create-harness-vibe-coding 0.8.18 → 0.8.19

package/templates/common/.claude/skills/wf-ui/SKILL.md

@@ -0,0 +1,78 @@
+---
+name: wf-ui
+description: Codex compatibility: use $wf-ui or /skills wf-ui in Codex. In Claude Code and OpenCode, /wf-ui is a direct command that starts the local Harness browser control panel.
+---
+
+# WF-UI Adapter
+
+This skill is a Codex compatibility shim for opening the Harness control panel.
+Claude Code and OpenCode handle `/wf-ui` as a direct command. Do not route this
+through WF mode.
+
+## Invocation
+
+- Codex CLI or IDE: use `$wf-ui` or `/skills` then choose `wf-ui`.
+- Claude Code: `/wf-ui` is a direct command from `.claude/commands/wf-ui.md`.
+- OpenCode: `/wf-ui` is a direct command from `.opencode/commands/wf-ui.md`.
+
+## Load
+
+No router preload. Read only the local command file above when this runtime
+needs the exact direct command text.
+
+## Cache Discipline
+
+Keep the context to the command, current project root, and returned local URL.
+Do not paste full API responses, accessibility trees, or terminal transcripts.
+
+## Startup
+
+Run from the project root:
+
+```text
+create-harness-vibe-coding wf-ui --project . --host 127.0.0.1 --port 0 --open
+```
+
+If the global binary is not available, use:
+
+```text
+npx create-harness-vibe-coding@0.8.19 wf-ui --project . --host 127.0.0.1 --port 0 --open
+```
+
+Rules:
+- Bind only to `127.0.0.1`; never `0.0.0.0`.
+- Default port `0` for an OS-assigned free port.
+- Generate a random one-time token.
+- Open `http://127.0.0.1:<port>/?token=<token>`.
+- Leave the server running until the user stops it.
+
+## Architecture
+
+```text
+Browser UI (React + TypeScript + Motion for React + Lucide)
+    |
+    | HTTP JSON APIs + WebSocket
+    v
+Local Node server bound to 127.0.0.1 only
+    |
+    | fs + task-state.mjs + optional node-pty
+    v
+Project-local Harness files (tasks/**, settings, version, command surfaces)
+```
+
+## Communication Protocol
+
+- HTTP snapshots are canonical state: `/api/tasks`, `/api/settings`, `/api/project`.
+- WebSocket events are invalidation hints only. The UI refreshes HTTP snapshots
+  on reconnect or sequence gaps.
+- Browser writes go through typed `POST` endpoints.
+- `Harness/tasks/**` is the durable source of truth; UI state is derived.
+
+## Security
+
+- Loopback-only binding (`127.0.0.1`).
+- One-time token auth on HTTP and WebSocket.
+- Path traversal prevention on all task capsule reads.
+- Command allowlist for PTY: `claude`, `codex`, `opencode`.
+- Terminal default mode: watch/read-only; attach mode is explicit.
+- `node-pty` is optional; missing means the terminal session reports blocked.

package/templates/common/.claude/skills/wf-update/SKILL.md

@@ -16,89 +16,86 @@ This skill is a Codex compatibility shim plus script-flow reference. Claude Code
 ## Load
 
 - `Harness/.harness-version`
+- `Harness/ownership.manifest.json`
 - `Harness/scripts/wf-update-check.mjs`
+- `Harness/scripts/wf-update-runner.mjs`
+- `Harness/scripts/sync-host-global.mjs`
 - `Harness/scripts/scan-clean.mjs`
 - `Harness/scripts/validate-harness.mjs`
 
 ## Cache Discipline
 
-Follow `Harness/specs/runtime/context-loading.md#Cache-First Context Contract`: keep updater
-scripts and ownership docs stable, consume compact `--json` agent plans first,
-and avoid pasting verbose diffs or full remote files unless a conflict requires
-targeted inspection.
+Follow `Harness/specs/runtime/context-loading.md#Cache-First Context Contract`: keep updater scripts and ownership docs stable, consume compact `--json` agent plans first, and avoid pasting verbose diffs or full remote files unless a conflict requires targeted inspection.
 
 ## Classification
 
-MANIFEST-FIRST. The installer and updater read
-`Harness/ownership.manifest.json`:
+MANIFEST-FIRST. The installer and updater read `Harness/ownership.manifest.json`:
 
-- `preserve[]` — never touched (tasks, memory, research, root README,
-  package, architecture). `Harness/tasks/**` is always preserved.
-- `merge[]` — CLAUDE.md, AGENTS.md, MEMORY.md, Harness/MEMORY.md,
-  Harness/README.md → merge or accept-local; prior accepted decisions
-  carry forward.
-- `frameworkOwned[]` — safe overwrite-upgrade fast path (concurrent
-  fetch + hash + all-or-nothing write after checksum validation).
-- `optionalOwned[]` — upgraded only when that option is installed.
+- `preserve[]` - never touched when present as user data: tasks, memory, research, root README, package, architecture, and progress. `Harness/tasks/**` is always preserved.
+- `merge[]` - CLAUDE.md, AGENTS.md, MEMORY.md, Harness/MEMORY.md, Harness/README.md, and Harness/settings.json require merge or accept-local; prior accepted decisions carry forward.
+- `frameworkOwned[]` - safe overwrite-upgrade fast path after checksum validation. This must cover `.claude`, `.codex`, `.agents`, `.opencode`, and Harness template-owned scripts/specs.
+- `optionalOwned[]` - upgraded only when that option is installed.
 
-Content markers (`harness: wf-agent`, `project harness`, `Harness/...`)
-are the FALLBACK when no manifest exists (old installs) and the
-instance-ownership signal that protects a user's same-name file at a
-Harness path. A same-name user file with no marker and no manifest
-declaration → conflict/skip + warning, never overwritten.
+Content markers (`harness: wf-agent`, `project harness`, `Harness/...`) are the fallback when no manifest exists and the instance-ownership signal that protects a user's same-name file at a Harness path. A same-name user file with no marker and no manifest declaration becomes conflict/skip plus warning, never overwrite.
 
 ## Flow
 
-1. Run `node Harness/scripts/wf-update-check.mjs --json` first and use the
-   `agent` block as the action plan. Current updaters try npm
-   `create-harness-vibe-coding@latest` first, then the canonical GitHub source
-   `LiWeny16/create-harness-vibe-coding`, then the legacy compatibility mirror
-   `zingspark/create-harness-vibe-coding`.
-2. Preserve all PRESERVE files. Never overwrite user task, memory, research,
-   root README.md, package, or architecture files. Harness/README.md is
-   merge-tier, not PRESERVE.
-3. If `agent.safeApplyCommand` is present, run it to apply SAFE, NEW, and
-   adopted metadata-only files before spending AI time on conflicts. Default command:
-   `node Harness/scripts/wf-update-check.mjs --apply-safe`.
-   Framework-owned templates, commands, skills, agents, and scripts are
-   script-owned and should be overwritten by the updater after checksum validation.
-4. Previously accepted decisions for any merge-tier file (CLAUDE.md, AGENTS.md,
-   MEMORY.md, Harness/MEMORY.md, Harness/README.md) are carried forward
-   automatically when both the local hash and remote template hash are unchanged.
-5. If a new agent/command/skill path collides with an existing file, do not
-   decide by filename alone. Treat it as Harness-owned only when the file
-   content has Harness/WF markers such as `harness: wf-agent`, `project harness`,
-   or `Harness/...`; otherwise leave it as a real conflict.
-6. For every remaining `agent.aiMergeRequired` entry, compare the local file with
-   `templateHint` or `remoteUrl`, then choose merge, keep-local, or
-   overwrite-from-template. Record the decision through the script with
-   `--accept-local <file>`, `--accept-merged <file>`, or
-   `--accept-template <file>`; do not hand-edit `Harness/.harness-version`.
-   Ask the user only when the intent is ambiguous.
-7. Run `node Harness/scripts/wf-update-check.mjs --finalize` after all
-   conflicts have script-recorded decisions. Use strict `--apply` only when the
-   JSON plan has zero conflicts.
-8. After update, run the validator and then scan-clean.
+Scope resolution is deterministic:
+
+- Current project has `Harness/scripts/wf-update-check.mjs`: update the project install from that script.
+- A global runtime is discoverable from `Harness/.harness-version.globalDir`, `HARNESS_GLOBAL_HOME`, or the default `~/.harness/create-harness-vibe-coding`: update that runtime too, then sync its Claude/Codex/OpenCode host-global copies.
+- Current project has no Harness install: update only the global runtime and host-global copies. Do not scaffold or modify the project unless the user explicitly asks to install Harness there.
+`Harness/scripts/wf-update-runner.mjs` implements this multi-scope routing. Older installs that do not have the runner fall back to `Harness/scripts/wf-update-check.mjs`.
+
+1. Run `node Harness/scripts/wf-update-runner.mjs --json` first when present; otherwise run `node Harness/scripts/wf-update-check.mjs --json` and use the `agent` block as the action plan. Current updaters try npm `create-harness-vibe-coding@latest` first, then canonical GitHub `LiWeny16/create-harness-vibe-coding`, then legacy mirror `zingspark/create-harness-vibe-coding`.
+2. Preserve all PRESERVE files. Never overwrite user task, memory, research, root README.md, package, progress, or architecture files. Harness/README.md is merge-tier, not PRESERVE.
+3. If `agent.safeApplyCommand` is present, run the runner apply path to apply SAFE, NEW, moved, and adopted metadata-only files across every discovered scope before spending AI time on conflicts. Default multi-scope command: `node Harness/scripts/wf-update-runner.mjs --apply-safe --json`. Single-scope fallback command: `node Harness/scripts/wf-update-check.mjs --apply-safe`.
+4. Previously accepted decisions for merge-tier files are carried forward automatically when both the local hash and remote template hash are unchanged.
+5. If a new agent/command/skill path collides with an existing file, do not decide by filename alone. Treat it as Harness-owned only when the file content has Harness/WF markers such as `harness: wf-agent`, `project harness`, or `Harness/...`; otherwise leave it as a real conflict.
+6. For every remaining `agent.aiMergeRequired` entry, compare the local file with `templateHint` or `remoteUrl`, then choose merge, keep-local, or overwrite-from-template. Record the decision through the script with `--accept-local <file>`, `--accept-merged <file>`, or `--accept-template <file>`; do not hand-edit `Harness/.harness-version`.
+7. Run `node Harness/scripts/wf-update-runner.mjs --finalize --json` after all conflicts have script-recorded decisions. Single-scope fallback: `node Harness/scripts/wf-update-check.mjs --finalize`. Use strict `--apply` only when the JSON plan has zero conflicts.
+8. After apply/finalize, run all post-update checks:
+
+```bash
+node Harness/scripts/sync-host-global.mjs --json
+node Harness/scripts/sync-host-global.mjs --apply --json
+node Harness/scripts/validate-harness.mjs
+node Harness/scripts/validate-harness.mjs --manifest-audit
+node Harness/scripts/scan-clean.mjs --json
+```
+
+9. If the update reports "Already up to date" but framework files are missing or stale, run repair mode:
+
+```bash
+node Harness/scripts/wf-update-runner.mjs --repair --json
+node Harness/scripts/wf-update-runner.mjs --repair --apply-safe --json
+node Harness/scripts/wf-update-runner.mjs --repair --finalize --json
+node Harness/scripts/wf-update-check.mjs --repair --json
+node Harness/scripts/wf-update-check.mjs --repair --apply-safe
+node Harness/scripts/wf-update-check.mjs --repair --finalize
+node Harness/scripts/sync-host-global.mjs --apply --json
+node Harness/scripts/validate-harness.mjs --manifest-audit
+```
+
+`--repair` bypasses the version check and forces a full file diff against the latest remote template. This catches partial updates where the version advanced but files such as `/wf-task-list`, `/wf-help`, Codex `.agents` skill mirrors, OpenCode commands, `.codex` config, or Harness scripts were not written.
+`sync-host-global.mjs` is a no-op for project-only installs. For global installs it repairs missing or Harness-marked stale host-global copies by script and reports user-looking files as conflicts.
 
 ## Recovery
 
-If `Harness/scripts/wf-update-check.mjs` is missing (old install without updater), or `Harness/.harness-version` is missing or corrupted, do NOT reinstall from scratch. Recover by regenerating missing infrastructure:
+If `Harness/scripts/wf-update-check.mjs` is missing, or `Harness/.harness-version` is missing or corrupted, do not reinstall from scratch. Recover by regenerating missing infrastructure:
 
-```
+```bash
 npx create-harness-vibe-coding@latest <project-name> . -y --on-conflict skip
 ```
 
-The `--on-conflict skip` policy preserves all existing user files (CLAUDE.md, README.md, tasks, memory, research, architecture) and only creates missing Harness infrastructure files. After recovery, re-run the update check.
+The `--on-conflict skip` policy preserves all existing user files and only creates missing Harness infrastructure files. After recovery, run the update check and manifest audit.
 
-If an old updater reports only `0.8.10`, run the latest installer command above
-or re-run the checker with:
+If an old updater reports only `0.8.10`, run the latest installer command above or re-run the checker with:
 
-```
+```bash
 node Harness/scripts/wf-update-check.mjs --json --source-base https://raw.githubusercontent.com/LiWeny16/create-harness-vibe-coding/main/templates/common/
 ```
 
 ## Return
 
-Report version, SAFE/NEW updates, conflicts and decisions, preserved files,
-partialUpdate status if any, validation output, scan-clean result, and
-remaining risks.
+Report version, SAFE/NEW updates, conflicts and decisions, preserved files, partialUpdate status if any, validation output, manifest-audit output, scan-clean result, and remaining risks. Also report the core release highlights from `agent.releaseHighlights` or `releaseNotes.highlights`.

package/templates/common/.harness-version

@@ -1,19 +1,21 @@
 {
-  "generator": "0.8.18",
-  "generated": "2026-07-29T06:33:44.000Z",
+  "generator": "0.8.19",
+  "generated": "2026-07-30T14:31:29.365Z",
   "options": [],
   "autoCheck": true,
   "source": "https://raw.githubusercontent.com/LiWeny16/create-harness-vibe-coding/main/templates/common/",
   "releaseNotes": {
-    "version": "0.8.18",
-    "date": "2026-07-29",
+    "version": "0.8.19",
+    "date": "2026-07-30",
     "highlights": [
-      "Add explicit task capsule management with list, archive, record/open state recovery, create-or-resume matching, task dependency metadata, and validator coverage.",
-      "Add `wf-command-create` as the atomic command/skill creation workflow so new Harness commands update command files, skills, templates, mirrors, validators, and tests together.",
-      "Add global install metadata for Claude, Codex, and OpenCode while keeping Harness tasks and progress project-local.",
-      "Separate project/global memory and settings policy, with project settings taking precedence and task capsules remaining project-scoped.",
-      "Harden host-global ownership and validation rules so framework-owned global command/skill files can update safely while user-authored files remain protected.",
-      "Strengthen `wf-review`, `wf-agents-docs`, and WF-MAX guidance around explicit WF triggers, bounded peer output, and task capsule recording."
+      "Publish `$wf-ui` as the Harness control panel with task capsule observability, agent workflow hierarchy, runtime detection, real PTY-backed detected CLI launches, and multi-terminal peer sessions.",
+      "Bundle built `wf-ui` assets in the npm package and guard them with pack smoke coverage so installed `wf-ui` can serve the browser UI without a local frontend build.",
+      "Harden OTA updates with `--repair` mode so an already-version-bumped install can still diff and restore missing framework files such as `/wf-task-list`, `/wf-help`, and platform mirrors.",
+      "Add post-update manifest validation: `/wf-update` now requires `validate-harness.mjs --manifest-audit` after apply/finalize to catch missing framework files, stale Harness-owned files, and manifest coverage gaps.",
+      "Add multi-scope `/wf-update` routing: project installs update project + discovered global runtime, while uninstalled projects using global command surfaces update only the global runtime and host copies.",
+      "Add `sync-host-global.mjs` so global Claude/Codex/OpenCode command and skill copies are audited and repaired after runtime updates.",
+      "Keep `--repair` safe by refusing older remote sources and prerelease sources by default; repair can restore missing files but cannot silently downgrade a newer install.",
+      "Regenerate ownership manifests from the template source so `.claude`, `.codex`, `.agents`, `.opencode`, and Harness script/spec files are tracked as updateable framework files while tasks, memory, progress, and project user files remain preserved."
     ]
   },
   "moves": [
@@ -160,8 +162,8 @@
     ".agents/skills/subagent-orchestrator/SKILL.md": "sha256-6354018aaafd3d9f546eeecc90f943ef9a94d05747673369586a4a2f45a9464d",
     ".agents/skills/tdd/SKILL.md": "sha256-d6738eca127e0632474db67c25708c9db3feab3b55499c489518502ec8951e3a",
     ".agents/skills/wf-agents-docs/SKILL.md": "sha256-20cd0d52d600ba9a61cbeb7fefea3beed213f77a87f23a1b534e6229949d5b01",
-    ".agents/skills/wf-auto-spark/SKILL.md": "sha256-0afd699c52a45a4071bcecf09ee487adb6002be6c608fdf653fba1c0a00e4ec4",
-    ".agents/skills/wf-auto/SKILL.md": "sha256-e62077d3c54d946f549c781fdf3f765c9a0ced41d0bedc96915b7167c3332987",
+    ".agents/skills/wf-auto-spark/SKILL.md": "sha256-4693db5b5a62d9385ede824c2ecfa84efbfa1d59a120377e216e4e920ccfc9db",
+    ".agents/skills/wf-auto/SKILL.md": "sha256-e148c86fba7873543afa1963808bf4f3dceab5864bba65665aae075ab8f2f838",
     ".agents/skills/wf-browser/SKILL.md": "sha256-0914538f7ae624b66cede82593f8063716c96c0f7b36adebbcf413c9e2a1d836",
     ".agents/skills/wf-command-create/SKILL.md": "sha256-b8df91106d4ea161d659d1099a2ae509b8c81e9954946c2f53629ccbc5ffe70a",
     ".agents/skills/wf-help/SKILL.md": "sha256-418564cbe5e2df1e63fccdc9cd1cc12b05df9589836c6ff39ff43610eddf4e56",
@@ -173,7 +175,8 @@
     ".agents/skills/wf-task-archive/SKILL.md": "sha256-f1637ee8c56b1385aed5db9c93f74889c2542a85273fdc68c6a4975a906f1cd5",
     ".agents/skills/wf-task-list/SKILL.md": "sha256-04bcae617ef70e6b46c267ed726f6e8352d2f0b72aaaa8a486e3a760a8144b48",
     ".agents/skills/wf-task-record/SKILL.md": "sha256-7afb4a9f04da96e45b9159f596d00c563184a27aff538385519187f2868811f8",
-    ".agents/skills/wf-update/SKILL.md": "sha256-98a762d8d13b2ad36331b97c94b0b28b3103ee091814cc2c3710861895611e14",
+    ".agents/skills/wf-ui/SKILL.md": "sha256-13c95b09624e93cec1ef4a6ef05dcc6f909edeb13590b28b8acb145233c6eae9",
+    ".agents/skills/wf-update/SKILL.md": "sha256-2efdd15cd8a4a9ec6b239cd5880c19c89c2be5016123342040d178b59b36778f",
     ".agents/skills/wf/SKILL.md": "sha256-78cc8b5be329649508b9fa6856b50c709ae74fbc31a4c7b77a69c6552723e29b",
     ".claude/agents/architect-manager.md": "sha256-21f16d8d5e9d0a88d9663dbe798421501e0de89ccad5f8f3c1ef9db5b79edaf7",
     ".claude/agents/architect.md": "sha256-8a57c6a85ec21d49deaa37a73a81367dabfdb22efd781f58e66b6628e14b218c",
@@ -198,24 +201,25 @@
     ".claude/commands/wf-auto.md": "sha256-06196a633eb0464ff152e7bfffabd76c09ab32a2aef9d84b82bbb4c204503226",
     ".claude/commands/wf-browser.md": "sha256-1cd46b259cb509af2d0bb1d105912889068611875c008e002598d0e7ed42cf52",
     ".claude/commands/wf-command-create.md": "sha256-b6027172e5d98c44f1ac22747a9ad52b27de15271018a60b10ac5b7c3d96f4a0",
-    ".claude/commands/wf-help.md": "sha256-db9dc794255eb865b947c1a00020d9a1511d4f90a590cab480730e9576949aa9",
+    ".claude/commands/wf-help.md": "sha256-3b15f9799da469e58a62b3360a7c0c29d15e578be364693e351afef66f6a5800",
     ".claude/commands/wf-learn.md": "sha256-02606f2a91e03056676aa022a060cd4a05a4d3123f8cb6f5e27bc50d90c6448a",
     ".claude/commands/wf-max.md": "sha256-88cdfb4ef8a205483045302b56dec268bdf010debd9c4473b665f5720e4c5697",
     ".claude/commands/wf-readme.md": "sha256-3eee1a6b3f62c22ed46440ed38ecb02999c9a3128d7660e91e7f0a94c59fa463",
     ".claude/commands/wf-remove.md": "sha256-80fe1849412028c9a91120143eeb10e153e6d7c32ec502c0d7ef3599d13fa337",
     ".claude/commands/wf-review.md": "sha256-bb031ffc8e392af2c1b2bb97b2f7605af1dcfa70514c6068312eca01f170e6d9",
     ".claude/commands/wf-task-archive.md": "sha256-95b7c0a7bb2946b8c6c57506726358e7cc57cc2d9b1b48bd43b102a9a77ca3da",
-    ".claude/commands/wf-task-list.md": "sha256-daf36faca4ffa9904f4229d30c38c2cb3f986f2223cc80624f09b36e2f240266",
+    ".claude/commands/wf-task-list.md": "sha256-6d90efb0832a3a3e478c74101458026341f4966f01236c076859c8e562d13951",
     ".claude/commands/wf-task-record.md": "sha256-e9fa479274bdece66afa631642a87c7e2500f1dc1e58b930660cebeef4eae748",
-    ".claude/commands/wf-update.md": "sha256-f6aa497209ad6c430771b5621720bca50bb06cf5ae3f40dfe1086f0372c232d7",
+    ".claude/commands/wf-ui.md": "sha256-faaef8c2ea6565be36582ce03a7dc9d4238a38b8d776a49e588f8a6df430b2d8",
+    ".claude/commands/wf-update.md": "sha256-48b82e5300cd5422396b8fc06dfaa2dd243e95a0891100e58715274da674e4b9",
     ".claude/commands/wf.md": "sha256-bef81f0404230ff0de64727d46aa947d7434d06fde8ad03c55db9ccf54870cca",
-    ".claude/rules/ecc/common.md": "sha256-e31150aec333867e688d36fbf26a9508d560bc51557c7ebb5717fa3484bf47f4",
+    ".claude/rules/ecc/common.md": "sha256-930bb10a68d38b59b91b2e7cded67e4e99a0bcc3f3c6c928ab033c5670dfd827",
     ".claude/settings.json": "sha256-99e8552584b8e71e3e11b4b760c3bfbf8c1b18dadda7ec3f6e3c46f88d9ea513",
     ".claude/skills/subagent-orchestrator/SKILL.md": "sha256-6354018aaafd3d9f546eeecc90f943ef9a94d05747673369586a4a2f45a9464d",
     ".claude/skills/tdd/SKILL.md": "sha256-d6738eca127e0632474db67c25708c9db3feab3b55499c489518502ec8951e3a",
     ".claude/skills/wf-agents-docs/SKILL.md": "sha256-20cd0d52d600ba9a61cbeb7fefea3beed213f77a87f23a1b534e6229949d5b01",
-    ".claude/skills/wf-auto-spark/SKILL.md": "sha256-0afd699c52a45a4071bcecf09ee487adb6002be6c608fdf653fba1c0a00e4ec4",
-    ".claude/skills/wf-auto/SKILL.md": "sha256-e62077d3c54d946f549c781fdf3f765c9a0ced41d0bedc96915b7167c3332987",
+    ".claude/skills/wf-auto-spark/SKILL.md": "sha256-4693db5b5a62d9385ede824c2ecfa84efbfa1d59a120377e216e4e920ccfc9db",
+    ".claude/skills/wf-auto/SKILL.md": "sha256-e148c86fba7873543afa1963808bf4f3dceab5864bba65665aae075ab8f2f838",
     ".claude/skills/wf-browser/SKILL.md": "sha256-0914538f7ae624b66cede82593f8063716c96c0f7b36adebbcf413c9e2a1d836",
     ".claude/skills/wf-command-create/SKILL.md": "sha256-b8df91106d4ea161d659d1099a2ae509b8c81e9954946c2f53629ccbc5ffe70a",
     ".claude/skills/wf-help/SKILL.md": "sha256-418564cbe5e2df1e63fccdc9cd1cc12b05df9589836c6ff39ff43610eddf4e56",
@@ -227,7 +231,8 @@
     ".claude/skills/wf-task-archive/SKILL.md": "sha256-f1637ee8c56b1385aed5db9c93f74889c2542a85273fdc68c6a4975a906f1cd5",
     ".claude/skills/wf-task-list/SKILL.md": "sha256-04bcae617ef70e6b46c267ed726f6e8352d2f0b72aaaa8a486e3a760a8144b48",
     ".claude/skills/wf-task-record/SKILL.md": "sha256-7afb4a9f04da96e45b9159f596d00c563184a27aff538385519187f2868811f8",
-    ".claude/skills/wf-update/SKILL.md": "sha256-98a762d8d13b2ad36331b97c94b0b28b3103ee091814cc2c3710861895611e14",
+    ".claude/skills/wf-ui/SKILL.md": "sha256-13c95b09624e93cec1ef4a6ef05dcc6f909edeb13590b28b8acb145233c6eae9",
+    ".claude/skills/wf-update/SKILL.md": "sha256-2efdd15cd8a4a9ec6b239cd5880c19c89c2be5016123342040d178b59b36778f",
     ".claude/skills/wf/SKILL.md": "sha256-78cc8b5be329649508b9fa6856b50c709ae74fbc31a4c7b77a69c6552723e29b",
     ".codex/config.toml": "sha256-b561d07aaba9bb32df0c48713f6a00be95462af9fa9383efb7cee89f9b24f9ba",
     ".codex/hooks.json": "sha256-3200c42c2da434c07cd6ab1ce86f8845ab46a1ed9a25b65117b2b2b42056c725",
@@ -254,35 +259,43 @@
     ".opencode/commands/wf-auto.md": "sha256-06196a633eb0464ff152e7bfffabd76c09ab32a2aef9d84b82bbb4c204503226",
     ".opencode/commands/wf-browser.md": "sha256-1cd46b259cb509af2d0bb1d105912889068611875c008e002598d0e7ed42cf52",
     ".opencode/commands/wf-command-create.md": "sha256-29b597b7c2c3b8a7e131365e1704855bbd2774511ed30cf99e398f77123e2981",
-    ".opencode/commands/wf-help.md": "sha256-d1ff937d1d10a76270a23785e280bcd6f9d6dde05fa6d592da6094a8a819740b",
+    ".opencode/commands/wf-help.md": "sha256-05d4d2feca75b1f03eba3b28084504b5314a7fdc131db3f9f8c46c4b1bf7d0fe",
     ".opencode/commands/wf-learn.md": "sha256-02606f2a91e03056676aa022a060cd4a05a4d3123f8cb6f5e27bc50d90c6448a",
     ".opencode/commands/wf-max.md": "sha256-21ddf8d4eff7ce91948a41eb68cbc9d184349ca3a422c72950fc83a5039eb663",
     ".opencode/commands/wf-readme.md": "sha256-3eee1a6b3f62c22ed46440ed38ecb02999c9a3128d7660e91e7f0a94c59fa463",
     ".opencode/commands/wf-remove.md": "sha256-80fe1849412028c9a91120143eeb10e153e6d7c32ec502c0d7ef3599d13fa337",
     ".opencode/commands/wf-review.md": "sha256-bb031ffc8e392af2c1b2bb97b2f7605af1dcfa70514c6068312eca01f170e6d9",
     ".opencode/commands/wf-task-archive.md": "sha256-eed9b41bd4fc9c4ca6d0b4aa2cc0492e7695173b6b5487a7a07683dec66de162",
-    ".opencode/commands/wf-task-list.md": "sha256-66ba8af605aa83408b5a5c8621af52da98c5a9ed6bbad5be53290903a0a329fc",
+    ".opencode/commands/wf-task-list.md": "sha256-53e25781b9c9f9b12927f3291613a07029c2dfdef636350b0b779b4f7cca0a7f",
     ".opencode/commands/wf-task-record.md": "sha256-c71c49e54f568eff816f5eea505d34a139e91f4f18aed504391ab6fa6afd539e",
-    ".opencode/commands/wf-update.md": "sha256-f6aa497209ad6c430771b5621720bca50bb06cf5ae3f40dfe1086f0372c232d7",
+    ".opencode/commands/wf-ui.md": "sha256-faaef8c2ea6565be36582ce03a7dc9d4238a38b8d776a49e588f8a6df430b2d8",
+    ".opencode/commands/wf-update.md": "sha256-48b82e5300cd5422396b8fc06dfaa2dd243e95a0891100e58715274da674e4b9",
     ".opencode/commands/wf.md": "sha256-bef81f0404230ff0de64727d46aa947d7434d06fde8ad03c55db9ccf54870cca",
     ".opencode/plugins/harness-wf-status.mjs": "sha256-ee0987cec5530c34784c619a803562d7085ae26fe5d199fde7ce42c2bed4724e",
     "AGENTS.md": "sha256-fad176931742a5080e073d1ddba99a3eabb67e8c42bebb132df99a51ca6a184d",
-    "CLAUDE.md": "sha256-7c1cd41ebbd6a87b2b59606aff70b7aab0bdce737bca013e8f55efd63292bfae",
-    "Harness/MEMORY.md": "sha256-896a7b09e96aa0f3041c577eab70160381856cf63a26a7daf74a0eb48dc3e898",
-    "Harness/README.md": "sha256-9bfe3caa4b28db129da66aba36d32bddc450b8399e5e14b03f66d3f1a8bcea47",
-    "Harness/ownership.manifest.json": "sha256-3948ecdaa8f9f05f46a6df4e5b7df1949b6ab268c850b9677bbc0ed77e579630",
+    "CLAUDE.md": "sha256-d5c527cc412054cbce6edc1c4e9476c001156117562108f5bdaf6f7f8a8827e9",
+    "Harness/MEMORY.md": "sha256-d998ab26fe1932b8bb6b55a4fcb4ba1c54ed4d2a633057ee0442d435c2add376",
+    "Harness/README.md": "sha256-59ea5524eee4a40586d3ebb79e35e1f0e53e8c3fa31a45c7c0d5e66aa339991f",
+    "Harness/a2a/role-graph.json": "sha256-bf4701253b5bfb3f6578eee0777cc10b250130acca2438fac6a5be31e38da34c",
+    "Harness/a2a/runtime-registry.json": "sha256-37b1fa4820ba3a4001b8ec9ec9a03dfdeb132379046792c21d5e1de0794fee90",
+    "Harness/a2a/skills/terminal-control.json": "sha256-07c66989c8a25344ddeabdbfaf1fc86f14750beb48ee8f99a970714ebcd5efb3",
+    "Harness/ownership.manifest.json": "sha256-b6808f7009294aa6a446c1b24f3669659060979148dfd6c30a9caea3b6e6efe7",
     "Harness/project/architecture.md": "sha256-27462306667539d71aecc4a90a778222f61585ef99e8131fb38f866913cac1c4",
     "Harness/research/README.md": "sha256-b7a542c0d919cabc185b6e7a1e6ef265dc5160978d0c1dd804f2c6547d0202a4",
+    "Harness/scripts/README.md": "sha256-b97601aca4c042f09aa387cdf8764a242a3e67d40888fd5eb27c1ff2c86926f6",
+    "Harness/scripts/a2a-terminal.mjs": "sha256-d99864265bf90bef86538b7f5ca10b9debf4fad343aac832d32cc6957605d247",
     "Harness/scripts/archive-tasks.mjs": "sha256-c5891c32d23f0b1bc863753d11116ab593928aa9ebedf2768b68b77e88c9909c",
-    "Harness/scripts/context-budget.mjs": "sha256-079228fa11046c5e4ca7323ac09091b05a78efae03ce655fee0c608c6833c33f",
+    "Harness/scripts/context-budget.mjs": "sha256-7cf88703e55eaaf6abdd1b2bf314e15a94ec41da2d370ce560b60655988b102e",
     "Harness/scripts/l2-cache-telemetry.mjs": "sha256-139b5317eb3917f2ca0acd3cb1164170cc8c1dd60e0dee35f8d1596aed28c22c",
     "Harness/scripts/scan-clean.mjs": "sha256-6c4b2a4d15a8cd758214a360f8d3be11a835368d409c95719242c75ccf466c8a",
-    "Harness/scripts/task-state.mjs": "sha256-826fbdb6221011dd8b5b068dcb481ad133d4f05fc886e407a373e808e3c04b31",
-    "Harness/scripts/validate-harness.mjs": "sha256-9fdc0299a5af5f57a74a3f98eec25c102b3d9a855ecfa42fbcb62d6752f4024e",
+    "Harness/scripts/sync-host-global.mjs": "sha256-16bf56a1c348d0225e4093b364166f51b2148a6d75020e49431d9b31d4800518",
+    "Harness/scripts/task-state.mjs": "sha256-e911615ca8a0edea676b840ccf8164eb70cfb14a08871f3121c5ad10692aa657",
+    "Harness/scripts/validate-harness.mjs": "sha256-f511f92d73a78c21de7b6c8de8be8641605e51131f5b2e4e5accb127aa5dfffb",
     "Harness/scripts/wf-auto-update-prompt.mjs": "sha256-14210304dbd8e648b8939fc4c5d3664f943052153e689264c16b05b7b81bd39e",
-    "Harness/scripts/wf-remove.mjs": "sha256-1adc68b20f4f44cc44a6b52de2f3fc06a58edede6a73fff1f7bcd631a165a3fd",
-    "Harness/scripts/wf-update-check.mjs": "sha256-32e9ed19046ac9b4910a661dae8fc13c03a605912430009cc8f830c1fdab3984",
-    "Harness/settings.json": "sha256-db6a14fcaaba3d2ac9c0c11bd11273bd016bcc16c154895d4c0b2a03ef51786e",
+    "Harness/scripts/wf-remove.mjs": "sha256-ba8711a74b88def50c4f94171d43ff01d6e3d67cd89644f19b701675362afb73",
+    "Harness/scripts/wf-update-check.mjs": "sha256-cfdccaeb8045a772a80f468f8b23fdb753b99bd89d3af72688c4abd241bd85a9",
+    "Harness/scripts/wf-update-runner.mjs": "sha256-2a197a6cd0ab5abbc2ad9359b78cc44db41b5789aabbb503f357ca1135c62444",
+    "Harness/settings.json": "sha256-5455b66125fd67969a6e490d3093ce238f7c16348f69a980a65ce22d99c0c728",
     "Harness/specs/guides/ECC-GUIDE.md": "sha256-eba123cad02dde928317b9347efac45daf33698221d2d91768559a1f0456cc97",
     "Harness/specs/guides/SETUP.md": "sha256-2f33b14eec035c9603ad6355cecc109879e9320a7a29aa9e9be6bbc743362b38",
     "Harness/specs/guides/extension.md": "sha256-5bf5895f849b972e5bdd1afd1a6914cd743b88b05668bb72dca7cd835262e8c9",
@@ -292,16 +305,16 @@
     "Harness/specs/protocols/DEBUG_PROTOCOL.md": "sha256-ed80de0e3e1a40dbb9fd0bdead9174f1650e1833027f3d7fb4bb5884142e03f7",
     "Harness/specs/protocols/HARNESS_BRIDGE.md": "sha256-681dbeca9a590bbeb3a0c01b044e40e642e6d640632d8611064eb897ada8a48d",
     "Harness/specs/protocols/MEMORY_PROTOCOL.md": "sha256-5542c5007f278e0d83627d831beff4eaa58e2bc256f7962f562050de124e24d9",
-    "Harness/specs/protocols/TASK_ARCHIVE.md": "sha256-f526745f6dda7bb04b3540ca58c921b27aeca845b0cf65b9a0f7cdb0c1ed0f20",
+    "Harness/specs/protocols/TASK_ARCHIVE.md": "sha256-93f926df3fdea1510535ac5ab8efeba347c67c1d289afc0e46d4d2175a2e3699",
     "Harness/specs/protocols/TDD-GUIDE.md": "sha256-602084530fd0dea7499a023ce75738351e5d97a0c222b64d405f36da6b59a162",
     "Harness/specs/runtime/agent-workflow.md": "sha256-9e6390715a9c2e404923d17e12369fe5af22c9a615ab14a010a8d6da0974c987",
-    "Harness/specs/runtime/command-surface.json": "sha256-9c74976ff14315f13bb6e02e19d200d295a287d236071e8b03570229d3719732",
+    "Harness/specs/runtime/command-surface.json": "sha256-70da5001e2a05a636050f0df9e129ea67c06953b649d2c0b9d2001ccc484c265",
     "Harness/specs/runtime/context-loading.md": "sha256-323e9476486ebf60cfd9fd78834701817f882648749cd548dd7a47670fce0bd6",
     "Harness/specs/runtime/dispatch.md": "sha256-1b1c2681c2722b8d708f8cca48ec1991ee922602c4c7333704f0156f6ffa498f",
     "Harness/specs/runtime/subagents.md": "sha256-bb71ae927dd5f4656f97a78797b1d776618a39b26a7364a256cbcf38db427e71",
     "Harness/specs/workflows/WF-AUTO-ANGLES.md": "sha256-b9641d871f728e8112ad0d8c7f87bcbec0a06aa572c5f3060efdd26496abdf9b",
-    "Harness/specs/workflows/WF-AUTO-SPARK.md": "sha256-dfe7e31373ccc9dea2d552649ec21dff91bca723316655788e82ab37cf0d33e5",
-    "Harness/specs/workflows/WF-AUTO.md": "sha256-742e949bf77259997d662447f5b7c5627d8459f0b7aed96748cdb2de9c3bcfa9",
+    "Harness/specs/workflows/WF-AUTO-SPARK.md": "sha256-49a6272f9c40d9bd0ae22ae39d576bf3c6479bb9cbc56a24e8b62b31cdabf72c",
+    "Harness/specs/workflows/WF-AUTO.md": "sha256-78d1be4bfbc6618acc75d09f1f19016d741552924958ca2739ba9f3fd05c4d19",
     "Harness/specs/workflows/WF-KERNEL.md": "sha256-70d608b12ab977c5dfb7038fb7677123bd39f29fb645b3046abbde7fa28d69a7",
     "Harness/specs/workflows/WF-MAX.md": "sha256-4584a0870138db80d507dcfcebb32f34dfb6c9a4a3b154faad15f621b66536e7",
     "Harness/specs/workflows/WF-STATE.md": "sha256-7108775358b44229302d3271083b349648d44b1c61de89167e4e99346821bf2a",
@@ -332,6 +345,7 @@
     ".agents/skills/wf-task-archive/SKILL.md": ".claude/skills/wf-task-archive/SKILL.md",
     ".agents/skills/wf-task-list/SKILL.md": ".claude/skills/wf-task-list/SKILL.md",
     ".agents/skills/wf-task-record/SKILL.md": ".claude/skills/wf-task-record/SKILL.md",
+    ".agents/skills/wf-ui/SKILL.md": ".claude/skills/wf-ui/SKILL.md",
     ".agents/skills/wf-update/SKILL.md": ".claude/skills/wf-update/SKILL.md",
     ".agents/skills/wf/SKILL.md": ".claude/skills/wf/SKILL.md",
     ".claude/agents/architect-manager.md": ".claude/agents/architect-manager.md",
@@ -366,6 +380,7 @@
     ".claude/commands/wf-task-archive.md": ".claude/commands/wf-task-archive.md",
     ".claude/commands/wf-task-list.md": ".claude/commands/wf-task-list.md",
     ".claude/commands/wf-task-record.md": ".claude/commands/wf-task-record.md",
+    ".claude/commands/wf-ui.md": ".claude/commands/wf-ui.md",
     ".claude/commands/wf-update.md": ".claude/commands/wf-update.md",
     ".claude/commands/wf.md": ".claude/commands/wf.md",
     ".claude/rules/ecc/common.md": ".claude/rules/ecc/common.md",
@@ -386,6 +401,7 @@
     ".claude/skills/wf-task-archive/SKILL.md": ".claude/skills/wf-task-archive/SKILL.md",
     ".claude/skills/wf-task-list/SKILL.md": ".claude/skills/wf-task-list/SKILL.md",
     ".claude/skills/wf-task-record/SKILL.md": ".claude/skills/wf-task-record/SKILL.md",
+    ".claude/skills/wf-ui/SKILL.md": ".claude/skills/wf-ui/SKILL.md",
     ".claude/skills/wf-update/SKILL.md": ".claude/skills/wf-update/SKILL.md",
     ".claude/skills/wf/SKILL.md": ".claude/skills/wf/SKILL.md",
     ".codex/config.toml": ".codex/config.toml",
@@ -423,6 +439,7 @@
     ".opencode/commands/wf-task-archive.md": ".opencode/commands/wf-task-archive.md",
     ".opencode/commands/wf-task-list.md": ".opencode/commands/wf-task-list.md",
     ".opencode/commands/wf-task-record.md": ".opencode/commands/wf-task-record.md",
+    ".opencode/commands/wf-ui.md": ".opencode/commands/wf-ui.md",
     ".opencode/commands/wf-update.md": ".opencode/commands/wf-update.md",
     ".opencode/commands/wf.md": ".opencode/commands/wf.md",
     ".opencode/plugins/harness-wf-status.mjs": ".opencode/plugins/harness-wf-status.mjs",
@@ -432,6 +449,9 @@
     "Harness/MEMORY.md": "Harness/MEMORY.md",
     "Harness/PROGRESS.md": "Harness/PROGRESS.md",
     "Harness/README.md": "Harness/README.md",
+    "Harness/a2a/role-graph.json": "Harness/a2a/role-graph.json",
+    "Harness/a2a/runtime-registry.json": "Harness/a2a/runtime-registry.json",
+    "Harness/a2a/skills/terminal-control.json": "Harness/a2a/skills/terminal-control.json",
     "Harness/memory/agent-lessons-patterns.md": "memory/agent-lessons-patterns.md",
     "Harness/memory/routes.md": "memory/routes.md",
     "Harness/memory/startup-hints.md": "memory/startup-hints.md",
@@ -442,15 +462,19 @@
     "Harness/research/PRD.md": "Harness/research/PRD.md",
     "Harness/research/README.md": "Harness/research/README.md",
     "Harness/research/research-results.md": "Harness/research/research-results.md",
+    "Harness/scripts/README.md": "Harness/scripts/README.md",
+    "Harness/scripts/a2a-terminal.mjs": "Harness/scripts/a2a-terminal.mjs",
     "Harness/scripts/archive-tasks.mjs": "Harness/scripts/archive-tasks.mjs",
     "Harness/scripts/context-budget.mjs": "Harness/scripts/context-budget.mjs",
     "Harness/scripts/l2-cache-telemetry.mjs": "Harness/scripts/l2-cache-telemetry.mjs",
     "Harness/scripts/scan-clean.mjs": "Harness/scripts/scan-clean.mjs",
+    "Harness/scripts/sync-host-global.mjs": "Harness/scripts/sync-host-global.mjs",
     "Harness/scripts/task-state.mjs": "Harness/scripts/task-state.mjs",
     "Harness/scripts/validate-harness.mjs": "Harness/scripts/validate-harness.mjs",
     "Harness/scripts/wf-auto-update-prompt.mjs": "Harness/scripts/wf-auto-update-prompt.mjs",
     "Harness/scripts/wf-remove.mjs": "Harness/scripts/wf-remove.mjs",
     "Harness/scripts/wf-update-check.mjs": "Harness/scripts/wf-update-check.mjs",
+    "Harness/scripts/wf-update-runner.mjs": "Harness/scripts/wf-update-runner.mjs",
     "Harness/settings.json": "Harness/settings.json",
     "Harness/specs/guides/ECC-GUIDE.md": "Harness/specs/guides/ECC-GUIDE.md",
     "Harness/specs/guides/SETUP.md": "Harness/specs/guides/SETUP.md",
@@ -475,11 +499,11 @@
     "Harness/specs/workflows/WF-MAX.md": "Harness/specs/workflows/WF-MAX.md",
     "Harness/specs/workflows/WF-STATE.md": "Harness/specs/workflows/WF-STATE.md",
     "Harness/specs/workflows/WF.md": "Harness/specs/workflows/WF.md",
-    "Harness/tasks/_template/ARTIFACTS.md": "Harness/tasks/_template/ARTIFACTS.md",
     "Harness/tasks/_template/NAMING.md": "Harness/tasks/_template/NAMING.md",
-    "Harness/tasks/_template/NOTES.md": "Harness/tasks/_template/NOTES.md",
     "Harness/tasks/_template/PLAN.md": "Harness/tasks/_template/PLAN.md",
+    "Harness/tasks/_template/PROBLEM.md": "Harness/tasks/_template/PROBLEM.md",
     "Harness/tasks/_template/PROGRESS.md": "Harness/tasks/_template/PROGRESS.md",
+    "Harness/tasks/_template/REFERENCES.md": "Harness/tasks/_template/REFERENCES.md",
     "Harness/tasks/_template/STATE.json": "Harness/tasks/_template/STATE.json",
     "Harness/templates/ACCEPTANCE.template.md": "Harness/templates/ACCEPTANCE.template.md",
     "Harness/templates/API_CONTRACT.template.md": "Harness/templates/API_CONTRACT.template.md",

package/templates/common/.opencode/commands/wf-help.md

@@ -26,6 +26,7 @@ which returns this same table without loading `Harness/MEMORY.md` or entering WF
 | `/wf-task-list` | direct command | `/wf-task-list` | List all task capsules with status, phase, and dependencies. |
 | `/wf-task-archive [--apply]` | direct command | `/wf-task-archive --apply` | Archive completed task capsules (dry-run by default). |
 | `/wf-command-create <wf-command-id>` | direct command | `/wf-command-create wf-report --direct` | Create or modify wf-* command surfaces atomically from the command registry. |
+| `/wf-ui` | direct command | `/wf-ui` | Start the local Harness backend and browser control panel. |
 
 Source of truth: `Harness/README.md#Skill Commands` plus installed skills under
 `.claude/skills/` (Claude Code and OpenCode adapters) or `.agents/skills/`

package/templates/common/.opencode/commands/wf-task-list.md

@@ -24,4 +24,6 @@ Run: `node Harness/scripts/task-state.mjs list --json`
 ## Return
 
 - JSON output of all task capsules with status, phase, dependencies, and archive eligibility.
+- Includes a `graph` section: roots, dependency edges, block edges, and orphaned dependency warnings.
+- Human-readable mode renders the graph with ASCII arrows: `from ──▶ to` (depends) and `from ▸▸ to` (blocks).
 - If the command fails, report the error and do not retry.

package/templates/common/.opencode/commands/wf-ui.md

@@ -0,0 +1,26 @@
+---
+description: Open the Harness browser control panel for task capsules, workflow graphs, agent peers, settings, and terminal observability
+---
+
+# /wf-ui
+
+Start the Harness browser control panel directly. This is a direct command.
+Do not invoke a skill, do not start WF mode, and do not dispatch agents.
+
+Run from the project root:
+
+```bash
+create-harness-vibe-coding wf-ui --project . --host 127.0.0.1 --port 0 --open
+```
+
+If the global binary is not available, use the package fallback:
+
+```bash
+npx create-harness-vibe-coding@0.8.19 wf-ui --project . --host 127.0.0.1 --port 0 --open
+```
+
+Rules:
+- Bind only to `127.0.0.1`.
+- Use port `0` unless the user asks for a fixed port.
+- Leave the server running until the user stops it.
+- Return the local URL printed by the command.