@ps-neko/nekowork 0.1.0-alpha.0

package/scripts/build-codex.js

@@ -0,0 +1,93 @@
+#!/usr/bin/env node
+// 정규 카탈로그 → .codex/ 로 투영.
+// Codex CLI 형식: config.toml + agents/*.toml.
+
+import fs from 'node:fs';
+import path from 'node:path';
+import { fileURLToPath } from 'node:url';
+import YAML from 'yaml';
+import { buildRoots } from './core/build-roots.js';
+
+const __dirname = path.dirname(fileURLToPath(import.meta.url));
+const { sourceRoot: ROOT, targetRoot: TARGET_ROOT } = buildRoots(path.resolve(__dirname, '..'));
+const OUT = path.join(TARGET_ROOT, '.codex');
+
+function ensure(dir) { fs.mkdirSync(dir, { recursive: true }); }
+
+console.log('=> build-codex');
+ensure(OUT);
+ensure(path.join(OUT, 'agents'));
+
+// agents/<name>.md → .codex/agents/<name>.toml (Codex provider 만)
+const agentsDir = path.join(ROOT, 'agents');
+let n = 0;
+if (fs.existsSync(agentsDir)) {
+  for (const f of fs.readdirSync(agentsDir)) {
+    if (!f.endsWith('.md')) continue;
+    const content = fs.readFileSync(path.join(agentsDir, f), 'utf8');
+    const fmMatch = content.match(/^---\s*\n([\s\S]*?)\n---/);
+    if (!fmMatch) continue;
+    const fm = YAML.parse(fmMatch[1]);
+    if (fm.provider !== 'codex') continue;
+    const body = content.slice(fmMatch[0].length).trim();
+    const tomlEsc = (s) => '"""' + String(s).replace(/"""/g, '\\"\\"\\"') + '"""';
+    const toml = `# 자동 생성. agents/${f} 가 원본.
+name = "${fm.name}"
+description = ${tomlEsc(fm.description)}
+model = "${fm.model}"
+
+[sandbox]
+mode = "${fm.sandbox || 'read-only'}"
+network_access = ${fm.network_access === false ? 'false' : 'true'}
+
+[prompt]
+body = ${tomlEsc(body)}
+`;
+    const out = path.join(OUT, 'agents', fm.name + '.toml');
+    fs.writeFileSync(out, toml);
+    n++;
+  }
+}
+console.log(`  agents     : ${n} (codex provider 만)`);
+
+// .codex/config.toml — MCP 서버 + profiles
+const manifest = YAML.parse(fs.readFileSync(path.join(ROOT, 'agent.yaml'), 'utf8'));
+const lines = [];
+lines.push('# 자동 생성. agent.yaml 이 원본.\n');
+lines.push('multi_agent = true\n');
+
+for (const s of (manifest.mcp?.external_servers || [])) {
+  lines.push(`[mcp_servers.${s.name}]`);
+  if (s.pin) {
+    lines.push('command = "npx"');
+    lines.push(`args = ["-y", "${s.pin}"]`);
+    lines.push('startup_timeout_sec = 30');
+  } else if (s.url) {
+    lines.push(`url = "${s.url}"`);
+    lines.push('type = "http"');
+  }
+  lines.push('');
+}
+
+lines.push('[profiles.review]');
+lines.push('sandbox_mode = "read-only"');
+lines.push('network_access = false');
+lines.push('');
+lines.push('[profiles.strict]');
+lines.push('sandbox_mode = "read-only"');
+lines.push('network_access = false');
+lines.push('');
+lines.push('[profiles.workspace]');
+lines.push('sandbox_mode = "workspace-write"');
+lines.push('network_access = true');
+
+fs.writeFileSync(path.join(OUT, 'config.toml'), lines.join('\n') + '\n');
+console.log('  config.toml: OK');
+
+// AGENTS.md 만 그대로 (Codex 표준)
+if (fs.existsSync(path.join(ROOT, 'AGENTS.md'))) {
+  fs.copyFileSync(path.join(ROOT, 'AGENTS.md'), path.join(OUT, 'AGENTS.md'));
+  console.log('  AGENTS.md  : OK');
+}
+
+console.log('=> .codex 빌드 완료');

package/scripts/build-cursor.js

@@ -0,0 +1,132 @@
+#!/usr/bin/env node
+// 정규 카탈로그 → .cursor/ 로 투영.
+// Cursor 형식: .cursor/rules/*.mdc (공식), .cursorrules (legacy 공유 룰).
+// 이벤트 어댑터: hook 의 PreToolUse/PostToolUse 등 PascalCase → before/after camelCase.
+
+import fs from 'node:fs';
+import path from 'node:path';
+import { fileURLToPath } from 'node:url';
+import YAML from 'yaml';
+import { buildRoots } from './core/build-roots.js';
+
+const __dirname = path.dirname(fileURLToPath(import.meta.url));
+const { sourceRoot: ROOT, targetRoot: TARGET_ROOT } = buildRoots(path.resolve(__dirname, '..'));
+const OUT = path.join(TARGET_ROOT, '.cursor');
+
+function ensure(dir) { fs.mkdirSync(dir, { recursive: true }); }
+
+console.log('=> build-cursor');
+ensure(OUT);
+ensure(path.join(OUT, 'rules'));
+
+// agents/<name>.md → .cursor/rules/agents/<name>.mdc (frontmatter alwaysApply: false, glob: **)
+const agentsDir = path.join(ROOT, 'agents');
+let agentN = 0;
+ensure(path.join(OUT, 'rules', 'agents'));
+if (fs.existsSync(agentsDir)) {
+  for (const f of fs.readdirSync(agentsDir)) {
+    if (!f.endsWith('.md')) continue;
+    const content = fs.readFileSync(path.join(agentsDir, f), 'utf8');
+    const fmMatch = content.match(/^---\s*\n([\s\S]*?)\n---/);
+    if (!fmMatch) continue;
+    const fm = YAML.parse(fmMatch[1]);
+    const body = content.slice(fmMatch[0].length).trim();
+    const mdc = `---
+description: ${JSON.stringify(fm.description || fm.name)}
+alwaysApply: false
+globs: ["**/*"]
+provider: ${fm.provider || 'unknown'}
+model: ${fm.model || 'unknown'}
+---
+
+${body}
+`;
+    fs.writeFileSync(path.join(OUT, 'rules', 'agents', fm.name + '.mdc'), mdc);
+    agentN++;
+  }
+}
+console.log(`  agents     : ${agentN} (rules/agents/*.mdc)`);
+
+// skills/<name>/SKILL.md → .cursor/rules/skills/<name>.mdc (alwaysApply: true)
+const skillsDir = path.join(ROOT, 'skills');
+let skillN = 0;
+ensure(path.join(OUT, 'rules', 'skills'));
+if (fs.existsSync(skillsDir)) {
+  for (const e of fs.readdirSync(skillsDir, { withFileTypes: true })) {
+    if (!e.isDirectory()) continue;
+    const file = path.join(skillsDir, e.name, 'SKILL.md');
+    if (!fs.existsSync(file)) continue;
+    const content = fs.readFileSync(file, 'utf8');
+    const fmMatch = content.match(/^---\s*\n([\s\S]*?)\n---/);
+    const fm = fmMatch ? YAML.parse(fmMatch[1]) : { name: e.name };
+    const body = fmMatch ? content.slice(fmMatch[0].length).trim() : content;
+    const mdc = `---
+description: ${JSON.stringify(fm.description || fm.name)}
+alwaysApply: false
+globs: ["**/*"]
+---
+
+${body}
+`;
+    fs.writeFileSync(path.join(OUT, 'rules', 'skills', e.name + '.mdc'), mdc);
+    skillN++;
+  }
+}
+console.log(`  skills     : ${skillN} (rules/skills/*.mdc)`);
+
+// hooks → .cursor/hooks.json (이벤트 이름 PascalCase → camelCase: before/after Tool)
+const hooksFile = path.join(ROOT, 'hooks', 'hooks.json');
+if (fs.existsSync(hooksFile)) {
+  const def = JSON.parse(fs.readFileSync(hooksFile, 'utf8'));
+  const remap = (arr) => (arr || []).map(e => ({ ...e, hook: e.hook.replace(/^scripts\//, 'hooks/') }));
+  const eventMap = {
+    PreToolUse: 'beforeTool',
+    PostToolUse: 'afterTool',
+    PreCompact: 'beforeCompact',
+    Stop: 'sessionStop',
+    SessionStart: 'sessionStart',
+    SessionEnd: 'sessionEnd',
+    UserPromptSubmit: 'userPromptSubmit',
+  };
+  const cursorHooks = { version: def.version };
+  for (const [src, dst] of Object.entries(eventMap)) {
+    const arr = remap(def[src]);
+    if (arr.length) cursorHooks[dst] = arr;
+  }
+  fs.writeFileSync(path.join(OUT, 'hooks.json'), JSON.stringify(cursorHooks, null, 2));
+  console.log('  hooks.json : OK (camelCase)');
+
+  // hooks/scripts/ → .cursor/hooks/
+  ensure(path.join(OUT, 'hooks'));
+  const hookScriptsDir = path.join(ROOT, 'hooks', 'scripts');
+  if (fs.existsSync(hookScriptsDir)) {
+    for (const f of fs.readdirSync(hookScriptsDir)) {
+      fs.copyFileSync(path.join(hookScriptsDir, f), path.join(OUT, 'hooks', f));
+    }
+  }
+}
+
+// .cursorrules — 단일 진입 가이드
+const manifest = YAML.parse(fs.readFileSync(path.join(ROOT, 'agent.yaml'), 'utf8'));
+const cursorrules = `# Auto-generated. agent.yaml + agents/*.md 가 원본.
+# HARNESS v${manifest.version} — Cursor 어댑터
+
+이 워크스페이스는 HARNESS 카탈로그를 기반으로 한다.
+.cursor/rules/agents/  : 11개 에이전트 (provider/model 메타데이터 포함)
+.cursor/rules/skills/  : ${manifest.skills?.length || 0}개 스킬 (claude-led-codex-review 등)
+.cursor/hooks.json     : Cursor 이벤트 (beforeTool/afterTool/...) 어댑터
+
+직접 편집 금지. 변경은 정규 카탈로그(agents/, skills/, agent.yaml)에서 하고
+\`scripts/build-cursor.js\` 를 다시 실행할 것.
+`;
+fs.writeFileSync(path.join(OUT, '.cursorrules'), cursorrules);
+console.log('  .cursorrules: OK');
+
+// AGENTS.md / RULES.md / SOUL.md 그대로 복사
+for (const f of ['AGENTS.md', 'RULES.md', 'SOUL.md', 'WORKING-CONTEXT.md']) {
+  const src = path.join(ROOT, f);
+  if (fs.existsSync(src)) fs.copyFileSync(src, path.join(OUT, f));
+}
+console.log('  governance : OK');
+
+console.log('=> .cursor 빌드 완료');

package/scripts/build-gemini.js

@@ -0,0 +1,117 @@
+#!/usr/bin/env node
+// 정규 카탈로그 → .gemini/ 로 투영.
+// Gemini 형식: 요약 중심 (output_format: summary). 풀 본문은 정규 카탈로그를 참조.
+// GEMINI.md 가 단일 진입점, 스킬은 description 만 노출 (progressive disclosure).
+
+import fs from 'node:fs';
+import path from 'node:path';
+import { fileURLToPath } from 'node:url';
+import YAML from 'yaml';
+import { buildRoots } from './core/build-roots.js';
+
+const __dirname = path.dirname(fileURLToPath(import.meta.url));
+const { sourceRoot: ROOT, targetRoot: TARGET_ROOT } = buildRoots(path.resolve(__dirname, '..'));
+const OUT = path.join(TARGET_ROOT, '.gemini');
+
+function ensure(dir) { fs.mkdirSync(dir, { recursive: true }); }
+
+console.log('=> build-gemini');
+ensure(OUT);
+
+const manifest = YAML.parse(fs.readFileSync(path.join(ROOT, 'agent.yaml'), 'utf8'));
+const pkg = JSON.parse(fs.readFileSync(path.join(ROOT, 'package.json'), 'utf8'));
+
+// GEMINI.md — 단일 진입점 + 스킬/에이전트 description 카탈로그 (포인터만)
+const lines = [];
+lines.push('# GEMINI.md');
+lines.push('');
+lines.push(`> 자동 생성. agent.yaml v${manifest.version} 이 원본.`);
+lines.push('> Gemini provider 가 받는 컨텍스트는 요약 형태. 풀 본문은 정규 카탈로그 참조.');
+lines.push('');
+lines.push('## 운영 원칙 (요약)');
+lines.push('');
+lines.push('- 한국어 응답 기본 (외부 영어 PR 환영).');
+lines.push('- 사실 조사 강제: Edit/Write 직전 importer/API/schema 확인.');
+lines.push('- read-only 기본. 사이드 이펙트는 명시 승인 후.');
+lines.push('- 모든 수정은 quality-gate → self-review → codex-review → human-gate 순.');
+lines.push('');
+
+lines.push('## 에이전트 (Gemini provider 전용)');
+lines.push('');
+lines.push('| Agent | Model | 용도 |');
+lines.push('|---|---|---|');
+const agentsDir = path.join(ROOT, 'agents');
+let geminiAgentN = 0;
+const allAgents = [];
+if (fs.existsSync(agentsDir)) {
+  for (const f of fs.readdirSync(agentsDir)) {
+    if (!f.endsWith('.md')) continue;
+    const content = fs.readFileSync(path.join(agentsDir, f), 'utf8');
+    const fmMatch = content.match(/^---\s*\n([\s\S]*?)\n---/);
+    if (!fmMatch) continue;
+    const fm = YAML.parse(fmMatch[1]);
+    allAgents.push(fm);
+    if (fm.provider === 'gemini') {
+      lines.push(`| ${fm.name} | ${fm.model || '?'} | ${fm.description || ''} |`);
+      geminiAgentN++;
+    }
+  }
+}
+if (geminiAgentN === 0) lines.push('| _(없음)_ | - | - |');
+lines.push('');
+
+lines.push('## 전체 에이전트 (참조용)');
+lines.push('');
+lines.push('| Agent | Provider | 핸드오프 가능 |');
+lines.push('|---|---|---|');
+for (const a of allAgents) {
+  lines.push(`| ${a.name} | ${a.provider || '?'} | ${a.provider === 'gemini' ? '✓' : '읽기 전용 핸드오프 수신'} |`);
+}
+lines.push('');
+
+lines.push('## 스킬 카탈로그 (description 만)');
+lines.push('');
+const skillsDir = path.join(ROOT, 'skills');
+const skillRows = [];
+if (fs.existsSync(skillsDir)) {
+  for (const e of fs.readdirSync(skillsDir, { withFileTypes: true })) {
+    if (!e.isDirectory()) continue;
+    const file = path.join(skillsDir, e.name, 'SKILL.md');
+    if (!fs.existsSync(file)) continue;
+    const fmMatch = fs.readFileSync(file, 'utf8').match(/^---\s*\n([\s\S]*?)\n---/);
+    if (!fmMatch) continue;
+    const fm = YAML.parse(fmMatch[1]);
+    skillRows.push({ name: fm.name || e.name, desc: fm.description || '' });
+  }
+}
+for (const s of skillRows) {
+  lines.push(`- **${s.name}** — ${s.desc}`);
+}
+lines.push('');
+lines.push('> 풀 본문이 필요하면 정규 카탈로그 \`skills/<name>/SKILL.md\` 를 직접 읽을 것.');
+lines.push('');
+
+lines.push('## MCP 서버 (참고)');
+lines.push('');
+for (const s of (manifest.mcp?.external_servers || [])) {
+  if (s.pin) lines.push(`- ${s.name}: \`${s.pin}\``);
+  else if (s.url) lines.push(`- ${s.name}: ${s.url}`);
+}
+lines.push('');
+
+fs.writeFileSync(path.join(OUT, 'GEMINI.md'), lines.join('\n'));
+console.log(`  GEMINI.md  : OK (agents=${geminiAgentN}/${allAgents.length}, skills=${skillRows.length})`);
+
+// settings.json — Gemini CLI 가 읽는 가벼운 설정
+const settings = {
+  $schema: 'https://gemini.dev/schemas/settings.schema.json',
+  harness_version: pkg.version,
+  context_files: ['GEMINI.md'],
+  provider_filter: 'gemini',
+  fact_forcing: manifest.security?.fact_forcing_default ?? true,
+  outbound_network_default: manifest.security?.outbound_network_default || 'deny',
+};
+fs.writeFileSync(path.join(OUT, 'settings.json'), JSON.stringify(settings, null, 2));
+console.log('  settings.json: OK');
+
+console.log('=> .gemini 빌드 완료');

package/scripts/build-opencode.js

@@ -0,0 +1,117 @@
+#!/usr/bin/env node
+// 정규 카탈로그 → .opencode/ 로 투영.
+// opencode 형식: JSON 단일 설정 (config_format: json).
+// agents/skills/hooks 를 모두 JSON 배열로 합성.
+
+import fs from 'node:fs';
+import path from 'node:path';
+import { fileURLToPath } from 'node:url';
+import YAML from 'yaml';
+import { buildRoots } from './core/build-roots.js';
+
+const __dirname = path.dirname(fileURLToPath(import.meta.url));
+const { sourceRoot: ROOT, targetRoot: TARGET_ROOT } = buildRoots(path.resolve(__dirname, '..'));
+const OUT = path.join(TARGET_ROOT, '.opencode');
+
+function ensure(dir) { fs.mkdirSync(dir, { recursive: true }); }
+
+console.log('=> build-opencode');
+ensure(OUT);
+
+const manifest = YAML.parse(fs.readFileSync(path.join(ROOT, 'agent.yaml'), 'utf8'));
+const pkg = JSON.parse(fs.readFileSync(path.join(ROOT, 'package.json'), 'utf8'));
+
+// agents 모으기
+const agents = [];
+const agentsDir = path.join(ROOT, 'agents');
+if (fs.existsSync(agentsDir)) {
+  for (const f of fs.readdirSync(agentsDir)) {
+    if (!f.endsWith('.md')) continue;
+    const content = fs.readFileSync(path.join(agentsDir, f), 'utf8');
+    const fmMatch = content.match(/^---\s*\n([\s\S]*?)\n---/);
+    if (!fmMatch) continue;
+    const fm = YAML.parse(fmMatch[1]);
+    const body = content.slice(fmMatch[0].length).trim();
+    agents.push({
+      name: fm.name,
+      description: fm.description || '',
+      provider: fm.provider || 'unknown',
+      model: fm.model || 'unknown',
+      sandbox: fm.sandbox || 'read-only',
+      tools_disallowed: fm.disallowedTools || [],
+      hand_off_to: fm.hand_off_to || [],
+      fact_forcing: !!fm.fact_forcing,
+      prompt: body,
+    });
+  }
+}
+
+// skills 모으기 (description 만 — progressive disclosure)
+const skills = [];
+const skillsDir = path.join(ROOT, 'skills');
+if (fs.existsSync(skillsDir)) {
+  for (const e of fs.readdirSync(skillsDir, { withFileTypes: true })) {
+    if (!e.isDirectory()) continue;
+    const file = path.join(skillsDir, e.name, 'SKILL.md');
+    if (!fs.existsSync(file)) continue;
+    const content = fs.readFileSync(file, 'utf8');
+    const fmMatch = content.match(/^---\s*\n([\s\S]*?)\n---/);
+    if (!fmMatch) continue;
+    const fm = YAML.parse(fmMatch[1]);
+    skills.push({
+      name: fm.name || e.name,
+      description: fm.description || '',
+      path: `skills/${e.name}/SKILL.md`,
+    });
+  }
+}
+
+// hooks 그대로 변환
+let hooks = null;
+const hooksFile = path.join(ROOT, 'hooks', 'hooks.json');
+if (fs.existsSync(hooksFile)) {
+  hooks = JSON.parse(fs.readFileSync(hooksFile, 'utf8'));
+}
+
+// MCP servers
+const mcpServers = (manifest.mcp?.external_servers || []).map(s => ({
+  name: s.name,
+  ...(s.pin ? { command: 'npx', args: ['-y', s.pin] } : {}),
+  ...(s.url ? { url: s.url, type: 'http' } : {}),
+}));
+
+// 단일 config.json
+const config = {
+  $schema: 'https://opencode.dev/schemas/config.schema.json',
+  name: 'harness',
+  version: pkg.version,
+  description: pkg.description,
+  agents,
+  skills,
+  hooks: hooks || null,
+  mcp: { servers: mcpServers },
+  profiles: manifest.profiles || null,
+  security: manifest.security || null,
+  routing: manifest.routing || null,
+};
+
+fs.writeFileSync(path.join(OUT, 'config.json'), JSON.stringify(config, null, 2));
+console.log(`  config.json: OK (agents=${agents.length}, skills=${skills.length}, mcp=${mcpServers.length})`);
+
+// hooks/scripts/ → .opencode/hooks/ (실 스크립트 파일 필요)
+if (fs.existsSync(path.join(ROOT, 'hooks', 'scripts'))) {
+  ensure(path.join(OUT, 'hooks'));
+  for (const f of fs.readdirSync(path.join(ROOT, 'hooks', 'scripts'))) {
+    fs.copyFileSync(path.join(ROOT, 'hooks', 'scripts', f), path.join(OUT, 'hooks', f));
+  }
+  console.log(`  hooks/     : ${fs.readdirSync(path.join(OUT, 'hooks')).length} files`);
+}
+
+// 거버넌스 마크다운 (요약)
+for (const f of ['AGENTS.md', 'RULES.md', 'SOUL.md']) {
+  const src = path.join(ROOT, f);
+  if (fs.existsSync(src)) fs.copyFileSync(src, path.join(OUT, f));
+}
+console.log('  governance : OK');
+
+console.log('=> .opencode 빌드 완료');

package/scripts/ci/catalog.js

@@ -0,0 +1,120 @@
+#!/usr/bin/env node
+// 정규 카탈로그 무결성 체크. agent.yaml 의 agents/skills/commands 가
+// 실제 파일과 일치하는지, 모듈이 누락 없이 컴포넌트를 참조하는지.
+
+import fs from 'node:fs';
+import path from 'node:path';
+import { fileURLToPath } from 'node:url';
+import YAML from 'yaml';
+import { validateProfileSafety } from '../lib/profile-safety.js';
+
+const __dirname = path.dirname(fileURLToPath(import.meta.url));
+const ROOT = path.resolve(__dirname, '..', '..');
+
+const errors = [];
+const warnings = [];
+
+function exists(rel) {
+  return fs.existsSync(path.join(ROOT, rel));
+}
+
+const manifest = YAML.parse(fs.readFileSync(path.join(ROOT, 'agent.yaml'), 'utf8'));
+
+// 1. agents/<name>.md 가 모두 존재하는가?
+for (const a of manifest.agents || []) {
+  if (!exists(`agents/${a}.md`)) {
+    warnings.push(`agent file missing: agents/${a}.md`);
+  }
+}
+
+// 2. skills/<name>/SKILL.md 존재?
+for (const s of manifest.skills || []) {
+  if (!exists(`skills/${s}/SKILL.md`)) {
+    warnings.push(`skill file missing: skills/${s}/SKILL.md`);
+  }
+}
+
+// 3. commands/<name>.md 존재?
+for (const c of manifest.commands || []) {
+  if (!exists(`commands/${c}.md`)) {
+    warnings.push(`command file missing: commands/${c}.md`);
+  }
+}
+
+// 4. hooks/hooks.json 존재?
+if (manifest.hooks?.file && !exists(manifest.hooks.file)) {
+  warnings.push(`hooks file missing: ${manifest.hooks.file}`);
+}
+
+// 5. 모듈 ↔ 컴포넌트 일관성
+const modules = JSON.parse(fs.readFileSync(path.join(ROOT, 'manifests/install-modules.json'), 'utf8'));
+const components = JSON.parse(fs.readFileSync(path.join(ROOT, 'manifests/install-components.json'), 'utf8'));
+const profiles = JSON.parse(fs.readFileSync(path.join(ROOT, 'manifests/install-profiles.json'), 'utf8'));
+
+for (const [mid, m] of Object.entries(modules.modules)) {
+  for (const cid of m.components) {
+    if (!components.components[cid]) {
+      errors.push(`module "${mid}" references missing component: ${cid}`);
+    }
+  }
+}
+
+// 6. 프로파일 ↔ 모듈 일관성
+for (const [pid, p] of Object.entries(profiles.profiles)) {
+  for (const mid of p.modules) {
+    if (!modules.modules[mid]) {
+      errors.push(`profile "${pid}" references missing module: ${mid}`);
+    }
+  }
+}
+
+const profileSafety = validateProfileSafety(profiles);
+errors.push(...profileSafety.errors);
+warnings.push(...profileSafety.warnings);
+
+// 7. 매니페스트 modules 와 install-modules 동기화
+const manifestModules = new Set(manifest.modules || []);
+const definedModules = new Set(Object.keys(modules.modules));
+for (const m of manifestModules) {
+  if (!definedModules.has(m)) errors.push(`agent.yaml lists undefined module: ${m}`);
+}
+
+// 출력
+function color(s, c) {
+  if (!process.stdout.isTTY) return s;
+  const codes = { red: 31, yellow: 33, green: 32, bold: 1 };
+  return `\x1b[${codes[c]}m${s}\x1b[0m`;
+}
+
+console.log('');
+console.log(color('HARNESS catalog integrity check', 'bold'));
+console.log('');
+
+if (warnings.length) {
+  console.log(color(`경고 (${warnings.length}):`, 'yellow'));
+  for (const w of warnings) console.log('  - ' + w);
+  console.log('');
+}
+
+if (errors.length) {
+  console.log(color(`오류 (${errors.length}):`, 'red'));
+  for (const e of errors) console.log('  - ' + e);
+  console.log('');
+  process.exit(1);
+}
+
+console.log(color('통과', 'green'));
+console.log(`  agents       선언 ${manifest.agents?.length || 0}, 파일 ${countExisting('agents', manifest.agents, '.md')}`);
+console.log(`  skills       선언 ${manifest.skills?.length || 0}, 파일 ${countExistingDir('skills', manifest.skills, 'SKILL.md')}`);
+console.log(`  commands     선언 ${manifest.commands?.length || 0}, 파일 ${countExisting('commands', manifest.commands, '.md')}`);
+console.log(`  modules      ${Object.keys(modules.modules).length}`);
+console.log(`  components   ${Object.keys(components.components).length}`);
+console.log(`  profiles     ${Object.keys(profiles.profiles).length}`);
+console.log('');
+
+function countExisting(dir, list, ext) {
+  return (list || []).filter(n => exists(`${dir}/${n}${ext}`)).length;
+}
+function countExistingDir(dir, list, file) {
+  return (list || []).filter(n => exists(`${dir}/${n}/${file}`)).length;
+}

package/scripts/ci/check-markers.js

@@ -0,0 +1,48 @@
+#!/usr/bin/env node
+// HARNESS:START / HARNESS:END 마커 무결성 검증.
+// 사용자 작성 영역과 자동 갱신 영역 사이가 짝지어져 있는지.
+
+import fs from 'node:fs';
+import path from 'node:path';
+import { fileURLToPath } from 'node:url';
+
+const __dirname = path.dirname(fileURLToPath(import.meta.url));
+const ROOT = path.resolve(__dirname, '..', '..');
+
+// 마커 사용 옵트인 파일 (자동 갱신 영역을 갖는 문서만 등록).
+// AGENTS.md 는 정전 풀 수동 문서이므로 미포함.
+const FILES = ['CLAUDE.md'];
+const START = /<!--\s*HARNESS:START(?:\s+version=\S+)?\s*-->/;
+const END = /<!--\s*HARNESS:END\s*-->/;
+
+let ok = true;
+
+for (const f of FILES) {
+  const p = path.join(ROOT, f);
+  if (!fs.existsSync(p)) {
+    console.error(`[SKIP] ${f} 없음`);
+    continue;
+  }
+  const content = fs.readFileSync(p, 'utf8');
+  const startIdx = content.search(START);
+  const endIdx = content.search(END);
+
+  if (startIdx === -1 && endIdx === -1) {
+    console.error(`[WARN] ${f}: 마커 없음 (자동 갱신 영역 없음)`);
+    continue;
+  }
+  if (startIdx === -1 || endIdx === -1) {
+    console.error(`[FAIL] ${f}: 마커가 짝이 안 맞음`);
+    ok = false;
+    continue;
+  }
+  if (startIdx > endIdx) {
+    console.error(`[FAIL] ${f}: HARNESS:END 가 HARNESS:START 앞에 있음`);
+    ok = false;
+    continue;
+  }
+  const body = content.substring(startIdx, endIdx);
+  console.error(`[OK]   ${f}: 자동 영역 ${body.length} bytes`);
+}
+
+if (!ok) process.exit(1);