@zhijiewang/openharness 0.11.1 → 0.12.1

package/README.md

@@ -17,13 +17,34 @@
 
 AI coding agent in your terminal. Works with any LLM -- free local models or cloud APIs.
 
-[![npm version](https://img.shields.io/npm/v/@zhijiewang/openharness)](https://www.npmjs.com/package/@zhijiewang/openharness) [![npm downloads](https://img.shields.io/npm/dm/@zhijiewang/openharness)](https://www.npmjs.com/package/@zhijiewang/openharness) [![license](https://img.shields.io/npm/l/@zhijiewang/openharness)](LICENSE) ![Node.js 18+](https://img.shields.io/badge/node-18%2B-green) ![TypeScript](https://img.shields.io/badge/typescript-strict-blue) [![GitHub stars](https://img.shields.io/github/stars/zhijiewong/openharness)](https://github.com/zhijiewong/openharness) [![GitHub issues](https://img.shields.io/github/issues-raw/zhijiewong/openharness)](https://github.com/zhijiewong/openharness/issues) [![PRs Welcome](https://img.shields.io/badge/PRs-welcome-brightgreen)](https://github.com/zhijiewong/openharness/pulls)
+<p align="center">
+  <img src="assets/openharness_v0.11.1_4.gif" alt="OpenHarness demo" width="800" />
+</p>
 
----
+[![npm version](https://img.shields.io/npm/v/@zhijiewang/openharness)](https://www.npmjs.com/package/@zhijiewang/openharness) [![npm downloads](https://img.shields.io/npm/dm/@zhijiewang/openharness)](https://www.npmjs.com/package/@zhijiewang/openharness) [![license](https://img.shields.io/npm/l/@zhijiewang/openharness)](LICENSE) ![tests](https://img.shields.io/badge/tests-624-brightgreen) ![tools](https://img.shields.io/badge/tools-35-blue) ![Node.js 18+](https://img.shields.io/badge/node-18%2B-green) ![TypeScript](https://img.shields.io/badge/typescript-strict-blue) [![GitHub stars](https://img.shields.io/github/stars/zhijiewong/openharness)](https://github.com/zhijiewong/openharness) [![GitHub issues](https://img.shields.io/github/issues-raw/zhijiewong/openharness)](https://github.com/zhijiewong/openharness/issues) [![PRs Welcome](https://img.shields.io/badge/PRs-welcome-brightgreen)](https://github.com/zhijiewong/openharness/pulls)
 
-<video src="https://github.com/user-attachments/assets/ed19a2cc-14d3-4db3-aa5b-3dc07c444498" controls width="100%"></video>
+---
 
-*OpenHarness reading files, running commands, and editing code — powered by a local Ollama model.*
+## Table of Contents
+
+- [Quick Start](#quick-start)
+- [Why OpenHarness?](#why-openharness)
+- [Terminal UI](#terminal-ui)
+- [Tools (35)](#tools-35)
+- [Slash Commands (33)](#slash-commands-33)
+- [Permission Modes](#permission-modes)
+- [Hooks](#hooks)
+- [Checkpoints & Rewind](#checkpoints--rewind)
+- [Agent Roles](#agent-roles)
+- [Headless Mode & CI/CD](#headless-mode)
+- [Cybergotchi](#cybergotchi)
+- [MCP Servers](#mcp-servers)
+- [Providers](#providers)
+- [FAQ](#faq)
+- [Install](#install)
+- [Development](#development)
+- [Contributing](#contributing)
+- [Community](#community)
 
 ---
 
@@ -42,7 +63,17 @@ oh                                    # auto-detect local model
 oh --model ollama/qwen2.5:7b         # specific model
 oh --model gpt-4o                     # cloud model (needs OPENAI_API_KEY)
 oh --trust                            # auto-approve all tool calls
-oh run "fix the tests" --json         # headless mode for CI/CD
+oh --auto                             # auto-approve, block dangerous bash
+oh -p "fix the tests" --trust         # headless mode (single prompt, exit)
+oh run "review code" --json           # CI/CD with JSON output
+```
+
+**In-session commands:**
+```
+/rewind                               # undo last AI file change (checkpoint restore)
+/roles                                # list agent specializations
+/vim                                  # toggle vim mode
+Ctrl+O                                # flush transcript to scrollback for review
 ```
 
 ## Why OpenHarness?
@@ -53,7 +84,7 @@ Most AI coding agents are locked to one provider or cost $20+/month. OpenHarness
 |---|---|---|---|---|
 | Any LLM | Yes (Ollama, OpenAI, Anthropic, OpenRouter, any OpenAI-compatible) | Anthropic only | Yes | Yes |
 | Free local models | Ollama native | No | Yes | Yes |
-| Tools | 25 with permission gates | 43+ | File-focused | 20+ |
+| Tools | 35 with permission gates | 43+ | File-focused | 20+ |
 | Permission modes | 7 (ask, trust, deny, acceptEdits, plan, auto, bypass) | 7 | Basic | Basic |
 | Git integration | Auto-commit + /undo + /rewind checkpoints | Yes | Deep git | Basic |
 | Slash commands | 30+ built-in | 80+ | Some | Some |
@@ -127,33 +158,59 @@ statusLineFormat: '{model} │ {tokens} │ {cost} │ {ctx}'
 
 Available variables: `{model}`, `{tokens}` (input↑ output↓), `{cost}` ($X.XXXX), `{ctx}` (context usage bar). Empty sections are automatically collapsed.
 
-## Tools (25)
+## Tools (35)
 
 | Tool | Risk | Description |
 |------|------|-------------|
-| Bash | high | Execute shell commands with live streaming output |
-| Read | low | Read files with line ranges |
+| **Core** | | |
+| Bash | high | Execute shell commands with live streaming output (AST safety analysis) |
+| Read | low | Read files with line ranges, PDF support |
 | ImageRead | low | Read images/PDFs for multimodal analysis |
 | Write | medium | Create or overwrite files |
 | Edit | medium | Search-and-replace edits |
+| MultiEdit | medium | Atomic multi-file edits (all succeed or none) |
 | Glob | low | Find files by pattern |
-| Grep | low | Regex content search |
+| Grep | low | Regex content search with context lines |
 | LS | low | List directory contents with sizes |
+| **Web** | | |
 | WebFetch | medium | Fetch URL content (SSRF-protected) |
 | WebSearch | medium | Search the web |
+| RemoteTrigger | high | HTTP requests to webhooks/APIs |
+| **Tasks** | | |
 | TaskCreate | low | Create structured tasks |
 | TaskUpdate | low | Update task status |
 | TaskList | low | List all tasks |
+| TaskGet | low | Get task details |
+| TaskStop | low | Stop a running task |
+| TaskOutput | low | Get task output |
+| **Agents** | | |
+| Agent | medium | Spawn a sub-agent (with role specialization) |
+| ParallelAgent | medium | Dispatch multiple agents with DAG dependencies |
+| SendMessage | low | Agent-to-agent peer messaging |
 | AskUser | low | Ask user a question with options |
-| Skill | low | Invoke a skill from .oh/skills/ |
-| Agent | medium | Spawn a sub-agent for delegation |
+| **Scheduling** | | |
+| CronCreate | medium | Schedule recurring tasks |
+| CronDelete | medium | Remove scheduled tasks |
+| CronList | low | List all scheduled tasks |
+| **Planning** | | |
 | EnterPlanMode | low | Enter structured planning mode |
 | ExitPlanMode | low | Exit planning mode |
+| **Code Intelligence** | | |
+| Diagnostics | low | LSP-based code diagnostics |
 | NotebookEdit | medium | Edit Jupyter notebooks |
+| **Memory & Discovery** | | |
+| Memory | low | Save/list/search persistent memories |
+| Skill | low | Invoke a skill from .oh/skills/ |
+| ToolSearch | low | Find tools by description |
+| **Git Worktrees** | | |
+| EnterWorktree | medium | Create isolated git worktree |
+| ExitWorktree | medium | Remove a git worktree |
+| **Process** | | |
+| KillProcess | high | Stop processes by PID or name |
 
-Low-risk read-only tools auto-approve. Medium and high risk tools require confirmation in `ask` mode. Use `--trust` to skip all prompts.
+Low-risk read-only tools auto-approve. Medium and high risk tools require confirmation in `ask` mode. Use `--trust` or `--auto` to skip prompts.
 
-## Slash Commands (30+)
+## Slash Commands (33)
 
 Type these during a chat session. Aliases: `/q` exit, `/h` help, `/c` commit, `/m` model, `/s` status.
 
@@ -309,6 +366,16 @@ mcpServers:
 
 MCP tools appear alongside built-in tools. `/status` shows connected servers.
 
+**MCP Server Registry** — browse and install from a curated catalog:
+
+```
+/mcp-registry              # browse all available servers
+/mcp-registry github       # show install config for a specific server
+/mcp-registry database     # search by category
+```
+
+Categories: filesystem, git, database, api, search, productivity, dev-tools, ai.
+
 ## Git Integration
 
 OpenHarness auto-commits AI edits in git repos:
@@ -334,6 +401,58 @@ Every file modification is automatically checkpointed before execution. If somet
 
 Checkpoints are stored in `.oh/checkpoints/` and cover FileWrite, FileEdit, and Bash commands that modify files.
 
+## Verification Loops
+
+After every file edit (Edit, Write, MultiEdit), openHarness automatically runs language-appropriate lint/typecheck commands and feeds the results back into the agent context. This is the single highest-impact harness engineering pattern — research shows 2-3x quality improvement from automated feedback.
+
+**Auto-detection** — if your project has `tsconfig.json`, `.eslintrc*`, `pyproject.toml`, `go.mod`, or `Cargo.toml`, verification rules are detected automatically. No configuration needed.
+
+**Custom rules** via `.oh/config.yaml`:
+
+```yaml
+verification:
+  enabled: true       # default: true (auto-detect)
+  mode: warn          # 'warn' appends to output, 'block' marks as error
+  rules:
+    - extensions: [".ts", ".tsx"]
+      lint: "npx tsc --noEmit 2>&1 | head -20"
+      timeout: 15000
+    - extensions: [".py"]
+      lint: "ruff check {file} 2>&1 | head -10"
+```
+
+The agent sees `[Verification passed]` or `[Verification FAILED]` with the linter output after each edit, enabling self-correction.
+
+## Memory Consolidation
+
+On session exit, openHarness automatically prunes stale memories using temporal decay:
+
+- Memories not accessed in 30+ days lose 0.1 relevance per 30-day period
+- Memories below 0.1 relevance are permanently deleted
+- Updated relevance scores are persisted to memory files
+
+This keeps the memory system lean and relevant. Configure in `.oh/config.yaml`:
+
+```yaml
+memory:
+  consolidateOnExit: true   # default: true
+```
+
+## Scheduled Tasks (Cron)
+
+Create recurring tasks that run automatically in the background:
+
+```
+# Via slash commands
+/cron list                    # show all scheduled tasks
+/cron create "check-tests"    # create a new task (interactive)
+/cron delete <id>             # remove a task
+```
+
+**Schedule syntax:** `every 5m`, `every 2h`, `every 1d`
+
+The cron executor checks every 60 seconds for due tasks and runs them via sub-queries. Results are stored in `~/.oh/crons/history/`.
+
 ## Agent Roles
 
 Dispatch specialized sub-agents for focused tasks:
@@ -342,16 +461,25 @@ Dispatch specialized sub-agents for focused tasks:
 /roles            # list all available roles
 ```
 
-| Role | Description |
-|------|-------------|
-| `code-reviewer` | Find bugs, security issues, style problems |
-| `test-writer` | Generate unit and integration tests |
-| `docs-writer` | Write documentation and comments |
-| `debugger` | Systematic bug investigation |
-| `refactorer` | Simplify code without changing behavior |
-| `security-auditor` | OWASP, injection, secrets, CVE scanning |
+| Role | Description | Tools |
+|------|-------------|-------|
+| `code-reviewer` | Find bugs, security issues, style problems | Read-only |
+| `test-writer` | Generate unit and integration tests | Read + Write |
+| `docs-writer` | Write documentation and comments | Read + Write + Edit |
+| `debugger` | Systematic bug investigation | Read-only + Bash |
+| `refactorer` | Simplify code without changing behavior | All file tools + Bash |
+| `security-auditor` | OWASP, injection, secrets, CVE scanning | Read-only + Bash |
+| `evaluator` | Evaluate code quality and run tests (read-only) | Read-only + Bash + Diagnostics |
+| `planner` | Design step-by-step implementation plans | Read-only + Bash |
+| `architect` | Analyze architecture and design structural changes | Read-only |
+| `migrator` | Systematic codebase migrations and upgrades | All file tools + Bash |
+
+Each role restricts the sub-agent to only its suggested tools. You can also pass `allowed_tools` explicitly:
 
-The LLM can dispatch these via `Agent({ subagent_type: 'code-reviewer', prompt: '...' })`.
+```
+Agent({ subagent_type: 'evaluator', prompt: 'Run all tests and report results' })
+Agent({ allowed_tools: ['Read', 'Grep'], prompt: 'Search for all TODO comments' })
+```
 
 ## Headless Mode
 
@@ -446,6 +574,31 @@ oh --model llamacpp/my-model
 oh models                    # list available models
 ```
 
+## Configuration Hierarchy
+
+Config is loaded in layers (later overrides earlier):
+
+1. **Global** `~/.oh/config.yaml` — default provider, model, theme for all projects
+2. **Project** `.oh/config.yaml` — project-specific settings
+3. **Local** `.oh/config.local.yaml` — personal overrides (gitignored)
+
+Set your default provider once globally:
+
+```yaml
+# ~/.oh/config.yaml
+provider: ollama
+model: llama3
+permissionMode: ask
+theme: dark
+```
+
+Then per-project configs only need what's different:
+
+```yaml
+# .oh/config.yaml
+model: codellama   # override just the model
+```
+
 ## Project Rules
 
 Create `.oh/RULES.md` in any repo (or run `oh init`):
@@ -458,6 +611,42 @@ Create `.oh/RULES.md` in any repo (or run `oh init`):
 
 Rules load automatically into every session.
 
+## How It Works
+
+```mermaid
+graph LR
+    User[User Input] --> REPL[REPL Loop]
+    REPL --> Query[Query Engine]
+    Query --> Provider[LLM Provider]
+    Provider --> LLM[Ollama / OpenAI / Anthropic]
+    LLM --> Tools[Tool Execution]
+    Tools --> Permissions{Permission Check}
+    Permissions -->|Approved| Execute[Run Tool]
+    Permissions -->|Blocked| Deny[Deny & Report]
+    Execute --> Response[Stream Response]
+    Response --> REPL
+```
+
+## FAQ
+
+**Does it work offline?**
+Yes. Use Ollama with a local model — no internet or API key needed.
+
+**How much does it cost?**
+Free. OpenHarness is MIT licensed. You bring your own API key (BYOK) for cloud models, or use Ollama for free.
+
+**Is it safe?**
+Yes. 7 permission modes control what tools can do. Bash commands are analyzed by an AST parser that blocks destructive patterns (`rm -rf`, `curl | bash`, etc.). Every file change is checkpointed and reversible with `/rewind`.
+
+**Can I use it in CI/CD?**
+Yes. Use `oh -p "prompt" --auto` for headless execution, or the built-in GitHub Action for PR reviews.
+
+**Does it support my language/framework?**
+Yes. OpenHarness is language-agnostic — it reads, writes, and executes code in any language. Syntax highlighting covers 20+ languages.
+
+**How does it compare to Claude Code?**
+~90% feature parity for CLI use cases. Main advantage: works with ANY LLM (not just Anthropic). See the [comparison table](#why-openharness) above.
+
 ## Install
 
 Requires **Node.js 18+**.

package/dist/DeferredTool.d.ts

@@ -0,0 +1,34 @@
+/**
+ * DeferredTool — lazy-loads tool schemas to reduce system prompt size.
+ *
+ * Wraps a built-in tool with a minimal prompt (name + description only).
+ * Full schema and prompt are loaded on first invocation or when resolved
+ * via ToolSearch. This mirrors the DeferredMcpTool pattern.
+ *
+ * Token savings: deferred tools contribute ~15 tokens to the system prompt
+ * instead of ~150, reducing context pressure by ~90% per deferred tool.
+ */
+import { z } from "zod";
+import type { Tool, ToolContext, ToolResult } from "./Tool.js";
+import type { RiskLevel } from "./types/permissions.js";
+export declare class DeferredTool implements Tool<z.ZodType> {
+    readonly name: string;
+    readonly description: string;
+    readonly inputSchema: z.ZodType;
+    readonly riskLevel: RiskLevel;
+    private inner;
+    private _activated;
+    constructor(tool: Tool);
+    /** Whether this tool has been activated (called or resolved) */
+    get activated(): boolean;
+    isReadOnly(input: unknown): boolean;
+    isConcurrencySafe(input: unknown): boolean;
+    call(input: any, context: ToolContext): Promise<ToolResult>;
+    /** Minimal prompt when deferred, full prompt when activated */
+    prompt(): string;
+    /** Get the full inner tool (for ToolSearch resolution) */
+    getInner(): Tool;
+    /** Activate this tool so it returns full prompt on next call to prompt() */
+    activate(): void;
+}
+//# sourceMappingURL=DeferredTool.d.ts.map

package/dist/DeferredTool.js

@@ -0,0 +1,62 @@
+/**
+ * DeferredTool — lazy-loads tool schemas to reduce system prompt size.
+ *
+ * Wraps a built-in tool with a minimal prompt (name + description only).
+ * Full schema and prompt are loaded on first invocation or when resolved
+ * via ToolSearch. This mirrors the DeferredMcpTool pattern.
+ *
+ * Token savings: deferred tools contribute ~15 tokens to the system prompt
+ * instead of ~150, reducing context pressure by ~90% per deferred tool.
+ */
+import { z } from "zod";
+export class DeferredTool {
+    name;
+    description;
+    inputSchema;
+    riskLevel;
+    inner;
+    _activated = false;
+    constructor(tool) {
+        this.inner = tool;
+        this.name = tool.name;
+        this.description = tool.description;
+        this.riskLevel = tool.riskLevel;
+        // Permissive schema until activated — accepts any object
+        this.inputSchema = z.record(z.unknown());
+    }
+    /** Whether this tool has been activated (called or resolved) */
+    get activated() { return this._activated; }
+    isReadOnly(input) {
+        return this.inner.isReadOnly(input);
+    }
+    isConcurrencySafe(input) {
+        return this.inner.isConcurrencySafe(input);
+    }
+    async call(input, context) {
+        this._activated = true;
+        // Validate with the real schema
+        const parsed = this.inner.inputSchema.safeParse(input);
+        if (!parsed.success) {
+            return {
+                output: `Schema validation error: ${parsed.error.message}`,
+                isError: true,
+            };
+        }
+        return this.inner.call(parsed.data, context);
+    }
+    /** Minimal prompt when deferred, full prompt when activated */
+    prompt() {
+        if (this._activated)
+            return this.inner.prompt();
+        return `[deferred] ${this.name}: ${this.description}`;
+    }
+    /** Get the full inner tool (for ToolSearch resolution) */
+    getInner() {
+        return this.inner;
+    }
+    /** Activate this tool so it returns full prompt on next call to prompt() */
+    activate() {
+        this._activated = true;
+    }
+}
+//# sourceMappingURL=DeferredTool.js.map

package/dist/agents/roles.js

@@ -21,7 +21,7 @@ const roles = [
 - Verify that changes match the stated intent
 
 Be specific: cite file paths, line numbers, and code snippets. Prioritize issues by severity (critical > major > minor). Don't mention things that look fine — focus on problems.`,
-        suggestedTools: ['FileRead', 'Glob', 'Grep', 'LS'],
+        suggestedTools: ['Read', 'Glob', 'Grep', 'LS'],
     },
     {
         id: 'test-writer',
@@ -36,7 +36,7 @@ Be specific: cite file paths, line numbers, and code snippets. Prioritize issues
 - Include both positive and negative test cases
 
 Read existing tests first to match the style, then write new tests.`,
-        suggestedTools: ['FileRead', 'FileWrite', 'Glob', 'Grep', 'Bash'],
+        suggestedTools: ['Read', 'Write', 'Glob', 'Grep', 'Bash'],
     },
     {
         id: 'docs-writer',
@@ -51,7 +51,7 @@ Read existing tests first to match the style, then write new tests.`,
 - Keep documentation in sync with the actual code
 
 Write for the target audience (developers using this project). Be practical, not verbose.`,
-        suggestedTools: ['FileRead', 'FileWrite', 'FileEdit', 'Glob', 'Grep'],
+        suggestedTools: ['Read', 'Write', 'Edit', 'Glob', 'Grep'],
     },
     {
         id: 'debugger',
@@ -66,7 +66,7 @@ Write for the target audience (developers using this project). Be practical, not
 - Propose a minimal fix that addresses the root cause, not the symptom
 
 Follow systematic debugging: read errors → reproduce → check changes → trace data → form hypothesis → test minimally.`,
-        suggestedTools: ['FileRead', 'Glob', 'Grep', 'Bash', 'LS'],
+        suggestedTools: ['Read', 'Glob', 'Grep', 'Bash', 'LS'],
     },
     {
         id: 'refactorer',
@@ -81,7 +81,7 @@ Follow systematic debugging: read errors → reproduce → check changes → tra
 - Ensure all existing tests still pass after refactoring
 
 Do NOT add new features or change behavior. The refactored code must be functionally identical. Run tests after each change.`,
-        suggestedTools: ['FileRead', 'FileWrite', 'FileEdit', 'Glob', 'Grep', 'Bash'],
+        suggestedTools: ['Read', 'Write', 'Edit', 'Glob', 'Grep', 'Bash'],
     },
     {
         id: 'security-auditor',
@@ -98,7 +98,63 @@ Do NOT add new features or change behavior. The refactored code must be function
 - Check dependency versions for known CVEs
 
 Report findings with severity (Critical/High/Medium/Low), affected file:line, and recommended fix.`,
-        suggestedTools: ['FileRead', 'Glob', 'Grep', 'Bash'],
+        suggestedTools: ['Read', 'Glob', 'Grep', 'Bash'],
+    },
+    {
+        id: 'evaluator',
+        name: 'Evaluator',
+        description: 'Evaluates code quality, correctness, and test results (read-only)',
+        systemPromptSupplement: `You are an evaluator agent. Your job is to:
+- Review code changes for correctness and quality
+- Run existing tests and report results
+- Check for regressions against the stated requirements
+- Verify that changes match the stated intent
+- Provide a pass/fail assessment with specific findings
+
+You CANNOT modify files. Only read, search, and run test/lint commands to evaluate.`,
+        suggestedTools: ['Read', 'Glob', 'Grep', 'LS', 'Bash', 'Diagnostics'],
+    },
+    {
+        id: 'planner',
+        name: 'Planner',
+        description: 'Designs step-by-step implementation plans from requirements',
+        systemPromptSupplement: `You are a planning agent. Your job is to:
+- Read the codebase to understand architecture, patterns, and conventions
+- Design a detailed step-by-step implementation plan for the given task
+- Identify files to create, modify, or delete with specific change descriptions
+- Flag risks, dependencies, and the recommended implementation order
+- Estimate scope (number of files, complexity)
+
+Do NOT implement anything. Your output is a plan document, not code. Read widely before planning.`,
+        suggestedTools: ['Read', 'Glob', 'Grep', 'LS', 'Bash'],
+    },
+    {
+        id: 'architect',
+        name: 'Architect',
+        description: 'Analyzes system architecture and designs structural changes',
+        systemPromptSupplement: `You are an architecture agent. Your job is to:
+- Map the current system architecture (modules, dependencies, data flow)
+- Identify architectural patterns and conventions in use
+- Design structural changes that preserve existing patterns
+- Evaluate trade-offs between approaches (performance, maintainability, complexity)
+- Document interfaces, contracts, and integration points
+
+Focus on the big picture: module boundaries, data flow, dependency graphs. Leave implementation details to other agents.`,
+        suggestedTools: ['Read', 'Glob', 'Grep', 'LS'],
+    },
+    {
+        id: 'migrator',
+        name: 'Migrator',
+        description: 'Performs codebase migrations (API upgrades, framework changes, renames)',
+        systemPromptSupplement: `You are a migration agent. Your job is to:
+- Identify all occurrences of the pattern/API/convention being migrated
+- Apply changes systematically across all affected files
+- Preserve behavior while updating the implementation
+- Run tests after each batch of changes to catch regressions
+- Handle edge cases and conditional patterns that need manual review
+
+Work methodically: search exhaustively, change incrementally, test after each batch. Never leave a migration half-done.`,
+        suggestedTools: ['Read', 'Write', 'Edit', 'Glob', 'Grep', 'Bash'],
     },
 ];
 /** Get a role by ID */

package/dist/commands/index.js

@@ -27,7 +27,7 @@ register("help", "Show available commands", () => {
     const categories = {
         'Session': ['clear', 'compact', 'export', 'history', 'browse', 'resume', 'fork', 'pin', 'unpin'],
         'Git': ['diff', 'undo', 'rewind', 'commit', 'log'],
-        'Info': ['help', 'cost', 'status', 'config', 'files', 'model', 'memory', 'doctor', 'context', 'mcp'],
+        'Info': ['help', 'cost', 'status', 'config', 'files', 'model', 'memory', 'doctor', 'context', 'mcp', 'mcp-registry'],
         'Settings': ['theme', 'vim', 'companion', 'fast', 'keys'],
         'AI': ['plan', 'review', 'roles'],
         'Pet': ['cybergotchi'],
@@ -519,14 +519,43 @@ register("context", "Show context window usage breakdown", (_args, ctx) => {
 register("mcp", "Show MCP server status", () => {
     const mcp = connectedMcpServers();
     if (mcp.length === 0) {
-        return { output: "No MCP servers connected.\nConfigure in .oh/config.yaml under mcpServers.", handled: true };
+        return { output: "No MCP servers connected.\nConfigure in .oh/config.yaml under mcpServers.\nRun /mcp-registry to browse available servers.", handled: true };
     }
     const lines = [`MCP Servers (${mcp.length} connected):\n`];
     for (const name of mcp) {
         lines.push(`  ✓ ${name}`);
     }
+    lines.push("\nRun /mcp-registry to browse and add more servers.");
     return { output: lines.join("\n"), handled: true };
 });
+register("mcp-registry", "Browse and add MCP servers from the curated registry", (args) => {
+    const { searchRegistry, formatRegistry, generateConfigBlock, MCP_REGISTRY } = require('../mcp/registry.js');
+    const query = args.trim();
+    if (!query) {
+        // Show full registry
+        const output = `MCP Server Registry (${MCP_REGISTRY.length} servers)\n${'─'.repeat(50)}\n\n${formatRegistry()}\n\nUsage:\n  /mcp-registry <name>    Show install config for a server\n  /mcp-registry <keyword> Search by name, description, or category`;
+        return { output, handled: true };
+    }
+    // Search or show specific server
+    const results = searchRegistry(query);
+    if (results.length === 0) {
+        return { output: `No MCP servers found matching "${query}".`, handled: true };
+    }
+    if (results.length === 1) {
+        // Show install instructions
+        const entry = results[0];
+        const config = generateConfigBlock(entry);
+        const envNote = entry.envVars?.length
+            ? `\n\nRequired environment variables:\n${entry.envVars.map((v) => `  - ${v}`).join('\n')}`
+            : '';
+        return {
+            output: `${entry.name} — ${entry.description}\nPackage: ${entry.package}\nRisk: ${entry.riskLevel ?? 'medium'}${envNote}\n\nAdd to .oh/config.yaml under mcpServers:\n\n${config}`,
+            handled: true,
+        };
+    }
+    // Multiple results
+    return { output: `Found ${results.length} servers:\n\n${formatRegistry(results)}`, handled: true };
+});
 function setPinned(args, ctx, pinned) {
     const idx = parseInt(args.trim(), 10);
     if (isNaN(idx) || idx < 1 || idx > ctx.messages.length) {

package/dist/harness/config.d.ts

@@ -25,6 +25,11 @@ export type ToolPermissionRule = {
     action: "allow" | "deny" | "ask";
     pattern?: string;
 };
+export type VerificationRuleConfig = {
+    extensions: string[];
+    lint?: string;
+    timeout?: number;
+};
 export type OhConfig = {
     provider: string;
     model: string;
@@ -36,6 +41,16 @@ export type OhConfig = {
     hooks?: HooksConfig;
     toolPermissions?: ToolPermissionRule[];
     statusLineFormat?: string;
+    /** Verification loops — auto-run lint/typecheck after file edits */
+    verification?: {
+        enabled?: boolean;
+        mode?: 'warn' | 'block';
+        rules?: VerificationRuleConfig[];
+    };
+    /** Memory consolidation settings */
+    memory?: {
+        consolidateOnExit?: boolean;
+    };
 };
 /** Clear cached config (call after writes or to force re-read) */
 export declare function invalidateConfigCache(): void;