create-harness-vibe-coding 0.7.0 → 0.7.2

package/package.json

@@ -1,6 +1,6 @@
 {
   "name": "create-harness-vibe-coding",
-  "version": "0.7.0",
+  "version": "0.7.2",
   "description": "Scaffold a 0-1 product harness for AI-assisted research, PRD, planning, architecture, build, test, and feedback loops",
   "type": "module",
   "bin": {

package/templates/common/.claude/skills/wf-max/SKILL.md

@@ -44,6 +44,25 @@ If tempted to edit source → STOP. Spawn a Worker.
 5. **Manager MUST spawn ≥2 Workers or dissolve.** 0-1 Workers = Phantom Manager (AP5).
 6. **Overhead > 0.30 → degrade to /wf.** Record the decision in PLAN.md.
 
+## When to Ask the User (AskUserQuestion)
+
+CEO MUST use the `AskUserQuestion` tool when:
+
+- Intent ambiguous after exploration (≥2 valid interpretations)
+- Scope trade-off needs user decision (e.g. "full rewrite vs minimal fix")
+- Architecture direction has ≥2 viable approaches with different trade-offs
+- User gave vague request like "improve performance" or "clean up code"
+- D-GATE reveals >7 files — ask user to narrow scope
+
+Format: 2-4 options per question, `multiSelect: false` for exclusive choices. Each option must include a `description` explaining the trade-off. Example:
+
+```
+Q: "Auth refactor scope?"
+[1] "Minimal" — fix token validation only, 1 file
+[2] "Standard" — extract middleware + add tests, 3-5 files  
+[3] "Full" — new auth module with pluggable providers, 8-12 files
+```
+
 ## Manager Synthesis (retry/escalation)
 
 ```

package/templates/common/.claude/skills/wf-review/SKILL.md

@@ -7,6 +7,18 @@ description: Cross-model peer review. Invokes the other agent CLI (Codex or Clau
 
 **Anti-Self-Review Guard:** Use the OTHER CLI. Claude→Codex, Codex→Claude. Never self-review.
 
+## When to Ask the User (AskUserQuestion)
+
+BEFORE invoking the other CLI, use `AskUserQuestion` to clarify:
+
+- Review focus ambiguous → "Which dimension should I prioritize?"
+- Multiple changes to review → "Review all files or specific module?"
+- User said "review this" without specifics → ask scope
+
+Format: 2-3 options with trade-off descriptions.
+
+**Codex fallback** (no AskUserQuestion tool): output numbered options in markdown, wait for user reply.
+
 ## CLI Detection & Invocation
 
 | Runtime | Command |

package/templates/common/.codex/config.toml

@@ -0,0 +1,2 @@
+[features]
+hooks = true

package/templates/common/.codex/hooks.json

@@ -0,0 +1,37 @@
+{
+  "hooks": {
+    "SessionStart": [
+      {
+        "matcher": "",
+        "hooks": [
+          {
+            "type": "command",
+            "command": "node Harness/scripts/wf-mode-hook.mjs"
+          }
+        ]
+      }
+    ],
+    "UserPromptSubmit": [
+      {
+        "matcher": "",
+        "hooks": [
+          {
+            "type": "command",
+            "command": "node Harness/scripts/wf-mode-hook.mjs"
+          }
+        ]
+      }
+    ],
+    "PreToolUse": [
+      {
+        "matcher": "Edit|Write|MultiEdit|Bash",
+        "hooks": [
+          {
+            "type": "command",
+            "command": "node Harness/scripts/wf-mode-hook.mjs"
+          }
+        ]
+      }
+    ]
+  }
+}

package/templates/common/.harness-version

@@ -1,6 +1,6 @@
 {
-  "generator": "0.7.0",
-  "generated": "2026-06-26T09:06:07.341Z",
+  "generator": "0.7.2",
+  "generated": "2026-06-26T10:23:43.805Z",
   "options": [],
   "autoCheck": true,
   "source": "https://raw.githubusercontent.com/zingspark/create-harness-vibe-coding/main/templates/common/",
@@ -30,12 +30,14 @@
     ".claude/settings.json": "sha256-3ee53515a829b85267b7330fad9e90d797f1bd16964ec9f876fdd630a0d2c093",
     ".claude/skills/subagent-orchestrator/SKILL.md": "sha256-c9b90d8cfbeb8e7c1f89519e34d7da8dc0f0cad102092443e221518c723320e1",
     ".claude/skills/wf-learn/SKILL.md": "sha256-9e9100a161327d53a35709d881745c5d1473de058707537b3566474f3c113cac",
-    ".claude/skills/wf-max/SKILL.md": "sha256-5a145e9e477f6cb7c75486fd72c42e8c2295a8c52a10693b80998770b7e2eb44",
+    ".claude/skills/wf-max/SKILL.md": "sha256-48571a7e7ab121ceda34a7280311a2a673c67a4da80940f8ea6ab3fc36fcf26f",
     ".claude/skills/wf-readme/SKILL.md": "sha256-4d34ee3b6b305fa2581f5d8cb31e9152759f3df8bf8fa08efbb43782f128bdcd",
     ".claude/skills/wf-remove/SKILL.md": "sha256-4057d8f0672ad44990354670aeb6c5be0c3d1f934781b26f776323f070f4a984",
-    ".claude/skills/wf-review/SKILL.md": "sha256-7e599bd8cbbfc7f6e55aac4c19844317a1e3efd5cc4cf1513091721f671a22b0",
+    ".claude/skills/wf-review/SKILL.md": "sha256-43269317af25e38c283ae859c69567b6624cf3be8079feb43aee4afe5d1f0814",
     ".claude/skills/wf-update/SKILL.md": "sha256-9c40d89ef52762793d97461da36709148af4a03222c352fde40f0193d0dddb58",
-    "AGENTS.md": "sha256-209c4043ce56f52268a91f9b5e2c4320f8425417c6fd2f245e2eaee21bfb9ea7",
+    ".codex/config.toml": "sha256-d37497c3278121598a663564ab38b53f658969717f78decb661ddd11c66551ea",
+    ".codex/hooks.json": "sha256-6d8d237b4a038a48fbadbdd087d9a68dba024bcfd748f59968252ebae7cc2e96",
+    "AGENTS.md": "sha256-bbc17b119ff579e500dcd36e78f9cf600ccda27fa7b32903f233ad96a97058ff",
     "CLAUDE.md": "sha256-432bd4dc9bdf9958d79ae697f72d1c9723be23fb156d43889ede84e305ed5e70",
     "Harness/MEMORY.md": "sha256-368bba7ae0a63b931dc547c013dd4c361e597ca5a54affa662778cd0f441d788",
     "Harness/README.md": "sha256-9ac42a3ad00890bfefba8cb658c5eb1d4ad086075d0fa70492e01c8b95dea770",
@@ -55,7 +57,9 @@
     "Harness/scripts/wf-statusline.ps1": "sha256-53c2e0178e9a0826516731b1145f96f55ff6c57fb1f31bf6f1a7210a8502ca65",
     "Harness/scripts/wf-statusline.sh": "sha256-053908cd4d53dea162252077c6cc5544ccd164455739f6edfbf254945f06ea2f",
     "Harness/scripts/wf-update-check.mjs": "sha256-8c3fa219e902056c20c55b2abfa5152349d9e00f4faa5bef646f78bfb71c486f",
-    "Harness/subagents.md": "sha256-e66f4bef8ce6c118cf0ec8c511f727a8c2c40bce25dcf5b754489d89915a47ba"
+    "Harness/subagents.md": "sha256-e66f4bef8ce6c118cf0ec8c511f727a8c2c40bce25dcf5b754489d89915a47ba",
+    "commands/wf-max.toml": "sha256-89818556f93d51cfe508a0c92de171f0f46be65d8001eb3eac68e46f18ddf783",
+    "commands/wf-review.toml": "sha256-d2b58f3892d2f7c5c689baa9e3361c1e355fae72bf632a6ed61f1a16743848f9"
   },
   "sources": {
     ".claude/agents/architect-manager.md": ".claude/agents/architect-manager.md",
@@ -88,6 +92,8 @@
     ".claude/skills/wf-remove/SKILL.md": ".claude/skills/wf-remove/SKILL.md",
     ".claude/skills/wf-review/SKILL.md": ".claude/skills/wf-review/SKILL.md",
     ".claude/skills/wf-update/SKILL.md": ".claude/skills/wf-update/SKILL.md",
+    ".codex/config.toml": ".codex/config.toml",
+    ".codex/hooks.json": ".codex/hooks.json",
     ".gitignore": ".gitignore",
     "AGENTS.md": "AGENTS.md",
     "CLAUDE.md": "CLAUDE.md",
@@ -122,6 +128,8 @@
     "Harness/tasks/_template/NOTES.md": "docs/tasks/_template/NOTES.md",
     "Harness/tasks/_template/PLAN.md": "docs/tasks/_template/PLAN.md",
     "Harness/tasks/_template/PROGRESS.md": "docs/tasks/_template/PROGRESS.md",
-    "README.md": "README.md"
+    "README.md": "README.md",
+    "commands/wf-max.toml": "commands/wf-max.toml",
+    "commands/wf-review.toml": "commands/wf-review.toml"
   }
 }

package/templates/common/AGENTS.md

@@ -1,7 +1,30 @@
 # AGENTS.md
 
-Entry point for coding agents.
+Entry point for coding agents. This project uses the Harness scaffold — a 0-1 product workflow contract.
 
-Read `CLAUDE.md` first and follow its startup sequence: `Harness/MEMORY.md`, then `Harness/README.md`.
+## Startup
 
-Do not bulk-read `Harness/`. Let `Harness/README.md` route you to the smallest useful context.
+Read `CLAUDE.md` first, then `Harness/MEMORY.md`, then `Harness/README.md`.
+Do not bulk-read `Harness/`. Let `Harness/README.md#Load By Task` route you.
+
+## CEO Contract (READ FIRST)
+
+`/wf-max` active → you are **CEO, not implementer**.
+
+| ALLOWED (W0) | FORBIDDEN (always on source) |
+|---|---|
+| Read Harness docs, CLAUDE.md | Edit / Write / MultiEdit |
+| Grep/Glob for scoping | Bash (except `ls`/`dir`/`tree`/`git`) |
+| Agent spawn (ONE message) | Deep source reads → delegate to Worker |
+| Write PLAN.md / PROGRESS.md | Sequential spawn (AP6) |
+
+**Tempted to edit source? STOP. Spawn a Worker.**
+
+## Key Commands
+
+| Command | Purpose |
+|---------|---------|
+| `/wf-max [task]` | Maximum parallelism: CEO→Manager→Worker |
+| `/wf-review [focus]` | Cross-model peer review (use OTHER CLI) |
+| `/wf <task>` | Standard workflow mode |
+| `/wf-auto` | Perpetual auto-optimization |

package/templates/common/commands/wf-max.toml

@@ -0,0 +1,18 @@
+description = "Maximum parallelism: CEO→Manager→Worker hierarchy with D-GATE enforcement"
+prompt = """
+WF-MAX ACTIVE: You are CEO, not implementer.
+
+ALLOWED first actions:
+1. Read CLAUDE.md, Harness/MEMORY.md, Harness/README.md, Harness/WF-MAX.md
+2. Create task PLAN/PROGRESS
+3. Spawn W0 read-only agents in ONE message
+
+FORBIDDEN before W0 returns:
+- Read source files deeply (scoping only via Grep/Glob)
+- Edit / Write / MultiEdit on source files
+- Bash (except ls/dir/tree/git status/git diff)
+
+Loop: W0 Explore → E-GATE → W1 Architecture → D-GATE (Dispatch Table + Self-Audit) → W2 Implement (single-message dispatch) → W2R Review → W3+ dependent → Integration → Closeout
+
+Full spec: Harness/WF-MAX.md
+"""

package/templates/common/commands/wf-review.toml

@@ -0,0 +1,15 @@
+description = "Cross-model peer review — 5 dimensions with severity classification"
+prompt = """
+Cross-model peer review. Use the OTHER CLI for independent review.
+
+Dimensions:
+1. Correctness — bugs, edge cases, race conditions, null/undefined, logic flaws?
+2. Security — injection, auth bypass, data exposure, input validation, unsafe deps?
+3. Architecture — boundary violations, coupling, state ownership, interface contract breaks?
+4. Performance — algorithmic complexity, N+1 queries, memory leaks?
+5. Tests — coverage gaps, missing edge cases, CI regressions?
+
+Severity: Critical (security/data-loss/crash → must fix), High (bug/regression → should fix), Medium (maintainability → may defer), Low (style → optional)
+
+Review CLI: use the OTHER one. Claude → codex exec. Codex → claude -p.
+"""