npm - create-harness-vibe-coding - Versions diffs - 0.8.19 → 0.9.3 - Mend

create-harness-vibe-coding 0.8.19 → 0.9.3

This diff represents the content of publicly available package versions that have been released to one of the supported registries. The information contained in this diff is provided for informational purposes only and reflects changes between package versions as they appear in their respective public registries.

Files changed (656) hide show

package/templates/common/Harness/scripts/validate-harness.mjs CHANGED Viewed

@@ -108,6 +108,7 @@ const required = [
   'Harness/specs/protocols/HARNESS_BRIDGE.md',
   'Harness/specs/protocols/DEBUG_PROTOCOL.md',
   'Harness/specs/protocols/MEMORY_PROTOCOL.md',
+  'Harness/wf-browser/README.md',
   'Harness/templates/PRD.template.md',
   'Harness/templates/ACCEPTANCE.template.md',
   'Harness/templates/UI_CONTRACT.template.md',
@@ -530,8 +531,9 @@ function listMarkdownFiles(rel) {
 const TASK_NAME_RE = /^task-[a-z]+(-[a-z0-9]+){1,4}$/;
 const TASK_NAME_MAX = 46; // "task-" (5) + ≤40 chars body + 1 safety = 46
 const TASK_RESERVED = new Set(['_template', 'auto', '_archive', 'continuous']);
-const TASK_SAFE_ARCHIVE_STATUSES = new Set(['complete', 'verified', 'archived', 'abandoned', 'obsolete', 'done', 'closed', 'closeout']);
-const TASK_NEVER_ARCHIVE_STATUSES = new Set(['active', 'blocked', 'in_progress', 'running', 'pending', 'needs-user-decision']);
+const TASK_CANONICAL_STATUSES = new Set(['active', 'blocked', 'closed']);
+const TASK_SAFE_ARCHIVE_STATUSES = new Set(['complete', 'verified', 'archived', 'abandoned', 'obsolete', 'done', 'closed', 'closeout', 'skipped']);
+const TASK_NEVER_ARCHIVE_STATUSES = new Set(['active', 'blocked']);
 const TASK_PHASE_ALIASES = new Map([
   ['implementation', 'implement'],
   ['build', 'implement'],
@@ -541,17 +543,37 @@ const TASK_PHASE_ALIASES = new Map([
   ['closed', 'closeout'],
 ]);
 const TASK_STATUS_ALIASES = new Map([
-  ['in-progress', 'in_progress'],
-  ['inprogress', 'in_progress'],
-  ['needs_user_decision', 'needs-user-decision'],
-  ['needs-user', 'needs-user-decision'],
+  ['in-progress', 'active'],
+  ['inprogress', 'active'],
+  ['in_progress', 'active'],
+  ['running', 'active'],
+  ['pending', 'active'],
+  ['needs_user_decision', 'blocked'],
+  ['needs-user-decision', 'blocked'],
+  ['needs-user', 'blocked'],
+  ['need-user-decision', 'blocked'],
+  ['complete', 'closed'],
+  ['completed', 'closed'],
+  ['verified', 'closed'],
+  ['archived', 'closed'],
+  ['abandoned', 'closed'],
+  ['obsolete', 'closed'],
+  ['done', 'closed'],
+  ['closeout', 'closed'],
+  ['skipped', 'closed'],
+  ['failed', 'blocked'],
 ]);
 const TASK_VALID_PHASES = new Set([
   'intake', 'clarify', 'requirements', 'prd', 'acceptance', 'plan', 'explore',
   'implement', 'verify', 'review', 'fix', 'reflect', 'closeout', 'blocked',
   'archived', 'verified',
 ]);
-const TASK_VALID_STATUSES = new Set([...TASK_SAFE_ARCHIVE_STATUSES, ...TASK_NEVER_ARCHIVE_STATUSES, 'skipped', 'failed']);
+const TASK_VALID_STATUSES = new Set([
+  ...TASK_CANONICAL_STATUSES,
+  ...TASK_SAFE_ARCHIVE_STATUSES,
+  ...TASK_NEVER_ARCHIVE_STATUSES,
+  'in_progress', 'running', 'pending', 'needs-user-decision', 'failed',
+]);
 const VALID_TASK_CAPSULE_POLICIES = new Set([
   'none',
   'required',
@@ -1504,7 +1526,14 @@ requireText('Harness/specs/protocols/ACCEPTANCE_PROTOCOL.md', 'AC-GATE', 'accept
 requireText('Harness/specs/protocols/ACCEPTANCE_PROTOCOL.md', 'Acceptance Result', 'acceptance result matrix');
 requireText('Harness/specs/protocols/ACCEPTANCE_PROTOCOL.md', 'Syntax-only checks', 'syntax-only checks are not browser acceptance evidence');
 requireText('Harness/specs/protocols/AGENT_ISOLATION.md', 'implementer', 'agent isolation implementer rule');
+requireText('Harness/specs/protocols/HARNESS_BRIDGE.md', 'Agent-Operable Web Runtime', 'harness bridge agent-operable runtime');
+requireText('Harness/specs/protocols/HARNESS_BRIDGE.md', 'Backend Broker Protocol', 'harness bridge backend broker protocol');
+requireText('Harness/specs/protocols/HARNESS_BRIDGE.md', 'Multi-Agent Window Contract', 'harness bridge multi-agent window contract');
+requireText('Harness/specs/protocols/HARNESS_BRIDGE.md', 'Artifact Workspace', 'harness bridge artifact workspace');
 requireText('Harness/specs/protocols/HARNESS_BRIDGE.md', 'Network Trace Collector', 'harness bridge network trace collector');
+requireText('Harness/wf-browser/README.md', 'Runtime Artifacts', 'wf-browser artifact workspace README');
+requireText('Harness/wf-browser/README.md', 'A write/control lease is exclusive per window', 'wf-browser artifact README lease rule');
+requireText('Harness/wf-browser/README.md', 'latest 20 runs or 7 days', 'wf-browser artifact README retention rule');
 requireText('Harness/specs/workflows/WF-AUTO.md', 'Intent Checkpoint', 'wf-auto intent checkpoint');
 requireText('Harness/specs/workflows/WF-AUTO.md', 'Adaptive Coverage Exhaustion Gate', 'wf-auto adaptive coverage exhaustion gate');
 requireText('Harness/specs/workflows/WF-AUTO.md', 'dynamic high-risk obligations', 'wf-auto dynamic high-risk obligations');
@@ -1550,9 +1579,14 @@ forbidText('Harness/scripts/wf-remove.mjs', '\uFFFD', 'replacement character in
 for (const marker of ['codebase-explorer', 'task-scribe', 'wf-agents-docs', 'wf-auto-spark']) {
   requireText('Harness/scripts/wf-remove.mjs', marker, `wf-remove built-in registry includes ${marker}`);
 }
-requireText('.claude/skills/wf-review/SKILL.md', 'opencode run --agent reviewer', 'wf-review OpenCode peer CLI path');
+requireText('.claude/skills/wf-review/SKILL.md', 'Harness-native review workflow', 'wf-review native runtime contract');
+requireText('.claude/skills/wf-review/SKILL.md', 'External CLI: forbidden', 'wf-review external CLI prohibition');
+requireText('.claude/skills/wf-review/SKILL.md', 'Spawn child agents: forbidden', 'wf-review recursion prohibition');
 requireText('.claude/skills/wf-review/SKILL.md', 'Role: reviewer', 'wf-review installed reviewer role fallback');
 requireText('.claude/skills/wf-review/SKILL.md', 'The main agent is the controller', 'wf-review controller final authority');
+for (const forbiddenReviewCli of ['claude -p', 'codex exec', 'opencode run']) {
+  forbidText('.claude/skills/wf-review/SKILL.md', forbiddenReviewCli, `wf-review must not invoke ${forbiddenReviewCli}`);
+}
 requireText('.claude/skills/wf-agents-docs/SKILL.md', 'claude -p --output-format json', 'wf-agents-docs Claude JSON CLI path');
 requireText('.claude/skills/wf-agents-docs/SKILL.md', 'codex exec --json', 'wf-agents-docs Codex JSONL CLI path');
 requireText('.claude/skills/wf-agents-docs/SKILL.md', 'opencode run --format json', 'wf-agents-docs OpenCode JSON CLI path');
@@ -1563,7 +1597,7 @@ requireText('.claude/skills/wf-agents-docs/SKILL.md', 'No Scratch-File Rule', 'w
 requireText('.claude/skills/wf-agents-docs/SKILL.md', 'Subagent Output Contract', 'wf-agents-docs subagent output contract');
 requireText('.claude/skills/wf-agents-docs/SKILL.md', 'Do not write CLI probe output under `%TEMP%`', 'wf-agents-docs temp pollution guard');
 requireText('Harness/README.md', 'Need peer CLI automation docs', 'Harness router peer CLI automation docs row');
-requireText('.opencode/commands/wf-review.md', 'peer-review contract', 'OpenCode wf-review wrapper peer-review contract');
+requireText('.opencode/commands/wf-review.md', 'native-only skill adapter', 'OpenCode wf-review native review contract');
 requireText('Harness/specs/runtime/subagents.md', 'For `/wf-review`, use the installed `reviewer` role', 'subagents wf-review role fallback');
 requireText('.claude/agents/tdd-guide.md', 'Browser Acceptance Rules', 'tdd-guide browser acceptance rules');
 requireText('.claude/agents/tdd-guide.md', 'real user actions', 'tdd-guide real user action requirement');
@@ -1658,14 +1692,32 @@ requireText('.claude/skills/wf-auto/SKILL.md', 'Harness/tasks/continuous/PROGRES
 requireText('.claude/skills/wf-auto/SKILL.md', 'evidence ledger path/summary', 'wf-auto skill return evidence ledger path');
 if (fs.existsSync(path.join(root, '.claude/skills/wf-browser/SKILL.md'))) {
   requireText('.claude/skills/wf-browser/SKILL.md', 'Cache Discipline', 'wf-browser skill cache discipline');
+  requireText('.claude/skills/wf-browser/SKILL.md', 'Two Jobs', 'wf-browser two-job design/control purpose');
+  requireText('.claude/skills/wf-browser/SKILL.md', 'Architecture design', 'wf-browser architecture design purpose');
+  requireText('.claude/skills/wf-browser/SKILL.md', 'Runtime control', 'wf-browser runtime control purpose');
+  requireText('.claude/skills/wf-browser/SKILL.md', 'Readiness Levels', 'wf-browser readiness levels');
+  requireText('.claude/skills/wf-browser/SKILL.md', 'L4 | Multi-agent-ready', 'wf-browser multi-agent readiness level');
+  requireText('.claude/skills/wf-browser/SKILL.md', 'Mode Selection', 'wf-browser mode selection');
+  requireText('.claude/skills/wf-browser/SKILL.md', 'Architecture Design Track', 'wf-browser architecture design track');
+  requireText('.claude/skills/wf-browser/SKILL.md', 'Runtime Control Track', 'wf-browser runtime control track');
+  requireText('.claude/skills/wf-browser/SKILL.md', 'Recovery Track', 'wf-browser recovery track');
+  requireText('.claude/skills/wf-browser/SKILL.md', 'Design-To-Control Continuity', 'wf-browser design-to-control continuity');
+  requireText('.claude/skills/wf-browser/SKILL.md', 'Quality Gates', 'wf-browser quality gates');
+  requireText('.claude/skills/wf-browser/SKILL.md', 'Agent-Operable Web Runtime', 'wf-browser agent-operable runtime');
   requireText('.claude/skills/wf-browser/SKILL.md', 'Browser Evidence Contract', 'wf-browser browser evidence contract');
-  requireText('.claude/skills/wf-browser/SKILL.md', 'Controllable UI Contract', 'wf-browser controllable UI contract');
-  requireText('.claude/skills/wf-browser/SKILL.md', 'Browser Use CLI', 'wf-browser current Browser Use CLI guidance');
-  requireText('.claude/skills/wf-browser/SKILL.md', 'browser-use --doctor', 'wf-browser Browser Use doctor command');
-  requireText('.claude/skills/wf-browser/SKILL.md', 'browser-use skill', 'wf-browser Browser Use skill command');
-  requireText('.claude/skills/wf-browser/SKILL.md', 'new_tab("https://example.com")', 'wf-browser Browser Use script-style example');
-  requireText('.claude/skills/wf-browser/SKILL.md', 'capture_screenshot', 'wf-browser Browser Use screenshot helper');
-  requireText('.claude/skills/wf-browser/SKILL.md', 'old `browser-use open/state/click/screenshot/input/wait` subcommands are removed', 'wf-browser removed old Browser Use subcommands');
+  requireText('.claude/skills/wf-browser/SKILL.md', 'Agent-Operable UI Contract', 'wf-browser agent-operable UI contract');
+  requireText('.claude/skills/wf-browser/SKILL.md', 'WebSocket', 'wf-browser WebSocket bridge guidance');
+  requireText('.claude/skills/wf-browser/SKILL.md', 'observe.*', 'wf-browser observation primitives');
+  requireText('.claude/skills/wf-browser/SKILL.md', 'act.*', 'wf-browser action primitives');
+  requireText('.claude/skills/wf-browser/SKILL.md', 'virtual cursor', 'wf-browser virtual cursor guidance');
+  requireText('.claude/skills/wf-browser/SKILL.md', 'Backend Broker', 'wf-browser backend broker guidance');
+  requireText('.claude/skills/wf-browser/SKILL.md', 'Multi-Agent Window Contract', 'wf-browser multi-agent window contract');
+  requireText('.claude/skills/wf-browser/SKILL.md', 'window.create', 'wf-browser window pool operations');
+  requireText('.claude/skills/wf-browser/SKILL.md', 'leaseId', 'wf-browser window lease identity');
+  requireText('.claude/skills/wf-browser/SKILL.md', 'Third-Party Pages', 'wf-browser third-party fallback guidance');
+  requireText('.claude/skills/wf-browser/SKILL.md', 'Harness/wf-browser/', 'wf-browser artifact workspace');
+  requireText('.claude/skills/wf-browser/SKILL.md', 'Playwright', 'wf-browser Playwright fallback');
+  requireText('.claude/skills/wf-browser/SKILL.md', 'CDP', 'wf-browser CDP fallback');
   requireText('.claude/skills/wf-browser/SKILL.md', 'data-testid', 'wf-browser data-testid guidance');
   requireText('.claude/skills/wf-browser/SKILL.md', 'accessible labels/roles', 'wf-browser accessible selector guidance');
   requireText('.claude/skills/wf-browser/SKILL.md', 'inputs, buttons, filters, rows, empty/error/loading states', 'wf-browser controllable UI coverage targets');
@@ -1697,6 +1749,7 @@ for (const rel of ['.claude/commands/wf-ui.md', '.opencode/commands/wf-ui.md'])
   requireText(rel, 'create-harness-vibe-coding wf-ui', `${rel} wf-ui direct CLI launch`);
   requireText(rel, '--host 127.0.0.1', `${rel} wf-ui loopback host`);
   requireText(rel, '--open', `${rel} wf-ui browser open flag`);
+  requireText(rel, '--detach', `${rel} wf-ui detached launch flag`);
   forbidText(rel, 'workflow command', `${rel} wf-ui workflow routing`);
   forbidText(rel, 'Load `CLAUDE.md`', `${rel} wf-ui old router preload`);
   forbidText(rel, 'Harness/tasks/task-wf-ui-control-0729/STATE.json', `${rel} wf-ui old task-state preload`);
@@ -1705,6 +1758,7 @@ for (const rel of ['.claude/skills/wf-ui/SKILL.md', '.agents/skills/wf-ui/SKILL.
   requireText(rel, 'Codex compatibility shim', `${rel} wf-ui Codex compatibility shim`);
   requireText(rel, 'direct command', `${rel} wf-ui direct command statement`);
   requireText(rel, 'create-harness-vibe-coding wf-ui', `${rel} wf-ui direct CLI launch`);
+  requireText(rel, '--detach', `${rel} wf-ui detached launch flag`);
   forbidText(rel, 'Harness/tasks/task-wf-ui-control-0729/STATE.json', `${rel} wf-ui old task-state preload`);
 }
 requireText('Harness/scripts/wf-update-check.mjs', 'releaseHighlights', 'wf-update-check release highlights metadata');
@@ -1826,7 +1880,6 @@ for (const row of rootTaskProgress.rows) {
   }
 }
-const activeStateTasks = [];
 for (const taskDir of outerTaskSet) {
   if (!rootTaskRows.has(taskDir)) {
     taskStateIssue(`Harness/tasks/${taskDir}/ is missing from Harness/PROGRESS.md Task Index`);
@@ -1857,17 +1910,6 @@ for (const taskDir of outerTaskSet) {
   if (state.phase && !phase) {
     taskStateIssue(`Harness/tasks/${taskDir}/STATE.json has unknown phase "${state.phase}"`);
   }
-  if (status === 'active') activeStateTasks.push(taskDir);
-  if (status === 'active' && taskDir !== rootTaskProgress.activeTask) {
-    taskStateIssue(`Harness/tasks/${taskDir}/STATE.json is active but Harness/PROGRESS.md Active Task is ${rootTaskProgress.activeTask || 'None'}; run node Harness/scripts/task-state.mjs reconcile --apply`);
-  }
-  if (taskDir === rootTaskProgress.activeTask && status && status !== 'active') {
-    taskStateIssue(`Harness/PROGRESS.md Active Task points to ${taskDir}, but STATE.json status is "${status}"; run node Harness/scripts/task-state.mjs reconcile --apply`);
-  }
-}
-if (activeStateTasks.length > 1) {
-  taskStateIssue(`Multiple STATE.json files are active: ${activeStateTasks.join(', ')}; run node Harness/scripts/task-state.mjs reconcile --apply`);
 }
 // Outer task capsule cap: keep Harness/tasks/ lean (see Harness/specs/protocols/TASK_ARCHIVE.md)

package/templates/common/Harness/scripts/wf-auto-update-prompt.mjs CHANGED Viewed

@@ -135,6 +135,23 @@ function isUpdateStatus(status) {
   return status === 'update-available' || status === 'partial-update';
 }
+// Patch-only updates (x.y.Z, third segment only) stay silent in hooks: they
+// are routine and would interrupt the user for no decision worth making.
+// Major (X.y.z) and minor (x.Y.z) releases still notify. Unparseable versions
+// fail open (notify) so real updates are never hidden by a parsing edge case.
+function isPatchOnlyUpdate(update) {
+  const from = semverSegments(update?.from || update?.version);
+  const to = semverSegments(update?.to || update?.remote);
+  if (!from || !to) return false;
+  return from[0] === to[0] && from[1] === to[1] && from[2] !== to[2];
+}
+function semverSegments(value) {
+  const match = String(value || '').match(/(\d+)\.(\d+)\.(\d+)/);
+  if (!match) return null;
+  return [Number(match[1]), Number(match[2]), Number(match[3])];
+}
 function buildMessage(update) {
   const from = update.from || update.version || 'unknown';
   const to = update.to || update.remote || 'unknown';
@@ -231,6 +248,13 @@ function main() {
     return;
   }
+  if (isPatchOnlyUpdate(update)) {
+    // Patch updates never prompt. Do not record noticedAt: a later minor or
+    // major release must still notify immediately.
+    emit('', { modeLabel, status: update.status, suppressed: 'patch-only' });
+    return;
+  }
   const shouldNotice = force
     || !cache.noticedAt
     || now - Date.parse(cache.noticedAt) >= noticeInterval

package/templates/common/Harness/scripts/wf-remove.mjs CHANGED Viewed

@@ -52,6 +52,7 @@ const USER_DATA_PATTERNS = [
   /^Harness\/PROGRESS\.md$/,
   /^Harness\/tasks\//,
   /^Harness\/memory\//,
+  /^Harness\/research\/search\//,
   /^Harness\/research\/PRD\.md$/,
   /^Harness\/research\/research-results\.md$/,
   /^Harness\/architecture\.md$/,
@@ -70,6 +71,7 @@ const PURGEABLE_HARNESS_DATA_PATTERNS = [
   /^Harness\/PROGRESS\.md$/,
   /^Harness\/tasks\//,
   /^Harness\/memory\//,
+  /^Harness\/research\/search\//,
   /^Harness\/research\/PRD\.md$/,
   /^Harness\/research\/research-results\.md$/,
   /^Harness\/architecture\.md$/,
@@ -152,12 +154,15 @@ const BUILT_IN_SKILL_NAMES = [
   'wf-task-archive',
   'wf-task-list',
   'wf-task-record',
+  'wf-search',
   'wf-ui',
+  'wf-init',
   'wf-update',
 ];
 const BUILT_IN_COMMAND_NAMES = [
   'wf',
+  'wf-init',
   'wf-auto',
   'wf-auto-spark',
   'wf-browser',
@@ -171,6 +176,7 @@ const BUILT_IN_COMMAND_NAMES = [
   'wf-task-archive',
   'wf-task-list',
   'wf-task-record',
+  'wf-search',
   'wf-ui',
   'wf-update',
 ];
@@ -218,8 +224,10 @@ const CLEANUP_DIRS = [
   '.claude/skills/wf-task-archive',
   '.claude/skills/wf-task-list',
   '.claude/skills/wf-task-record',
+  '.claude/skills/wf-search',
   '.claude/skills/wf-update',
   '.claude/skills/wf-ui',
+  '.claude/skills/wf-init',
   '.claude/skills/wf-remove',
   '.claude/skills/subagent-orchestrator',
   '.claude/skills',
@@ -242,8 +250,10 @@ const CLEANUP_DIRS = [
   '.agents/skills/wf-task-archive',
   '.agents/skills/wf-task-list',
   '.agents/skills/wf-task-record',
+  '.agents/skills/wf-search',
   '.agents/skills/wf-update',
   '.agents/skills/wf-ui',
+  '.agents/skills/wf-init',
   '.agents/skills/wf-remove',
   '.agents/skills/subagent-orchestrator',
   '.agents/skills',

package/templates/common/Harness/scripts/wf-search.mjs ADDED Viewed

@@ -0,0 +1,10 @@
+#!/usr/bin/env node
+import { readInput, renderResearchResult, resolveSaveTarget, validateResearchResult } from './lib/wf-search.mjs';
+const HELP = `wf-search helper (stateless)\n\nUsage:\n  node Harness/scripts/wf-search.mjs validate --input <file>|- [--json]\n  node Harness/scripts/wf-search.mjs render --input <file>|-\n  node Harness/scripts/wf-search.mjs resolve-save-target --project <root> [--task <id>] --id <report-id> [--json]\n\nThe helper performs no network access and writes no files.`;
+const COMMANDS = new Set(['validate', 'render', 'resolve-save-target']);
+function output(payload) { process.stdout.write(`${JSON.stringify(payload, null, 2)}\n`); }
+function fail(message, code = 'WFR-CLI001') { output({ ok: false, errors: [{ code, path: '$', message }], warnings: [], summary: { overBudget: false } }); process.exitCode = 1; }
+function parse(argv) { const args = { _: [] }; for (let i = 0; i < argv.length; i += 1) { const token = argv[i]; if (token === '--help' || token === '-h') { args.help = true; continue; } if (!token.startsWith('--')) { args._.push(token); continue; } const key = token.slice(2); if (key === 'json') { args.json = true; continue; } if (['input', 'project', 'task', 'id'].includes(key)) { if (!argv[i + 1] || argv[i + 1].startsWith('--')) throw new Error(`--${key} requires a value`); args[key] = argv[++i]; continue; } throw new Error(`unknown option: --${key}`); } return args; }
+ function main() { let args; try { args = parse(process.argv.slice(2)); } catch (error) { fail(error.message); return; } if (args.help || args._[0] === undefined) { process.stdout.write(`${HELP}\n`); return; } const command = args._[0]; if (!COMMANDS.has(command)) { fail(`unknown command: ${command}`); return; } if (args._.length > 1) { fail(`unexpected argument: ${args._[1]}`); return; } if (command === 'render' && args.json) { fail('unknown option: --json'); return; } try { if (command === 'resolve-save-target') { output({ ok: true, ...resolveSaveTarget({ project: args.project, task: args.task, id: args.id }) }); return; } const checked = validateResearchResult(readInput(args.input)); if (command === 'validate') { output({ ok: checked.ok, errors: checked.errors, warnings: checked.warnings, summary: checked.summary, result: checked.normalized }); if (!checked.ok) process.exitCode = 1; return; } if (!checked.ok) { output({ ok: false, errors: checked.errors, warnings: checked.warnings, summary: checked.summary }); process.exitCode = 1; return; } process.stdout.write(renderResearchResult(checked.normalized)); } catch (error) { const code = typeof error?.code === 'string' && /^WFR-/.test(error.code) ? error.code : 'WFR-CLI002'; fail(error.message || String(error), code); } }
+main();