@walwal-harness/cli 6.1.6 → 7.1.0

package/scripts/harness-runtime-stop.sh

@@ -0,0 +1,58 @@
+#!/bin/bash
+# harness-runtime-stop.sh — Stop walwal harness play/release runtime mode.
+
+set -uo pipefail
+
+SCRIPT_DIR="$(cd "$(dirname "$0")" && pwd)"
+source "$SCRIPT_DIR/lib/harness-render-progress.sh"
+
+PROJECT_ROOT="$(resolve_harness_root "${HARNESS_PROJECT_ROOT:-.}")" || exit 1
+HARNESS_DIR="$PROJECT_ROOT/.harness"
+PROGRESS="$HARNESS_DIR/progress.json"
+CONFIG="$HARNESS_DIR/config.json"
+RUNTIME_DIR="$HARNESS_DIR/runtime"
+
+[ -d "$HARNESS_DIR" ] || { echo "ERROR: .harness/ not found" >&2; exit 1; }
+[ -f "$PROGRESS" ] || { echo "ERROR: .harness/progress.json not found" >&2; exit 1; }
+[ -f "$CONFIG" ] || { echo "ERROR: .harness/config.json not found" >&2; exit 1; }
+command -v jq >/dev/null 2>&1 || { echo "ERROR: jq is required" >&2; exit 1; }
+
+MODE_FILE="$RUNTIME_DIR/harness-mode"
+ts="$(date -u +%Y-%m-%dT%H:%M:%SZ)"
+stopped=0
+
+for pid_file in "$RUNTIME_DIR/play.pid" "$RUNTIME_DIR/release.pid"; do
+  [ -f "$pid_file" ] || continue
+  pid="$(cat "$pid_file" 2>/dev/null || true)"
+  if [ -n "$pid" ] && kill -0 "$pid" 2>/dev/null; then
+    kill "$pid" 2>/dev/null || true
+    sleep 1
+    if kill -0 "$pid" 2>/dev/null; then
+      kill -9 "$pid" 2>/dev/null || true
+    fi
+    stopped=$((stopped + 1))
+  fi
+  rm -f "$pid_file"
+done
+
+rm -f "$MODE_FILE"
+
+tmp_config="$(mktemp)"
+jq '
+  .runtime.build.live = false |
+  .runtime.production.live = false
+' "$CONFIG" > "$tmp_config" && mv "$tmp_config" "$CONFIG" || rm -f "$tmp_config"
+
+tmp="$(mktemp)"
+jq --arg ts "$ts" --arg reason "$*" '
+  .runtime_state.mode = "stopped" |
+  .runtime_state.stopped_at = $ts |
+  .runtime_state.stop_reason = $reason |
+  .runtime_state.pid = null |
+  .service_ops.requested_mode = null |
+  .service_ops.monitor.stream_active = false |
+  .runtime.build.live = false |
+  .runtime.production.live = false
+' "$PROGRESS" > "$tmp" && mv "$tmp" "$PROGRESS" || rm -f "$tmp"
+
+echo "stopped runtime processes: $stopped"

package/scripts/harness-service-ops-monitor.sh

@@ -1,7 +1,8 @@
 #!/bin/bash
 # harness-service-ops-monitor.sh — deterministic Service-Ops production check
 #
-# Reads .harness/config.json runtime.production.services[] and writes:
+# Reads .env plus .harness/config.json runtime.build.commands[] and
+# runtime.production.services[] and writes:
 #   - progress.json.service_ops.health[]
 #   - progress.json.service_ops.monitor.last_check
 #   - .harness/actions/ops-report-hourly-<timestamp>.md
@@ -26,6 +27,29 @@ command -v jq >/dev/null 2>&1 || exit 0
 
 mkdir -p "$ACTIONS_DIR" "$OPS_DIR"
 
+ENV_FILE="$PROJECT_ROOT/.env"
+env_base_port=""
+if [ -f "$ENV_FILE" ]; then
+  env_base_port="$(grep -E '^HARNESS_BASE_PORT=[0-9]' "$ENV_FILE" 2>/dev/null | tail -1 | cut -d= -f2- | tr -d '"' || true)"
+fi
+config_base_port="$(jq -r 'if .runtime.ports.base == null then "" else (.runtime.ports.base|tostring) end' "$CONFIG" 2>/dev/null || true)"
+base_port="${env_base_port:-$config_base_port}"
+
+if [ -z "$base_port" ]; then
+  echo "ERROR: HARNESS_BASE_PORT is not set." >&2
+  echo "" >&2
+  echo "  CEO must agree on a {xx}000 base port with the Owner and add it to .env:" >&2
+  echo "    HARNESS_BASE_PORT=3000" >&2
+  echo "" >&2
+  echo "  OPS cannot monitor ports without a declared base. Set the value and re-run." >&2
+  exit 1
+fi
+
+range_size="$(jq -r '.runtime.ports.range_size // 1000' "$CONFIG" 2>/dev/null || echo 1000)"
+range_max=$((base_port + range_size - 1))
+
+build_live=$(jq -r '.runtime.build.live // false' "$CONFIG" 2>/dev/null || echo false)
+build_count=$(jq -r '(.runtime.build.commands // []) | length' "$CONFIG" 2>/dev/null || echo 0)
 live=$(jq -r '.runtime.production.live // false' "$CONFIG" 2>/dev/null || echo false)
 service_count=$(jq -r '(.runtime.production.services // []) | length' "$CONFIG" 2>/dev/null || echo 0)
 ts="$(date -u +%Y-%m-%dT%H:%M:%SZ)"
@@ -74,11 +98,83 @@ log_summary_json() {
     '{configured:true, exists:true, path:$path, recent_errors:$errors, last_line:$last}'
 }
 
+port_drift() {
+  local port="$1"
+  if [ -z "$port" ] || [ "$port" = "null" ]; then
+    echo "missing"
+  elif [ "$port" -lt "$base_port" ] || [ "$port" -gt "$range_max" ]; then
+    echo "outside_base_range"
+  else
+    echo "ok"
+  fi
+}
+
+build_results_file="$(mktemp)"
+: > "$build_results_file"
+if [ "$build_live" = "true" ] && [ "${build_count:-0}" -gt 0 ]; then
+  b=0
+  while [ "$b" -lt "$build_count" ]; do
+    cmd_cfg="$(jq -c ".runtime.build.commands[$b]" "$CONFIG")"
+    name="$(jq -r '.name // ("build-" + (input_line_number|tostring))' <<<"$cmd_cfg")"
+    cwd="$(jq -r '.cwd // "."' <<<"$cmd_cfg")"
+    command_text="$(jq -r '.command // empty' <<<"$cmd_cfg")"
+    expected_port="$(jq -r '.expected_port // empty' <<<"$cmd_cfg")"
+    log_path="$(jq -r '.log_path // empty' <<<"$cmd_cfg")"
+    owner="$(jq -r '.owner // "cto"' <<<"$cmd_cfg")"
+    drift="$(port_drift "$expected_port")"
+
+    port_state="not_configured"
+    if [ -n "$expected_port" ]; then
+      if tcp_check "127.0.0.1" "$expected_port"; then port_state="listening"; else port_state="down"; fi
+    fi
+
+    log_json="$(log_summary_json "$log_path")"
+    status="ok"
+    if [ "$drift" != "ok" ]; then
+      status="port_drift"
+    elif [ -n "$expected_port" ] && [ "$port_state" != "listening" ]; then
+      status="down"
+    elif [ "$(jq -r '.configured and (.exists|not)' <<<"$log_json")" = "true" ]; then
+      status="log_missing"
+    elif [ "$(jq -r '.recent_errors // 0' <<<"$log_json")" -gt 0 ]; then
+      status="warn"
+    fi
+
+    jq -n \
+      --arg ts "$ts" \
+      --arg name "$name" \
+      --arg cwd "$cwd" \
+      --arg command "$command_text" \
+      --arg expected_port "$expected_port" \
+      --arg owner "$owner" \
+      --arg port_state "$port_state" \
+      --arg port_drift "$drift" \
+      --arg status "$status" \
+      --argjson log "$log_json" \
+      '{
+        ts:$ts,
+        name:$name,
+        cwd:$cwd,
+        command:$command,
+        expected_port:(if $expected_port == "" or $expected_port == "null" then null else ($expected_port|tonumber?) end),
+        owner:$owner,
+        port_state:$port_state,
+        port_drift:$port_drift,
+        log:$log,
+        status:$status
+      }' >> "$build_results_file"
+    b=$((b + 1))
+  done
+fi
+build_results_json="$(jq -s '.' "$build_results_file")"
+rm -f "$build_results_file"
+
 if [ "$live" != "true" ] || [ "${service_count:-0}" -eq 0 ]; then
-  jq --arg ts "$ts" --arg report "$report_rel" '
+  jq --arg ts "$ts" --arg report "$report_rel" --argjson build "$build_results_json" '
     .service_ops.monitor.last_check = $ts |
     .service_ops.monitor.stream_active = false |
     .service_ops.monitor.last_report = $report |
+    .service_ops.build = $build |
     .service_ops.health = [] |
     .service_ops.incident.open = [] |
     .service_ops.incident.signature = "" |
@@ -95,10 +191,24 @@ if [ "$live" != "true" ] || [ "${service_count:-0}" -eq 0 ]; then
     echo ""
     echo "- ts: $ts"
     echo "- production.live: $live"
+    echo "- build.live: $build_live"
+    echo "- base_port: $base_port"
     echo "- services: $service_count"
+    echo "- build_commands: $build_count"
     echo "- verdict: NO_PRODUCTION_SERVICES"
     echo ""
-    echo "No production service endpoints are configured. Owner+CEO+CTO must define runtime.production.services[] before Service-Ops can monitor live servers."
+    echo "## Build Environments"
+    echo ""
+    echo "| Build | Command | Expected Port | Logs | Status |"
+    echo "|---|---|---:|---|---|"
+    jq -r '.[] |
+      "| \(.name) | `\(.command)` | " +
+      ((.expected_port // "n/a")|tostring) + " " + .port_state + " " + .port_drift +
+      " | " +
+      (if (.log.configured|not) then "not configured" elif (.log.exists|not) then "missing" else ((.log.recent_errors|tostring) + " recent errors") end) +
+      " | \(.status) |"' <<<"$build_results_json"
+    echo ""
+    echo "No production service endpoints are configured. Owner+CEO+CTO must define runtime.production.services[] before OPS can monitor live servers."
   } > "$report_path"
   echo "$report_rel"
   exit 0
@@ -111,14 +221,20 @@ i=0
 while [ "$i" -lt "$service_count" ]; do
   svc="$(jq -c ".runtime.production.services[$i]" "$CONFIG")"
   name="$(jq -r '.name // ("service-" + (input_line_number|tostring))' <<<"$svc")"
+  environment="$(jq -r '.environment // "unknown"' <<<"$svc")"
   host="$(jq -r '.host // "127.0.0.1"' <<<"$svc")"
   port="$(jq -r '.port // empty' <<<"$svc")"
   health_path="$(jq -r '.health_path // empty' <<<"$svc")"
   expected_status="$(jq -r '.expected_status // 200' <<<"$svc")"
   log_path="$(jq -r '.log_path // empty' <<<"$svc")"
+  owner="$(jq -r '.owner // "cto"' <<<"$svc")"
+  source="$(jq -r '.source // "owner-provided"' <<<"$svc")"
+  drift="$(port_drift "$port")"
 
   port_state="unknown"
-  if [ -n "$port" ] && tcp_check "$host" "$port"; then
+  if [ -z "$port" ] || [ "$port" = "null" ]; then
+    port_state="not_configured"
+  elif tcp_check "$host" "$port"; then
     port_state="listening"
   else
     port_state="down"
@@ -136,7 +252,9 @@ while [ "$i" -lt "$service_count" ]; do
   log_json="$(log_summary_json "$log_path")"
 
   status="ok"
-  if [ "$port_state" != "listening" ]; then
+  if [ "$drift" != "ok" ]; then
+    status="port_drift"
+  elif [ "$port_state" != "listening" ]; then
     status="down"
   elif [ "$health_ok" = "false" ]; then
     status="degraded"
@@ -149,6 +267,7 @@ while [ "$i" -lt "$service_count" ]; do
   jq -n \
     --arg ts "$ts" \
     --arg name "$name" \
+    --arg environment "$environment" \
     --arg host "$host" \
     --arg port "$port" \
     --arg port_state "$port_state" \
@@ -158,12 +277,16 @@ while [ "$i" -lt "$service_count" ]; do
     --arg health_status "$health_status" \
     --arg health_ok "$health_ok" \
     --arg status "$status" \
+    --arg owner "$owner" \
+    --arg source "$source" \
+    --arg port_drift "$drift" \
     --argjson log "$log_json" \
     '{
       ts:$ts,
       name:$name,
+      environment:$environment,
       host:$host,
-      port:($port|tonumber?),
+      port:(if $port == "" or $port == "null" then null else ($port|tonumber?) end),
       port_state:$port_state,
       health_path:(if $health_path == "" or $health_path == "null" then null else $health_path end),
       health_url:(if $health_url == "" then null else $health_url end),
@@ -171,6 +294,9 @@ while [ "$i" -lt "$service_count" ]; do
       health_status:(if $health_status == "null" then null else ($health_status|tonumber?) end),
       health_ok:(if $health_ok == "true" then true elif $health_ok == "false" then false else null end),
       log:$log,
+      owner:$owner,
+      source:$source,
+      port_drift:$port_drift,
       status:$status
     }' >> "$results_file"
   i=$((i + 1))
@@ -179,19 +305,20 @@ done
 results_json="$(jq -s '.' "$results_file")"
 rm -f "$results_file"
 
-down_count="$(jq '[.[] | select(.status == "down" or .status == "degraded")] | length' <<<"$results_json")"
-warn_count="$(jq '[.[] | select(.status == "warn" or .status == "log_missing")] | length' <<<"$results_json")"
+down_count="$(jq '[.[] | select(.status == "down" or .status == "degraded" or (.status == "port_drift" and .port_drift != "missing"))] | length' <<<"$results_json")"
+warn_count="$(jq '[.[] | select(.status == "warn" or .status == "log_missing" or (.status == "port_drift" and .port_drift == "missing"))] | length' <<<"$results_json")"
 ok_count="$(jq '[.[] | select(.status == "ok")] | length' <<<"$results_json")"
+build_warn_count="$(jq '[.[] | select(.status != "ok")] | length' <<<"$build_results_json")"
 verdict="OK"
-if [ "$down_count" -gt 0 ]; then verdict="INCIDENT"; elif [ "$warn_count" -gt 0 ]; then verdict="WARN"; fi
+if [ "$down_count" -gt 0 ]; then verdict="INCIDENT"; elif [ "$warn_count" -gt 0 ] || [ "$build_warn_count" -gt 0 ]; then verdict="WARN"; fi
 
 incidents_json="$(jq '
-  [ .[] | select(.status == "down" or .status == "degraded") |
+  [ .[] | select(.status == "down" or .status == "degraded" or (.status == "port_drift" and .port_drift != "missing")) |
     {
       id: ("OPS-" + (.name | ascii_upcase | gsub("[^A-Z0-9]+";"-"))),
       dept: "Operations",
       severity: (if .status == "down" then "critical" else "high" end),
-      message: (.name + " " + .status + " (" + .host + ":" + (.port|tostring) + ")"),
+      message: (.name + " " + .status + " (" + .environment + " " + .host + ":" + (.port|tostring) + ")"),
       ts: .ts
     }
   ]' <<<"$results_json")"
@@ -221,12 +348,13 @@ elif [ "$down_count" -eq 0 ] && [ "$warn_count" -eq 0 ]; then
   close_candidate=true
 fi
 
-jq --arg ts "$ts" --arg report "$report_rel" --arg signature "$incident_signature" --argjson repeat "$repeat_count" --argjson recovery "$recovery_required" --argjson partial "$partial_recovery" --argjson close_candidate "$close_candidate" --argjson health "$results_json" --argjson incidents "$incidents_json" --argjson warn "$warn_count" --argjson alert "$down_count" '
+jq --arg ts "$ts" --arg report "$report_rel" --arg signature "$incident_signature" --argjson repeat "$repeat_count" --argjson recovery "$recovery_required" --argjson partial "$partial_recovery" --argjson close_candidate "$close_candidate" --argjson build "$build_results_json" --argjson health "$results_json" --argjson incidents "$incidents_json" --argjson warn "$warn_count" --argjson alert "$down_count" '
   .service_ops.monitor.stream_active = false |
   .service_ops.monitor.last_check = $ts |
   .service_ops.monitor.last_report = $report |
   .service_ops.monitor.warns_this_sprint = ((.service_ops.monitor.warns_this_sprint // 0) + $warn) |
   .service_ops.monitor.alerts_this_sprint = ((.service_ops.monitor.alerts_this_sprint // 0) + $alert) |
+  .service_ops.build = $build |
   .service_ops.health = $health |
   .service_ops.incident.open = $incidents |
   .service_ops.incident.signature = $signature |
@@ -243,7 +371,10 @@ jq --arg ts "$ts" --arg report "$report_rel" --arg signature "$incident_signatur
   echo ""
   echo "- ts: $ts"
   echo "- production.live: true"
+  echo "- build.live: $build_live"
+  echo "- base_port: $base_port"
   echo "- services: $service_count"
+  echo "- build_commands: $build_count"
   echo "- verdict: $verdict"
   echo "- ok: $ok_count"
   echo "- warnings: $warn_count"
@@ -254,10 +385,23 @@ jq --arg ts "$ts" --arg report "$report_rel" --arg signature "$incident_signatur
   echo "- partial_recovery: $partial_recovery"
   echo "- close_candidate: $close_candidate"
   echo ""
-  echo "| Service | Port | Health | Logs | Status |"
-  echo "|---|---:|---|---|---|"
+  echo "## Build Environments"
+  echo ""
+  echo "| Build | Command | Expected Port | Logs | Status |"
+  echo "|---|---|---:|---|---|"
+  jq -r '.[] |
+    "| \(.name) | `\(.command)` | " +
+    ((.expected_port // "n/a")|tostring) + " " + .port_state + " " + .port_drift +
+    " | " +
+    (if (.log.configured|not) then "not configured" elif (.log.exists|not) then "missing" else ((.log.recent_errors|tostring) + " recent errors") end) +
+    " | \(.status) |"' <<<"$build_results_json"
+  echo ""
+  echo "## Service Environments"
+  echo ""
+  echo "| Service | Env | Port | Health | Logs | Status |"
+  echo "|---|---|---:|---|---|---|"
   jq -r '.[] |
-    "| \(.name) | \(.host):\(.port) \(.port_state) | " +
+    "| \(.name) | \(.environment) | \(.host):" + ((.port // "n/a")|tostring) + " \(.port_state) \(.port_drift) | " +
     (if .health_path == null then "n/a" else ((.health_status // "000")|tostring) + " expected " + ((.expected_status // 200)|tostring) end) +
     " | " +
     (if (.log.configured|not) then "not configured" elif (.log.exists|not) then "missing" else ((.log.recent_errors|tostring) + " recent errors") end) +
@@ -266,7 +410,7 @@ jq --arg ts "$ts" --arg report "$report_rel" --arg signature "$incident_signatur
   echo "## Raw"
   echo ""
   echo '```json'
-  jq '.' <<<"$results_json"
+  jq -n --argjson build "$build_results_json" --argjson services "$results_json" '{build:$build, services:$services}'
   echo '```'
 } > "$report_path"
 

package/scripts/harness-stop.sh

@@ -22,11 +22,29 @@ command -v jq >/dev/null 2>&1 || exit 0
 
 PROGRESS="$CWD/.harness/progress.json"
 CONFIG="$CWD/.harness/config.json"
+SCRIPT_DIR="$(cd "$(dirname "$0")" && pwd)"
 
 # Opt-out
 AUTO_CHAIN=$(jq -r '.behavior.auto_chain_on_stop // true' "$CONFIG" 2>/dev/null || echo "true")
 if [ "$AUTO_CHAIN" != "true" ]; then exit 0; fi
 
+# CXX direct-execution guard:
+# If a mission has CXX documents but no worker reports, block the stop so the
+# company loop must hire/dispatch workers instead of ending with CXX-only work.
+if [ -x "$SCRIPT_DIR/harness-worker-evidence-validate.sh" ]; then
+  WORKER_EVIDENCE_JSON=$("$SCRIPT_DIR/harness-worker-evidence-validate.sh" "$CWD" json 2>/dev/null || true)
+  WORKER_EVIDENCE_OK=$(echo "$WORKER_EVIDENCE_JSON" | jq -r 'if has("ok") then .ok else true end' 2>/dev/null || echo true)
+  if [ "$WORKER_EVIDENCE_OK" != "true" ]; then
+    REASON=$(echo "$WORKER_EVIDENCE_JSON" | jq -r '
+      "CXX 직접 실행 차단: " +
+      ([.violations[] | "\(.mission) has CXX docs without worker reports: \(.docs | join(","))"] | join("; ")) +
+      ". harness-hiring/resource-manager로 전문 worker를 고용 또는 배정하고 .harness/documents/{mission}/workers/{worker-name}.md 를 남긴 뒤 계속하라."
+    ' 2>/dev/null || echo "CXX 직접 실행 차단: worker report가 없는 mission이 있습니다. hired worker 보고서를 먼저 생성하세요.")
+    jq -nc --arg reason "$REASON" '{decision:"block", reason:$reason}'
+    exit 0
+  fi
+fi
+
 # 무한루프 방지: 한 sprint 안에서 stop_chain_count 가 상한을 넘으면 중단
 STOP_CHAIN_MAX=$(jq -r '.behavior.auto_chain_max_per_sprint // 200' "$CONFIG" 2>/dev/null || echo 200)
 STOP_CHAIN_COUNT=$(jq -r '.conductor.stop_chain_count // 0' "$PROGRESS" 2>/dev/null || echo 0)

package/scripts/harness-worker-evidence-validate.sh

@@ -0,0 +1,59 @@
+#!/bin/bash
+# harness-worker-evidence-validate.sh — block CXX direct execution without worker reports
+set -euo pipefail
+
+PROJECT_ROOT="${1:-.}"
+DOC_ROOT="$PROJECT_ROOT/.harness/documents"
+
+[ -d "$DOC_ROOT" ] || exit 0
+
+mode="${2:-text}"
+violations=()
+
+has_worker_report() {
+  local mission_dir="$1"
+  find "$mission_dir/workers" -maxdepth 1 -type f -name '*.md' 2>/dev/null | grep -q .
+}
+
+for mission_dir in "$DOC_ROOT"/*; do
+  [ -d "$mission_dir" ] || continue
+  mission_name="$(basename "$mission_dir")"
+
+  cxx_docs=()
+  for cxx in coo cdo cto cqo ops; do
+    cxx_path="$mission_dir/$cxx.md"
+    [ -s "$cxx_path" ] || continue
+    cxx_docs+=("$cxx.md")
+  done
+
+  [ "${#cxx_docs[@]}" -gt 0 ] || continue
+  if ! has_worker_report "$mission_dir"; then
+    violations+=("$mission_name:${cxx_docs[*]}")
+  fi
+done
+
+if [ "${#violations[@]}" -eq 0 ]; then
+  if [ "$mode" = "json" ]; then
+    jq -nc '{ok:true, violations:[]}'
+  fi
+  exit 0
+fi
+
+if [ "$mode" = "json" ]; then
+  printf '%s\n' "${violations[@]}" | jq -Rcs '
+    split("\n")[:-1]
+    | map(capture("(?<mission>[^:]+):(?<docs>.*)") | .docs = (.docs | split(" ")))
+    | {ok:false, violations:.}
+  '
+else
+  echo "CXX worker evidence violation:"
+  for violation in "${violations[@]}"; do
+    mission="${violation%%:*}"
+    docs="${violation#*:}"
+    echo "- mission: $mission"
+    echo "  cxx_docs: $docs"
+    echo "  required: at least one .harness/documents/$mission/workers/{worker-name}.md report"
+  done
+fi
+
+exit 1

package/scripts/import-agency-agents.js

@@ -0,0 +1,102 @@
+#!/usr/bin/env node
+
+const fs = require('fs');
+const path = require('path');
+
+const sourceRoot = process.argv[2] || '/Users/ted/Downloads/agency-agents-main';
+const targetRoot = process.argv[3] || path.resolve(process.cwd(), 'HR-Resource');
+
+function walk(dir, out = []) {
+  for (const entry of fs.readdirSync(dir, { withFileTypes: true })) {
+    const full = path.join(dir, entry.name);
+    if (entry.isDirectory()) walk(full, out);
+    else if (entry.isFile() && entry.name.endsWith('.md')) out.push(full);
+  }
+  return out;
+}
+
+function slugify(value) {
+  return value
+    .toLowerCase()
+    .replace(/[^a-z0-9]+/g, '-')
+    .replace(/^-+|-+$/g, '');
+}
+
+function parseFrontmatter(content) {
+  const match = /^---\n([\s\S]*?)\n---\n?/.exec(content);
+  if (!match) return null;
+  const frontmatter = match[1];
+  const fields = {};
+  for (const line of frontmatter.split('\n')) {
+    const m = /^([A-Za-z0-9_-]+):\s*(.*)$/.exec(line);
+    if (m) fields[m[1]] = m[2].replace(/^["']|["']$/g, '');
+  }
+  return { frontmatter, fields, body: content.slice(match[0].length) };
+}
+
+function hasAgentShape(parsed) {
+  return Boolean(parsed && parsed.fields.name && parsed.fields.description);
+}
+
+function convertFile(file) {
+  const content = fs.readFileSync(file, 'utf8');
+  const parsed = parseFrontmatter(content);
+  if (!hasAgentShape(parsed)) return null;
+
+  const sourceRel = path.relative(sourceRoot, file);
+  const sourceSlug = slugify(sourceRel.replace(/\.md$/, ''));
+  const agentName = slugify(parsed.fields.name);
+  const skillName = sourceSlug || agentName;
+  const destDir = path.join(targetRoot, skillName);
+  const dest = path.join(destDir, 'SKILL.md');
+
+  const description = parsed.fields.description.replace(/"/g, '\\"');
+  const body = parsed.body.replace(/^# /, `# ${parsed.fields.name}\n\n`);
+  const skill = [
+    '---',
+    `name: ${skillName}`,
+    `description: "${description}"`,
+    'model: sonnet',
+    'disable-model-invocation: false',
+    '---',
+    '',
+    '<!--',
+    `Imported from agency-agents: ${sourceRel}`,
+    'Original frontmatter:',
+    parsed.frontmatter,
+    '-->',
+    '',
+    body.trim(),
+    '',
+    '## Harness Operating Contract',
+    '',
+    '- You are a hireable HR-Resource worker, not a CXX executive.',
+    '- Work only after a CXX assigns a mission through `/hiring` and `/resource-manager` wiring.',
+    '- Start each assignment from fresh context.',
+    '- Record mission output in `.harness/documents/{mission_name}/workers/{name}.md` unless the requester specifies another mission document.',
+    '- Follow DDD boundaries for domain, application, infrastructure, and interface decisions.',
+    ''
+  ].join('\n');
+
+  fs.mkdirSync(destDir, { recursive: true });
+  fs.writeFileSync(dest, skill);
+  return { sourceRel, skillName };
+}
+
+const converted = [];
+for (const file of walk(sourceRoot)) {
+  const result = convertFile(file);
+  if (result) converted.push(result);
+}
+
+converted.sort((a, b) => a.skillName.localeCompare(b.skillName));
+const index = {
+  source: sourceRoot,
+  imported_at: new Date().toISOString(),
+  count: converted.length,
+  resources: converted
+};
+fs.mkdirSync(targetRoot, { recursive: true });
+fs.writeFileSync(path.join(targetRoot, 'index.json'), JSON.stringify(index, null, 2) + '\n');
+
+console.log(`Imported ${converted.length} agency agents into ${targetRoot}`);

package/scripts/play.sh

@@ -0,0 +1,104 @@
+#!/bin/bash
+# play.sh — Start walwal harness play build mode.
+
+set -uo pipefail
+
+SCRIPT_DIR="$(cd "$(dirname "$0")" && pwd)"
+source "$SCRIPT_DIR/lib/harness-render-progress.sh"
+
+PROJECT_ROOT="$(resolve_harness_root "${HARNESS_PROJECT_ROOT:-.}")" || exit 1
+HARNESS_DIR="$PROJECT_ROOT/.harness"
+CONFIG="$HARNESS_DIR/config.json"
+PROGRESS="$HARNESS_DIR/progress.json"
+RUNTIME_DIR="$HARNESS_DIR/runtime"
+LOG_DIR="$HARNESS_DIR/logs/$(date -u +%Y-%m-%d)"
+
+[ -d "$HARNESS_DIR" ] || { echo "ERROR: .harness/ not found" >&2; exit 1; }
+[ -f "$PROGRESS" ] || { echo "ERROR: .harness/progress.json not found" >&2; exit 1; }
+[ -f "$CONFIG" ] || { echo "ERROR: .harness/config.json not found" >&2; exit 1; }
+command -v jq >/dev/null 2>&1 || { echo "ERROR: jq is required" >&2; exit 1; }
+
+mkdir -p "$RUNTIME_DIR" "$LOG_DIR"
+
+MODE_FILE="$RUNTIME_DIR/harness-mode"
+PID_FILE="$RUNTIME_DIR/play.pid"
+LOG_FILE="$LOG_DIR/play-harness.log"
+ts="$(date -u +%Y-%m-%dT%H:%M:%SZ)"
+ENV_FILE="$PROJECT_ROOT/.env"
+
+active_mode=""
+[ -f "$MODE_FILE" ] && active_mode="$(cat "$MODE_FILE" 2>/dev/null || true)"
+if [ -n "$active_mode" ] && [ "$active_mode" != "play" ]; then
+  echo "ERROR: $active_mode mode is active. Run /stop-harness before /play-harness." >&2
+  exit 2
+fi
+
+if [ -f "$PID_FILE" ]; then
+  old_pid="$(cat "$PID_FILE" 2>/dev/null || true)"
+  if [ -n "$old_pid" ] && kill -0 "$old_pid" 2>/dev/null; then
+    echo "ERROR: play mode is already active with pid $old_pid" >&2
+    exit 2
+  fi
+fi
+
+cmd="$(jq -r '.runtime.play.command // empty' "$CONFIG" 2>/dev/null || true)"
+if [ -z "$cmd" ] || [ "$cmd" = "null" ]; then
+  cmd="$(jq -r '.runtime.build.commands[0].command // empty' "$CONFIG" 2>/dev/null || true)"
+fi
+[ -n "$cmd" ] || { echo "ERROR: runtime.play.command or runtime.build.commands[0].command must be configured" >&2; exit 1; }
+
+cwd="$(jq -r '.runtime.play.cwd // .runtime.build.commands[0].cwd // "."' "$CONFIG" 2>/dev/null || echo ".")"
+run_dir="$PROJECT_ROOT/$cwd"
+[ -d "$run_dir" ] || { echo "ERROR: play cwd does not exist: $cwd" >&2; exit 1; }
+
+env_base_port=""
+if [ -f "$ENV_FILE" ]; then
+  env_base_port="$(grep -E '^HARNESS_BASE_PORT=[0-9]' "$ENV_FILE" 2>/dev/null | tail -1 | cut -d= -f2- | tr -d '"' || true)"
+fi
+config_base_port="$(jq -r 'if .runtime.ports.base == null then "" else (.runtime.ports.base|tostring) end' "$CONFIG" 2>/dev/null || true)"
+base_port="${env_base_port:-$config_base_port}"
+
+(
+  cd "$run_dir" || exit 1
+  nohup bash -lc "$cmd $*" >> "$LOG_FILE" 2>&1 &
+  echo "$!"
+) > "$RUNTIME_DIR/play.pid.tmp"
+pid="$(cat "$RUNTIME_DIR/play.pid.tmp" 2>/dev/null || true)"
+rm -f "$RUNTIME_DIR/play.pid.tmp"
+[ -n "$pid" ] || { echo "ERROR: failed to start play command" >&2; exit 1; }
+
+printf '%s\n' "play" > "$MODE_FILE"
+printf '%s\n' "$pid" > "$PID_FILE"
+
+tmp_config="$(mktemp)"
+jq --arg log "$LOG_FILE" --arg cmd "$cmd" --arg cwd "$cwd" --arg base "$base_port" '
+  .runtime.build.live = true |
+  .runtime.production.live = false |
+  .runtime.build.commands[0].command = ((.runtime.build.commands[0].command // $cmd) | if . == "" then $cmd else . end) |
+  .runtime.build.commands[0].cwd = ((.runtime.build.commands[0].cwd // $cwd) | if . == "" then $cwd else . end) |
+  .runtime.build.commands[0].log_path = $log |
+  if ($base | length) > 0 then
+    .runtime.ports.base = (($base|tonumber?) // .runtime.ports.base) |
+    .runtime.build.commands[0].expected_port = ((.runtime.build.commands[0].expected_port // (($base|tonumber?) // null)))
+  else
+    .
+  end
+' "$CONFIG" > "$tmp_config" && mv "$tmp_config" "$CONFIG" || rm -f "$tmp_config"
+
+tmp="$(mktemp)"
+jq --arg ts "$ts" --arg pid "$pid" --arg log "$LOG_FILE" --arg cmd "$cmd" '
+  .runtime_state.mode = "play" |
+  .runtime_state.started_at = $ts |
+  .runtime_state.pid = ($pid|tonumber) |
+  .runtime_state.log_path = $log |
+  .runtime_state.command = $cmd |
+  .service_ops.requested_mode = "monitor" |
+  .service_ops.monitor.stream_active = true |
+  .runtime.build.live = true |
+  .runtime.production.live = false
+' "$PROGRESS" > "$tmp" && mv "$tmp" "$PROGRESS" || rm -f "$tmp"
+
+ops_report="$(bash "$SCRIPT_DIR/harness-service-ops-monitor.sh" "$PROJECT_ROOT" 2>/dev/null || true)"
+echo "play pid: $pid"
+echo "play log: $LOG_FILE"
+[ -n "$ops_report" ] && echo "ops report: $ops_report"