/workflows/gitleaks.yml",
+      "dest": ".github/workflows/gitleaks.yml",
+      "skipFlag": "skipCi"
+    }
   ],
   "nextSteps": [
     "Install gitleaks: brew install gitleaks — or a release binary from https://github.com/gitleaks/gitleaks/releases",

package/dist/templates/plugins/kerno/.github/workflows/kerno.yml

@@ -6,7 +6,7 @@
 #   2. Your app running and reachable at the SUT URL, with its database migrated/seeded.
 #   3. A Kerno agent bound to this checkout (`kerno init`) with a committed suite in .kerno/.
 #
-# The stage sources the HAR slot machinery (.har/harness.env, agent-slot.sh, .env.agent.<id>),
+# The stage relies on the HAR stage runner (harness.env + slot env exported by `har env verify`),
 # so the supported path is to run it inside a launched HAR slot. Adapt the "start app" and
 # "kerno init" steps for your stack. Remove `if: false` once wired up.
 name: Kerno backend validation

package/dist/templates/plugins/kerno/.har/stages/backend-validation.sh

@@ -9,19 +9,14 @@
 # See: ./.har/stages/KERNO.md for the full setup + adaptation guide.
 set -euo pipefail
 
-SCRIPT_DIR="$(cd "$(dirname "${BASH_SOURCE[0]}")" && pwd)"
-HARNESS_DIR="$(cd "$SCRIPT_DIR/.." && pwd)"
+# 1.0 stage surface: the runner exports WORK_DIR, ENV_FILE, AGENT_ID and
+# HAR_HARNESS_DIR, with harness.env and the slot env file already sourced —
+# agent-slot.sh is retired (1.0 migration).
+HARNESS_DIR="${HAR_HARNESS_DIR:-$(cd "$(dirname "${BASH_SOURCE[0]}")/.." && pwd)}"
 REPO_ROOT="$(cd "$HARNESS_DIR/.." && pwd)"
-# agent-slot.sh expects SCRIPT_DIR to be .har/ (slot registry lives there)
-SCRIPT_DIR="$HARNESS_DIR"
 
-# shellcheck source=/dev/null
-source "$HARNESS_DIR/harness.env"
-# shellcheck source=/dev/null
-source "$HARNESS_DIR/agent-slot.sh"
-
-AGENT_ID="${1:?Usage: backend-validation.sh <agent-id>}"
-validate_agent_id "$AGENT_ID"
+AGENT_ID="${1:-${AGENT_ID:?Usage: backend-validation.sh <agent-id>}}"
+now_ms() { node -e 'process.stdout.write(String(Date.now()))' 2>/dev/null || echo 0; }
 
 log() { echo "==> [backend-validation agent-$AGENT_ID] $*" >&2; }
 
@@ -81,18 +76,8 @@ fi
 trap cleanup EXIT
 
 # ── Resolve agent env + slot target ───────────────────────────────────────────
-ENV_FILE="$(resolve_agent_env_file "$AGENT_ID" "$REPO_ROOT")" || {
-  echo "No .env.agent.${AGENT_ID} found." >&2
-  har_suggest_launch "$AGENT_ID" >&2
-  exit 1
-}
-
-set -a
-# shellcheck source=/dev/null
-source "$ENV_FILE"
-set +a
-
-WORK_DIR="$(resolve_agent_work_dir "$ENV_FILE")"
+ENV_FILE="${ENV_FILE:?No slot env for agent ${AGENT_ID} — run ./.har/launch.sh ${AGENT_ID} first}"
+WORK_DIR="${WORK_DIR:?No slot work dir for agent ${AGENT_ID} — run ./.har/launch.sh ${AGENT_ID} first}"
 
 # SUT URL: prefer an explicit override, then the app's own SITE_URL (both the default
 # web profile and single-port apps like Next.js set SITE_URL to the running app), then a

package/dist/templates/plugins/kerno/README.md

@@ -15,7 +15,7 @@ har env add-plugin kerno
 | `.har/stages/backend-validation.sh` | Stage runner. Re-runs the Kerno suite against the running slot over REST |
 | `.har/stages/KERNO.md` | Setup and adaptation guide: prerequisites, the one-agent rule, artifacts |
 | `tests/kerno/README.md` | This file |
-| `.github/workflows/kerno.yml` | Optional CI workflow (skip with `--skip-ci`) |
+| `.github/workflows/kerno.yml` | Optional CI workflow (opt in with `--with-ci`) |
 
 ## Workflow
 

package/dist/templates/plugins/kerno/template.manifest.json

@@ -2,10 +2,6 @@
   "id": "kerno",
   "stageId": "backend-validation",
   "verificationStages": [
-    "typecheck",
-    "unit-tests",
-    "api-health",
-    "lint",
     "backend-validation"
   ],
   "stage": {
@@ -24,15 +20,30 @@
         "path": ".har/artifacts/backend-validation/report.json",
         "kind": "report"
       }
-    ]
+    ],
+    "tier": "full"
   },
   "files": [
-    { "src": ".har/stages/backend-validation.sh", "dest": ".har/stages/backend-validation.sh", "executable": true },
-    { "src": ".har/stages/KERNO.md", "dest": ".har/stages/KERNO.md" },
-    { "src": "README.md", "dest": "tests/kerno/README.md" }
+    {
+      "src": ".har/stages/backend-validation.sh",
+      "dest": ".har/stages/backend-validation.sh",
+      "executable": true
+    },
+    {
+      "src": ".har/stages/KERNO.md",
+      "dest": ".har/stages/KERNO.md"
+    },
+    {
+      "src": "README.md",
+      "dest": "tests/kerno/README.md"
+    }
   ],
   "optionalFiles": [
-    { "src": ".github/workflows/kerno.yml", "dest": ".github/workflows/kerno.yml", "skipFlag": "skipCi" }
+    {
+      "src": ".github/workflows/kerno.yml",
+      "dest": ".github/workflows/kerno.yml",
+      "skipFlag": "skipCi"
+    }
   ],
   "nextSteps": [
     "npm install -g @kerno/cli",

package/dist/templates/plugins/local-plugin-skeleton/README.md

@@ -0,0 +1,46 @@
+# __PLUGIN_ID__ (local HAR plugin)
+
+Project-owned plugin scaffolded by `har plugin create __PLUGIN_ID__`. It lives in
+`.har/plugins/__PLUGIN_ID__/` and is committed with the repository — HAR never
+overwrites it on upgrade.
+
+## Layout
+
+| File | Purpose |
+| --- | --- |
+| `template.manifest.json` | What the plugin installs and which stages it registers |
+| `stages/__PLUGIN_ID__.sh` | The stage script (HAR stage contract — see `.har/STAGES.md`) |
+| `README.md` | This file — document what the stage checks and why |
+
+## Develop
+
+1. Implement the `TODO` block in `stages/__PLUGIN_ID__.sh`.
+2. Install (or reinstall after changes) into the harness:
+
+   ```bash
+   har env add-plugin __PLUGIN_ID__ --force
+   ```
+
+   This copies the files listed in `template.manifest.json` into place and
+   registers the plugin's stages in `.har/stages.json` — exactly like a
+   bundled, npm, or git plugin.
+
+3. Run it against a live slot:
+
+   ```bash
+   ./.har/stages/__PLUGIN_ID__.sh 1
+   ```
+
+For a simple one-liner check you may not need a plugin at all — register a
+command stage directly in `.har/stages.json` (see `.har/STAGES.md`).
+
+## Publish (optional)
+
+The format is identical across all plugin sources — publishing requires zero
+format changes:
+
+- **npm**: add a `package.json` next to `template.manifest.json`, then
+  `npm publish`. Consumers run `har env add-plugin @your-scope/__PLUGIN_ID__`.
+- **git**: push this directory (manifest at the repo root, or under
+  `plugins/__PLUGIN_ID__/`). Consumers run
+  `har env add-plugin github:your-org/your-repo`.

package/dist/templates/plugins/playwright/.har/stages/browser-e2e.sh

@@ -6,34 +6,19 @@
 # Prerequisite: ./.har/launch.sh <agent-id>
 set -euo pipefail
 
-SCRIPT_DIR="$(cd "$(dirname "${BASH_SOURCE[0]}")" && pwd)"
-HARNESS_DIR="$(cd "$SCRIPT_DIR/.." && pwd)"
+# 1.0 stage surface: the runner exports WORK_DIR, ENV_FILE, AGENT_ID and
+# HAR_HARNESS_DIR, with harness.env and the slot env file already sourced —
+# agent-slot.sh is retired (1.0 migration).
+HARNESS_DIR="${HAR_HARNESS_DIR:-$(cd "$(dirname "${BASH_SOURCE[0]}")/.." && pwd)}"
 REPO_ROOT="$(cd "$HARNESS_DIR/.." && pwd)"
-# agent-slot.sh expects SCRIPT_DIR to be .har/ (slot registry lives there)
-SCRIPT_DIR="$HARNESS_DIR"
 
-# shellcheck source=/dev/null
-source "$HARNESS_DIR/harness.env"
-# shellcheck source=/dev/null
-source "$HARNESS_DIR/agent-slot.sh"
-
-AGENT_ID="${1:?Usage: browser-e2e.sh <agent-id>}"
-validate_agent_id "$AGENT_ID"
+AGENT_ID="${1:-${AGENT_ID:?Usage: browser-e2e.sh <agent-id>}}"
+now_ms() { node -e 'process.stdout.write(String(Date.now()))'; }
 
 log() { echo "==> [browser-e2e agent-$AGENT_ID] $*" >&2; }
 
-ENV_FILE="$(resolve_agent_env_file "$AGENT_ID" "$REPO_ROOT")" || {
-  echo "No .env.agent.${AGENT_ID} found." >&2
-  har_suggest_launch "$AGENT_ID" >&2
-  exit 1
-}
-
-set -a
-# shellcheck source=/dev/null
-source "$ENV_FILE"
-set +a
-
-WORK_DIR="$(resolve_agent_work_dir "$ENV_FILE")"
+ENV_FILE="${ENV_FILE:?No slot env for agent ${AGENT_ID} — run ./.har/launch.sh ${AGENT_ID} first}"
+WORK_DIR="${WORK_DIR:?No slot work dir for agent ${AGENT_ID} — run ./.har/launch.sh ${AGENT_ID} first}"
 FE_PORT="${FE_PORT:-$(( HARNESS_FE_BASE_PORT + AGENT_ID * 10 ))}"
 API_PORT="${API_PORT:-$(( HARNESS_API_BASE_PORT + AGENT_ID * 10 ))}"
 

package/dist/templates/plugins/playwright/template.manifest.json

@@ -2,10 +2,6 @@
   "id": "playwright",
   "stageId": "browser-e2e",
   "verificationStages": [
-    "typecheck",
-    "unit-tests",
-    "api-health",
-    "lint",
     "browser-e2e"
   ],
   "stage": {
@@ -24,19 +20,46 @@
         "path": ".har/artifacts/browser-e2e/playwright-report",
         "kind": "report"
       }
-    ]
+    ],
+    "tier": "full"
   },
   "files": [
-    { "src": ".har/stages/browser-e2e.sh", "dest": ".har/stages/browser-e2e.sh", "executable": true },
-    { "src": ".har/stages/PLAYWRIGHT.md", "dest": ".har/stages/PLAYWRIGHT.md" },
-    { "src": "playwright.config.js", "dest": "playwright.config.js" },
-    { "src": "tests/frontend/smoke.spec.js", "dest": "tests/frontend/smoke.spec.js" },
-    { "src": "tests/api/health.spec.js", "dest": "tests/api/health.spec.js" },
-    { "src": "tests/a11y/smoke.spec.js", "dest": "tests/a11y/smoke.spec.js" },
-    { "src": "README.md", "dest": "tests/playwright/README.md" }
+    {
+      "src": ".har/stages/browser-e2e.sh",
+      "dest": ".har/stages/browser-e2e.sh",
+      "executable": true
+    },
+    {
+      "src": ".har/stages/PLAYWRIGHT.md",
+      "dest": ".har/stages/PLAYWRIGHT.md"
+    },
+    {
+      "src": "playwright.config.js",
+      "dest": "playwright.config.js"
+    },
+    {
+      "src": "tests/frontend/smoke.spec.js",
+      "dest": "tests/frontend/smoke.spec.js"
+    },
+    {
+      "src": "tests/api/health.spec.js",
+      "dest": "tests/api/health.spec.js"
+    },
+    {
+      "src": "tests/a11y/smoke.spec.js",
+      "dest": "tests/a11y/smoke.spec.js"
+    },
+    {
+      "src": "README.md",
+      "dest": "tests/playwright/README.md"
+    }
   ],
   "optionalFiles": [
-    { "src": ".github/workflows/playwright.yml", "dest": ".github/workflows/playwright.yml", "skipFlag": "skipCi" }
+    {
+      "src": ".github/workflows/playwright.yml",
+      "dest": ".github/workflows/playwright.yml",
+      "skipFlag": "skipCi"
+    }
   ],
   "merge": {
     "package.json": "package.fragment.json"

package/dist/templates/plugins/rocketsim/.har/stages/rocketsim-flows.sh

@@ -10,21 +10,16 @@
 # See: ./.har/stages/ROCKETSIM.md for the full authoring guide.
 set -euo pipefail
 
-SCRIPT_DIR="$(cd "$(dirname "${BASH_SOURCE[0]}")" && pwd)"
-HARNESS_DIR="$(cd "$SCRIPT_DIR/.." && pwd)"
+# 1.0 stage surface: the runner exports WORK_DIR, ENV_FILE, AGENT_ID and
+# HAR_HARNESS_DIR, with harness.env and the slot env file already sourced —
+# agent-slot.sh is retired (1.0 migration).
+HARNESS_DIR="${HAR_HARNESS_DIR:-$(cd "$(dirname "${BASH_SOURCE[0]}")/.." && pwd)}"
 REPO_ROOT="$(cd "$HARNESS_DIR/.." && pwd)"
-# agent-slot.sh expects SCRIPT_DIR to be .har/ (slot registry lives there)
-SCRIPT_DIR="$HARNESS_DIR"
 
-# shellcheck source=/dev/null
-source "$HARNESS_DIR/harness.env"
-# shellcheck source=/dev/null
-source "$HARNESS_DIR/agent-slot.sh"
-
-AGENT_ID="${1:?Usage: rocketsim-flows.sh <agent-id> [flow-name]}"
+AGENT_ID="${1:-${AGENT_ID:?Usage: rocketsim-flows.sh <agent-id> [flow-name]}}"
 FLOW_FILTER="${2:-}"
 
-validate_agent_id "$AGENT_ID"
+now_ms() { node -e 'process.stdout.write(String(Date.now()))' 2>/dev/null || echo 0; }
 
 log() { echo "==> [rocketsim agent-$AGENT_ID] $*" >&2; }
 
@@ -43,18 +38,8 @@ if ! rocketsim doctor --quiet 2>/dev/null; then
 fi
 
 # ── Resolve agent env ─────────────────────────────────────────────────────────
-ENV_FILE="$(resolve_agent_env_file "$AGENT_ID" "$REPO_ROOT")" || {
-  echo "No .env.agent.${AGENT_ID} found." >&2
-  har_suggest_launch "$AGENT_ID" >&2
-  exit 1
-}
-
-set -a
-# shellcheck source=/dev/null
-source "$ENV_FILE"
-set +a
-
-WORK_DIR="$(resolve_agent_work_dir "$ENV_FILE")"
+ENV_FILE="${ENV_FILE:?No slot env for agent ${AGENT_ID} — run ./.har/launch.sh ${AGENT_ID} first}"
+WORK_DIR="${WORK_DIR:?No slot work dir for agent ${AGENT_ID} — run ./.har/launch.sh ${AGENT_ID} first}"
 
 # ── Discover flows ─────────────────────────────────────────────────────────────
 FLOWS_DIR="$WORK_DIR/flows"

package/dist/templates/plugins/rocketsim/template.manifest.json

@@ -2,9 +2,6 @@
   "id": "rocketsim",
   "stageId": "rocketsim-flows",
   "verificationStages": [
-    "build",
-    "unit-tests",
-    "lint",
     "rocketsim-flows"
   ],
   "stage": {
@@ -19,13 +16,28 @@
         "kind": "directory",
         "description": "Screenshots, per-flow results, and run summary"
       }
-    ]
+    ],
+    "tier": "full"
   },
   "files": [
-    { "src": ".har/stages/rocketsim-flows.sh", "dest": ".har/stages/rocketsim-flows.sh", "executable": true },
-    { "src": ".har/stages/ROCKETSIM.md",       "dest": ".har/stages/ROCKETSIM.md" },
-    { "src": "flows/README.md",                "dest": "flows/README.md" },
-    { "src": "flows/example-smoke.sh",         "dest": "flows/example-smoke.sh", "executable": true }
+    {
+      "src": ".har/stages/rocketsim-flows.sh",
+      "dest": ".har/stages/rocketsim-flows.sh",
+      "executable": true
+    },
+    {
+      "src": ".har/stages/ROCKETSIM.md",
+      "dest": ".har/stages/ROCKETSIM.md"
+    },
+    {
+      "src": "flows/README.md",
+      "dest": "flows/README.md"
+    },
+    {
+      "src": "flows/example-smoke.sh",
+      "dest": "flows/example-smoke.sh",
+      "executable": true
+    }
   ],
   "nextSteps": [
     "rocketsim doctor",