create-harness-vibe-coding 0.8.16 → 0.8.18

package/templates/common/Harness/scripts/wf-remove.mjs

@@ -130,7 +130,6 @@ const BUILT_IN_AGENT_NAMES = [
 ];
 
 const BUILT_IN_SKILL_NAMES = [
-  'browser-e2e',
   'github-pr-review',
   'python-backend',
   'subagent-orchestrator',
@@ -142,11 +141,34 @@ const BUILT_IN_SKILL_NAMES = [
   'wf-auto',
   'wf-auto-spark',
   'wf-browser',
+  'wf-command-create',
+  'wf-help',
   'wf-learn',
   'wf-max',
   'wf-readme',
   'wf-remove',
   'wf-review',
+  'wf-task-archive',
+  'wf-task-list',
+  'wf-task-record',
+  'wf-update',
+];
+
+const BUILT_IN_COMMAND_NAMES = [
+  'wf',
+  'wf-auto',
+  'wf-auto-spark',
+  'wf-browser',
+  'wf-command-create',
+  'wf-help',
+  'wf-learn',
+  'wf-max',
+  'wf-readme',
+  'wf-remove',
+  'wf-review',
+  'wf-task-archive',
+  'wf-task-list',
+  'wf-task-record',
   'wf-update',
 ];
 
@@ -159,8 +181,10 @@ const KNOWN_FRAMEWORK_FILES = new Set([
     `.claude/skills/${name}/SKILL.md`,
     `.agents/skills/${name}/SKILL.md`,
   ]),
-  '.claude/commands/wf-help.md',
-  '.opencode/commands/wf-help.md',
+  ...BUILT_IN_COMMAND_NAMES.flatMap(name => [
+    `.claude/commands/${name}.md`,
+    `.opencode/commands/${name}.md`,
+  ]),
   '.claude/rules/ecc/common.md',
   'opencode.json',
 ]);
@@ -172,12 +196,13 @@ function isKnownFrameworkFile(file) {
 /** Directories to clean up if empty after file removal. */
 const CLEANUP_DIRS = [
   '.claude/agents',
-  '.claude/skills/browser-e2e',
   '.claude/skills/github-pr-review',
   '.claude/skills/python-backend',
   '.claude/skills/wf-auto',
   '.claude/skills/wf-auto-spark',
   '.claude/skills/wf-browser',
+  '.claude/skills/wf-command-create',
+  '.claude/skills/wf-help',
   '.claude/skills/tdd',
   '.claude/skills/ts-react-frontend',
   '.claude/skills/ui-ux-review',
@@ -187,16 +212,20 @@ const CLEANUP_DIRS = [
   '.claude/skills/wf-max',
   '.claude/skills/wf-readme',
   '.claude/skills/wf-review',
+  '.claude/skills/wf-task-archive',
+  '.claude/skills/wf-task-list',
+  '.claude/skills/wf-task-record',
   '.claude/skills/wf-update',
   '.claude/skills/wf-remove',
   '.claude/skills/subagent-orchestrator',
   '.claude/skills',
-  '.agents/skills/browser-e2e',
   '.agents/skills/github-pr-review',
   '.agents/skills/python-backend',
   '.agents/skills/wf-auto',
   '.agents/skills/wf-auto-spark',
   '.agents/skills/wf-browser',
+  '.agents/skills/wf-command-create',
+  '.agents/skills/wf-help',
   '.agents/skills/tdd',
   '.agents/skills/ts-react-frontend',
   '.agents/skills/ui-ux-review',
@@ -206,6 +235,9 @@ const CLEANUP_DIRS = [
   '.agents/skills/wf-max',
   '.agents/skills/wf-readme',
   '.agents/skills/wf-review',
+  '.agents/skills/wf-task-archive',
+  '.agents/skills/wf-task-list',
+  '.agents/skills/wf-task-record',
   '.agents/skills/wf-update',
   '.agents/skills/wf-remove',
   '.agents/skills/subagent-orchestrator',

package/templates/common/Harness/scripts/wf-update-check.mjs

@@ -149,8 +149,11 @@ function optionalSkillFromSource(source) {
   return match ? match[1] : null;
 }
 
+const RETIRED_OPTION_IDS = new Set(['browser-e2e']);
+
 function isInstalledOptionalFile(file, localVersion) {
   const skillId = optionalSkillFromSource(localVersion?.sources?.[file]);
+  if (skillId && RETIRED_OPTION_IDS.has(skillId)) return false;
   return Boolean(skillId && selectedOptionIds(localVersion).has(skillId));
 }
 

package/templates/common/Harness/specs/guides/SETUP.md

@@ -55,6 +55,14 @@ Claude or Codex must follow this order during bootstrap. This sequence is broade
 
 Before writing, identify the project state:
 
+Choose the install scope before scaffold writes:
+
+- `--install-scope project` (default): full Harness scaffold is project-local.
+- `--install-scope global`: write shared runtime assets to the selected global Harness directory and copy Claude Code, Codex, and OpenCode command/skill surfaces to host-global directories while keeping `Harness/tasks/`, `Harness/PROGRESS.md`, project memory, research, architecture, and project settings under the target project.
+- Use `--global-dir <dir>` when the global runtime location must be explicit.
+- Use `--host-global-dir <dir>` only when the host-global copy base must be explicit; the installer creates `claude/`, `codex/`, and `opencode/` subdirectories under it.
+- Project settings in `Harness/settings.json` override global settings defaults. Existing user-authored files at config, command, skill, or agent paths are preserved or surfaced for review unless they carry a Harness ownership marker.
+
 | Project state | Required action |
 | --- | --- |
 | Empty or new project | Run the scaffold, then follow this file for 0-1 bootstrap |
@@ -152,7 +160,7 @@ The harness validator checks for specific structural invariants. When comparing
 | `Harness/tasks/<id>/PROGRESS.md` | `## Current Goal`, `## Phase`, `## Heartbeat`, `## Loaded Context` headings |
 | `Harness/tasks/<id>/PLAN.md` | `## Tasks`, `## Parallel Dispatch`, `## Subagent Synthesis`, `## Verification` headings |
 | `Harness/specs/guides/SETUP.md` | Retained install/bootstrap guide for new projects, existing projects, legacy upgrades, and Harness update decisions. Keep "Install or Upgrade Path" present. |
-| `Harness/workflows/browser-e2e.md` (if installed as optional) | `data-testid`, `accessible labels/roles`, and `inputs, buttons, filters, rows, empty/error/loading states` requirement |
+| `.claude/skills/wf-browser/SKILL.md` and `.agents/skills/wf-browser/SKILL.md` | Built-in browser workflow requires `data-testid`, `accessible labels/roles`, and `inputs, buttons, filters, rows, empty/error/loading states` guidance |
 | `Harness/workflows/ts-react-frontend.md` (if installed as optional) | Same UI selector contract as above |
 
 **Files that do NOT need manual merge when the path does not already exist (auto-created by harness):**
@@ -172,7 +180,7 @@ The generated file list is authoritative by path, not by stale count labels. Cur
 Optional workflow examples:
 
 ```bash
-npx create-harness-vibe-coding@latest my-app ./my-app -y --with browser-e2e,ts-react-frontend
+npx create-harness-vibe-coding@latest my-app ./my-app -y --with ts-react-frontend,ui-ux-review
 npx create-harness-vibe-coding@latest my-app ./my-app -y --preset web-app
 npx create-harness-vibe-coding@latest my-app ./my-app -y --recommend superpowers,codegraph
 ```

package/templates/common/Harness/specs/protocols/MEMORY_PROTOCOL.md

@@ -10,6 +10,21 @@ Memory is downstream of evidence. It records reusable patterns, not raw transcri
 - **L2 = Startup Digest**: `Harness/memory/startup-hints.md`. Lightweight hints loaded at session start. Not a replacement for full router.
 - **L3 = Detailed Durable Memory**: `Harness/memory/*.md` files. Loaded only when scenario matches via `routes.md`.
 
+## Project/Global Memory Boundary
+
+- `Harness/tasks/` and `Harness/PROGRESS.md` are always project-local, even when the Harness runtime is installed globally.
+- Project memory lives in `Harness/memory/` and records repo-specific lessons, preferences, and tool patterns.
+- Global memory may live under the selected global Harness directory for cross-project lessons and preferences.
+- Global memory must never store project task state, secrets, raw transcripts, or private project facts.
+
+## Project/Global Settings Boundary
+
+- Project settings live in `Harness/settings.json` and override global settings.
+- Global settings defaults live in the selected global Harness runtime under `Harness/settings.json`.
+- Host-global settings are copied, not symlinked, into Claude Code, Codex, and OpenCode user config directories.
+- Settings and memory must never store secrets; use external secret stores or environment variables.
+- Existing user-authored config, command, skill, or agent files are user-owned unless they carry a Harness ownership marker.
+
 ## When To Write Memory
 
 Write memory when any condition applies:

package/templates/common/Harness/specs/protocols/TASK_ARCHIVE.md

@@ -1,6 +1,7 @@
-# TASK_ARCHIVE — Task Archive Mechanism
+# TASK_ARCHIVE - Task Archive Mechanism
 
-Purpose: keep `Harness/tasks/` lean by archiving completed/abandoned tasks while preserving all evidence.
+Purpose: keep `Harness/tasks/` lean by archiving completed/abandoned tasks while
+preserving all evidence.
 
 ## Archive Location
 
@@ -9,44 +10,68 @@ Archived tasks move to `Harness/tasks/_archive/YYYY/<task-id>/`.
 
 ## What Is Never Archived
 
-- `Harness/tasks/_template/` — scaffold template, never moved.
-- `Harness/tasks/auto/` — WF-AUTO permanent state capsule, never moved unless explicitly allowed by WF-AUTO docs.
-- `Harness/tasks/_archive/` — the archive directory itself.
-- Active, blocked, in-progress, or needs-user-decision tasks.
-- Tasks whose STATE.json status is `active`, `blocked`, `in_progress`, `running`, `pending`, or `needs-user-decision`.
+- `Harness/tasks/_template/` - scaffold template, never moved.
+- `Harness/tasks/auto/` - WF-AUTO permanent state capsule, never moved unless
+  explicitly allowed by WF-AUTO docs.
+- `Harness/tasks/_archive/` - the archive directory itself.
+- Active, blocked, in-progress, running, pending, or needs-user-decision tasks.
+- Tasks whose STATE.json status is `active`, `blocked`, `in_progress`,
+  `running`, `pending`, or `needs-user-decision`.
 
 ## What May Be Archived
 
-Tasks whose STATE.json or PROGRESS.md status is: `complete`, `verified`, `archived`, `abandoned`, `obsolete`, `done`, `closed`, or `closeout`.
+Tasks whose STATE.json or reconciled phase is: `complete`, `verified`,
+`archived`, `abandoned`, `obsolete`, `done`, `closed`, or `closeout`.
 
-The script reads STATE.json `status`/`phase` first, then falls back to the first `- Phase:`, `Phase:`, or `Current:` marker in the task's PROGRESS.md (first word wins). Ambiguous phases are never auto-archived.
+`Harness/scripts/task-state.mjs` reads STATE.json `status`/`phase` first, then
+uses root/task PROGRESS phases only as reconciliation evidence. Missing or
+invalid STATE.json is skipped until
+`node Harness/scripts/task-state.mjs reconcile --apply` creates or repairs
+machine state.
 
 ## Archive Process
 
-1. Verify the task is not active/blocked.
+1. Verify the task is not active/blocked/running/pending.
 2. Ensure `Harness/tasks/_archive/YYYY/` exists.
-3. Move `Harness/tasks/<task-id>/` → `Harness/tasks/_archive/YYYY/<task-id>/`.
-4. Update the moved STATE.json: `status` → `archived`, `phase` → `archived`.
+3. Move `Harness/tasks/<task-id>/` to
+   `Harness/tasks/_archive/YYYY/<task-id>/`.
+4. Update the moved STATE.json: `status` to `archived`, `phase` to `archived`.
 5. Update `Harness/tasks/_archive/INDEX.md`.
-6. Update `Harness/PROGRESS.md` Task Index — remove or annotate `(archived)`.
+6. Rewrite `Harness/PROGRESS.md` Task Index from the remaining non-archived
+   task capsules.
 
 ## Retention
 
 - Archived tasks retain: PLAN, PROGRESS, STATE, ARTIFACTS, NOTES.
 - Do NOT delete historical evidence.
-- `Harness/PROGRESS.md` keeps the last 5 non-archived task entries in the Task Index.
-- When outer task capsules exceed 5 completed/abandoned/obsolete, archive the oldest.
-- The validator (`Harness/scripts/validate-harness.mjs`) warns when `Harness/tasks/` holds more than 5 outer task capsules (excluding `_archive`, `_template`, `auto`) and fails in `--strict` mode.
+- `Harness/PROGRESS.md` keeps the last 5 non-archived task entries in the Task
+  Index.
+- When outer task capsules exceed 5 completed/abandoned/obsolete tasks, remind
+  the user to run the task archive command. Do not auto-archive during unrelated
+  validation or closeout unless the user explicitly invokes archive apply mode.
+- The validator (`Harness/scripts/validate-harness.mjs`) warns when
+  `Harness/tasks/` holds more than 5 outer task capsules (excluding `_archive`,
+  `_template`, `auto`) and fails in `--strict` mode.
 
 ## Script
 
-Use `Harness/scripts/archive-tasks.mjs`:
-- Default: dry-run
-- `--apply` to execute
-- `--keep 5` to set the non-archived task threshold
-- `--task <task-id>` to archive a specific task
-- `--json` for machine-readable output
-- `node Harness/scripts/archive-tasks.mjs --dry-run --json` must always run
+User-facing command:
+
+- Codex: `$wf-task-archive` or `/skills wf-task-archive`.
+- Claude Code/OpenCode: `/wf-task-archive`.
+
+Underlying implementation: `Harness/scripts/task-state.mjs archive`.
+
+- Default: dry-run.
+- `--apply` to execute.
+- `--keep 5` to set the non-archived task threshold.
+- `--task <task-id>` to archive a specific task.
+- `--json` for machine-readable output.
+- Run `node Harness/scripts/task-state.mjs archive --dry-run --json` before
+  applying a risky cleanup.
+
+Compatibility entry: `Harness/scripts/archive-tasks.mjs` delegates to
+`task-state.mjs archive` and accepts the same archive flags.
 
 ## Safety Rules
 
@@ -54,3 +79,4 @@ Use `Harness/scripts/archive-tasks.mjs`:
 - Confirm target is within `Harness/tasks/` before any move.
 - Do NOT recursively delete.
 - Tasks with `needs-user-decision` status are never auto-archived.
+- Missing or invalid STATE.json is never archived without reconciliation.

package/templates/common/Harness/specs/runtime/command-surface.json

@@ -0,0 +1,215 @@
+{
+  "schemaVersion": 1,
+  "commands": [
+    {
+      "id": "wf-help",
+      "classification": "direct",
+      "aliases": ["/wf-help", "$wf-help", "/skills wf-help"],
+      "entersWf": false,
+      "taskCapsulePolicy": "none",
+      "surfaces": {
+        "claudeCommand": true,
+        "opencodeCommand": true,
+        "claudeSkill": true,
+        "codexSkill": true,
+        "helpRow": true
+      }
+    },
+    {
+      "id": "wf",
+      "classification": "workflow",
+      "aliases": ["/wf", "$wf", "/skills wf"],
+      "entersWf": true,
+      "taskCapsulePolicy": "required",
+      "surfaces": {
+        "claudeCommand": true,
+        "opencodeCommand": true,
+        "claudeSkill": true,
+        "codexSkill": true,
+        "helpRow": true
+      }
+    },
+    {
+      "id": "wf-max",
+      "classification": "workflow",
+      "aliases": ["/wf-max", "$wf-max", "/skills wf-max"],
+      "entersWf": true,
+      "taskCapsulePolicy": "required",
+      "surfaces": {
+        "claudeCommand": true,
+        "opencodeCommand": true,
+        "claudeSkill": true,
+        "codexSkill": true,
+        "helpRow": true
+      }
+    },
+    {
+      "id": "wf-auto",
+      "classification": "workflow",
+      "aliases": ["/wf-auto", "$wf-auto", "/skills wf-auto"],
+      "entersWf": true,
+      "taskCapsulePolicy": "auto-capsule-required",
+      "surfaces": {
+        "claudeCommand": true,
+        "opencodeCommand": true,
+        "claudeSkill": true,
+        "codexSkill": true,
+        "helpRow": true
+      }
+    },
+    {
+      "id": "wf-auto-spark",
+      "classification": "workflow",
+      "aliases": ["/wf-auto-spark", "$wf-auto-spark", "/skills wf-auto-spark"],
+      "entersWf": true,
+      "taskCapsulePolicy": "auto-capsule-required",
+      "surfaces": {
+        "claudeCommand": true,
+        "opencodeCommand": true,
+        "claudeSkill": true,
+        "codexSkill": true,
+        "helpRow": true
+      }
+    },
+    {
+      "id": "wf-review",
+      "classification": "workflow",
+      "aliases": ["/wf-review", "$wf-review", "/skills wf-review"],
+      "entersWf": true,
+      "taskCapsulePolicy": "use-current-or-create-when-needed",
+      "surfaces": {
+        "claudeCommand": true,
+        "opencodeCommand": true,
+        "claudeSkill": true,
+        "codexSkill": true,
+        "helpRow": true
+      }
+    },
+    {
+      "id": "wf-learn",
+      "classification": "workflow",
+      "aliases": ["/wf-learn", "$wf-learn", "/skills wf-learn"],
+      "entersWf": true,
+      "taskCapsulePolicy": "use-current-or-create-when-needed",
+      "surfaces": {
+        "claudeCommand": true,
+        "opencodeCommand": true,
+        "claudeSkill": true,
+        "codexSkill": true,
+        "helpRow": true
+      }
+    },
+    {
+      "id": "wf-browser",
+      "classification": "workflow",
+      "aliases": ["/wf-browser", "$wf-browser", "/skills wf-browser"],
+      "entersWf": true,
+      "taskCapsulePolicy": "required",
+      "surfaces": {
+        "claudeCommand": true,
+        "opencodeCommand": true,
+        "claudeSkill": true,
+        "codexSkill": true,
+        "helpRow": true
+      }
+    },
+    {
+      "id": "wf-readme",
+      "classification": "workflow",
+      "aliases": ["/wf-readme", "$wf-readme", "/skills wf-readme"],
+      "entersWf": true,
+      "taskCapsulePolicy": "required",
+      "surfaces": {
+        "claudeCommand": true,
+        "opencodeCommand": true,
+        "claudeSkill": true,
+        "codexSkill": true,
+        "helpRow": true
+      }
+    },
+    {
+      "id": "wf-update",
+      "classification": "direct",
+      "aliases": ["/wf-update", "$wf-update", "/skills wf-update"],
+      "entersWf": false,
+      "taskCapsulePolicy": "none",
+      "surfaces": {
+        "claudeCommand": true,
+        "opencodeCommand": true,
+        "claudeSkill": true,
+        "codexSkill": true,
+        "helpRow": true
+      }
+    },
+    {
+      "id": "wf-remove",
+      "classification": "workflow",
+      "aliases": ["/wf-remove", "$wf-remove", "/skills wf-remove"],
+      "entersWf": true,
+      "taskCapsulePolicy": "required",
+      "surfaces": {
+        "claudeCommand": true,
+        "opencodeCommand": true,
+        "claudeSkill": true,
+        "codexSkill": true,
+        "helpRow": true
+      }
+    },
+    {
+      "id": "wf-task-record",
+      "classification": "direct",
+      "aliases": ["/wf-task-record", "$wf-task-record", "/skills wf-task-record"],
+      "entersWf": false,
+      "taskCapsulePolicy": "creates-or-updates",
+      "surfaces": {
+        "claudeCommand": true,
+        "opencodeCommand": true,
+        "claudeSkill": true,
+        "codexSkill": true,
+        "helpRow": true
+      }
+    },
+    {
+      "id": "wf-task-list",
+      "classification": "direct",
+      "aliases": ["/wf-task-list", "$wf-task-list", "/skills wf-task-list"],
+      "entersWf": false,
+      "taskCapsulePolicy": "none",
+      "surfaces": {
+        "claudeCommand": true,
+        "opencodeCommand": true,
+        "claudeSkill": true,
+        "codexSkill": true,
+        "helpRow": true
+      }
+    },
+    {
+      "id": "wf-task-archive",
+      "classification": "direct",
+      "aliases": ["/wf-task-archive", "$wf-task-archive", "/skills wf-task-archive"],
+      "entersWf": false,
+      "taskCapsulePolicy": "none",
+      "surfaces": {
+        "claudeCommand": true,
+        "opencodeCommand": true,
+        "claudeSkill": true,
+        "codexSkill": true,
+        "helpRow": true
+      }
+    },
+    {
+      "id": "wf-command-create",
+      "classification": "direct",
+      "aliases": ["/wf-command-create", "$wf-command-create", "/skills wf-command-create"],
+      "entersWf": false,
+      "taskCapsulePolicy": "required",
+      "surfaces": {
+        "claudeCommand": true,
+        "opencodeCommand": true,
+        "claudeSkill": true,
+        "codexSkill": true,
+        "helpRow": true
+      }
+    }
+  ]
+}

package/templates/common/Harness/specs/runtime/dispatch.md

@@ -13,7 +13,7 @@ Use when work needs parallel reading, independent review, cross-layer analysis,
 - Important assumptions, decisions, blockers, evidence, and handoffs must be written to `Harness/tasks/<task-id>/PROGRESS.md` and `Harness/tasks/<task-id>/PLAN.md`, the current feature doc, `Harness/MEMORY.md`, or `Harness/memory/*` as appropriate.
 - Resumable state is governed by [WF-STATE.md](../workflows/WF-STATE.md). On session start, the controller reads STATE.json before building a fresh dispatch table.
 - PRD-derived Acceptance Criteria are the source of truth. Dispatch packets must carry the relevant AC IDs and contracts.
-- Agent count: default (non-WF) <=3 active agents; `/wf` selects a tier dynamically per [WF-KERNEL.md](../workflows/WF-KERNEL.md) (Light/Standard/Full); `/wf-max` inherits the selected tier and adds maximum safe fan-out (WF-Max-Useful default; WF-Max-Strict explicit only), removing the Harness default cap through the span formula. Real concurrency is still bounded by runtime thread budget, config, billing, and local resources. Use current runtime subagents first, close completed agents, then peer-CLI overflow (`claude -p`, `codex exec`, or `opencode run --agent <role> --dir .`). Generated Codex config defaults to `agents.max_threads = 12` and `agents.max_depth = 1`; ask the user before raising `agents.max_threads` above that default. See [WF.md](../workflows/WF.md) and [WF-MAX.md](../workflows/WF-MAX.md).
+- Agent count: default (non-WF) <=3 active agents; `/wf` selects a tier dynamically per [WF-KERNEL.md](../workflows/WF-KERNEL.md) (Light/Standard/Full); `/wf-max` inherits the selected tier and adds maximum safe fan-out (WF-Max-Useful default; WF-Max-Strict explicit only), removing the Harness default cap through the span formula. WF-MAX must attempt native subagent fan-out and record `fanoutAttempted: true` before any solo fallback. Real concurrency is still bounded by runtime thread budget, config, billing, and local resources. Use current runtime subagents first, close completed agents, then peer-CLI overflow (`claude -p`, `codex exec`, or `opencode run --agent <role> --dir .`). Do not scaffold Codex scalar `[agents]` capacity fields into project `.codex/config.toml`; probe the installed runtime and manage Codex caps through the dispatch ledger unless the installed version accepts the config shape. Generated OpenCode config defaults to `subagent_depth = 2` for manager -> worker nesting. See [WF.md](../workflows/WF.md) and [WF-MAX.md](../workflows/WF-MAX.md).
 - Read-only agents may run in parallel.
 - Writing agents run serially unless write sets are disjoint.
 - Use a worktree when two agents may touch overlapping files or long-running branches.
@@ -68,7 +68,7 @@ Objective:           <one-sentence goal>
 TaskType:            ui-browser | api-backend | architecture-migration | docs-readme | dependency-sdk | bug-fix | refactor | chore
 ModelTier:           small-fast | standard | high-reasoning
 AgentName:           <the agent file name, e.g. task-scribe, codebase-explorer, implementer>
-Skills:              <which skills to activate, e.g. tdd, browser-e2e>
+Skills:              <which skills to activate, e.g. tdd, wf-browser>
 ECC:                 <which ECC rules to load, e.g. web/design-quality.md, python/fastapi.md>
 PRD:                 <path or task PLAN section containing Mini PRD>
 Acceptance IDs:      <AC-001, AC-002, or "none" for non-behavioral work>

package/templates/common/Harness/specs/runtime/subagents.md

@@ -130,11 +130,15 @@ Max parallelism removes the Harness default cap, not the runtime's physical or
 account cap. For WF-MAX, record the current runtime budget, use native
 subagents first, close completed agents before declaring the pool exhausted,
 then overflow to a peer CLI (`claude -p`, `codex exec`, or `opencode run --agent <role> --dir .`) with explicit
-dispatch packets. Generated Harness Codex config defaults to
-`agents.max_threads = 12` and `agents.max_depth = 1`; if that becomes the
-bottleneck, ask the user before raising `agents.max_threads` and keep
-`max_depth = 1` unless recursive delegation is explicitly approved. Do not rely
-on undocumented fork/derive bypasses as stable capacity.
+dispatch packets. WF-MAX must attempt native subagent fan-out and record
+`fanoutAttempted: true` before any solo fallback. Do not scaffold Codex scalar
+`[agents]` capacity fields into `.codex/config.toml`; codex-cli 0.144.x can
+reject them during TUI `skills/list`. Probe the installed runtime first and
+manage Codex WF-MAX caps through the dispatch ledger unless the installed
+version accepts the config shape. Generated OpenCode config defaults to
+`subagent_depth = 2` so manager subagents can invoke worker subagents; manager
+agents also need `permission.task` allowlists. Do not rely on undocumented
+fork/derive bypasses as stable capacity.
 
 Default for explicit WF invocation: tier-based. WF-Light: planner + test-writer + implementer + verifier (bounded passes acceptable). WF-Standard: adds research/docs + one independent review lens. WF-Full: complete role chain, use bounded role passes as the recorded fallback when subagents are unavailable.
 
@@ -204,6 +208,12 @@ independent same-runtime subagent context; for broad WF-MAX review, dispatch
 agents report suggestions only. The controller accepts, rejects, or escalates
 each finding and owns the final decision.
 
+### OpenCode Reviewer Caveat
+
+`opencode run --agent reviewer`: current installed `.opencode/agents/reviewer.md`
+is `mode: subagent`; OpenCode falls back to the default agent. Probe before
+claiming primary-runner review. Prefer same-runtime reviewer subagent fallback.
+
 ## Subagent Status Handling
 
 | Status | Controller Action |

package/templates/common/Harness/specs/workflows/WF-AUTO.md

@@ -296,11 +296,11 @@ Every cycle writes one entry to `Harness/tasks/auto/PROGRESS.md`:
 
 IMMEDIATELY return to W0. No pause between cycles — the only breaks are the adaptive Intent Checkpoint and the A-GATE.
 
-### WF-AUTO Hook Exception
+### Runtime Hook Boundaries
 
-Runtime hooks are disabled by default across the Harness scaffold. The only
-allowed exception is an explicitly enabled `/wf-auto` tick hook for long-running
-auto-optimization.
+Execution-control hooks are disabled by default across the Harness scaffold.
+Startup update-check hooks are not execution-control hooks. Only an explicitly
+enabled `/wf-auto` tick hook may drive long-running auto-optimization.
 
 Manual or benchmark-driven single-cycle `/wf-auto` runs use the same bounded
 tick contract: they may stop because the caller explicitly requested one tick,
@@ -321,8 +321,8 @@ wf-auto hook event
 
 Hard boundaries:
 
-- no hook is installed or registered by default
-- only `/wf-auto` may use a runtime hook
+- no execution-control hook is installed or registered by default
+- only `/wf-auto` may use a runtime hook to drive auto-optimization
 - the hook must run one bounded tick, not an unbounded process
 - the hook must respect `Harness/tasks/auto/STOP`, `state=paused`, user stop,
   and the Adaptive Coverage Exhaustion Gate

package/templates/common/Harness/specs/workflows/WF-KERNEL.md

@@ -131,7 +131,7 @@ ReturnSchema:
 
 | Task Type | Primary Agents | Skills |
 |---|---|---|
-| UI/browser behavior | test-writer, implementer, verifier, reviewer | browser-e2e, wf-browser |
+| UI/browser behavior | test-writer, implementer, verifier, reviewer | wf-browser |
 | API/backend | docs-researcher, test-writer, implementer, verifier, reviewer (security) | tdd |
 | Architecture/migration | architect, codebase-explorer, planner, reviewer | — |
 | Docs/README | wf-readme, reviewer, task-scribe | wf-readme |