create-harness-vibe-coding 0.8.4 → 0.8.5

package/package.json

@@ -1,6 +1,6 @@
 {
   "name": "create-harness-vibe-coding",
-  "version": "0.8.4",
+  "version": "0.8.5",
   "description": "Scaffold a 0-1 product harness for AI-assisted research, PRD, planning, architecture, build, test, and feedback loops",
   "type": "module",
   "bin": {

package/templates/common/.claude/skills/wf-remove/SKILL.md

@@ -1,14 +1,17 @@
----
-name: wf-remove
-description: Use for /wf-remove in Claude Code, $wf-remove or /skills wf-remove in Codex, or any request to uninstall Harness safely.
----
-
-# WF Remove Adapter
-
+---
+name: wf-remove
+description: Use for /wf-remove in Claude Code, $wf-remove or /skills wf-remove in Codex, or any request to uninstall Harness safely.
+---
+
+# WF Remove Adapter
+
 ## Invocation
 
 - Claude Code: use `/wf-remove` or select the `wf-remove` skill.
 - Codex CLI or IDE: use `$wf-remove` or `/skills` then choose `wf-remove`.
+- User-facing removal is the slash/skill command. The Node commands below are
+  agent-internal execution steps; do not ask the user to copy/paste them unless
+  the agent has no shell/tool access.
 
 ## Load
 
@@ -17,21 +20,31 @@ description: Use for /wf-remove in Claude Code, $wf-remove or /skills wf-remove
 
 ## Flow
 
-1. Run `node Harness/scripts/wf-remove.mjs --json` for the machine-readable
-   plan.
-2. Auto-remove only SAFE files that still match stored checksums.
+1. On plain `/wf-remove`, run `node Harness/scripts/wf-remove.mjs --json` for
+   the machine-readable plan, then run the safe default apply command yourself.
+2. Auto-remove only SAFE files that still match stored checksums or exact
+   built-in Harness discovery files recognized by the script.
 3. Ask the user before every MODIFIED or uncertain file.
 4. Preserve USER DATA by default. For an explicit thorough uninstall, use
    `--purge-user-data` (alias `--purge`); add `--keep-tasks` when the user wants task records
    retained while project-fact Harness docs are removed.
-5. Run the script, not manual deletes:
+5. Run the script yourself, not manual deletes and not user-side command copy:
    - safe default: `node Harness/scripts/wf-remove.mjs --apply --yes`
    - thorough but keep tasks: `node Harness/scripts/wf-remove.mjs --apply --yes --purge-user-data --keep-tasks`
    - exact modified decisions: add `--delete-modified <path>` for each
      user-approved MODIFIED file.
+6. After apply, verify residual discovery folders:
+   - `.claude/agents`
+   - `.claude/skills`
+   - `.claude/commands`
+   - `.claude/rules`
+   - `.agents/skills`
+   - `.codex`
+   Built-in Harness files in these locations should be gone. Custom user skills
+   or user-owned files may remain and must be reported, not blindly deleted.
 
 ## Return
 
 Report SAFE removals, MODIFIED keep/delete decisions, preserved USER DATA,
-PURGE removals, directory cleanup, CLAUDE/AGENTS status, `.harness-version`
-status, and `git status` guidance.
+PURGE removals, directory cleanup, `.claude` / `.agents` / `.codex` residual
+status, `.harness-version` status, and `git status` guidance.

package/templates/common/.harness-version

@@ -1,6 +1,6 @@
 {
-  "generator": "0.8.4",
-  "generated": "2026-07-02T09:50:07.142Z",
+  "generator": "0.8.5",
+  "generated": "2026-07-02T10:09:05.492Z",
   "options": [],
   "autoCheck": true,
   "source": "https://raw.githubusercontent.com/zingspark/create-harness-vibe-coding/main/templates/common/",
@@ -12,7 +12,7 @@
     ".agents/skills/wf-learn/SKILL.md": "sha256-7f3e1ee0aa83cbb76707698d0c26b703ad5c74b2df95a7dc4d751939a4ba05b2",
     ".agents/skills/wf-max/SKILL.md": "sha256-9b37cc3385f6d1a285b617169e91fbf71ffec76135b7b46ec1de2fe94ca220da",
     ".agents/skills/wf-readme/SKILL.md": "sha256-4d34ee3b6b305fa2581f5d8cb31e9152759f3df8bf8fa08efbb43782f128bdcd",
-    ".agents/skills/wf-remove/SKILL.md": "sha256-f27aee81d4d6988186f468ccc5dfd02c7605967636a5aea93d92443e030dbcc2",
+    ".agents/skills/wf-remove/SKILL.md": "sha256-21ebef1a1fa8645d094c8ceeca78b33f036b6c42cda6db8be425d38d9e91af75",
     ".agents/skills/wf-review/SKILL.md": "sha256-cc6d536ec6de25546a0ba96e686f195da50ed11bc03763a76ef46d77243d3537",
     ".agents/skills/wf-update/SKILL.md": "sha256-d57cd89e271b2af63b6a1264af552a30f8d44959cf4782b42f0ab082a90be9cf",
     ".agents/skills/wf/SKILL.md": "sha256-70766bd2cb02bc489b5cc021797af62596a005d444a026abb511054a1a820a67",
@@ -42,7 +42,7 @@
     ".claude/skills/wf-learn/SKILL.md": "sha256-7f3e1ee0aa83cbb76707698d0c26b703ad5c74b2df95a7dc4d751939a4ba05b2",
     ".claude/skills/wf-max/SKILL.md": "sha256-9b37cc3385f6d1a285b617169e91fbf71ffec76135b7b46ec1de2fe94ca220da",
     ".claude/skills/wf-readme/SKILL.md": "sha256-4d34ee3b6b305fa2581f5d8cb31e9152759f3df8bf8fa08efbb43782f128bdcd",
-    ".claude/skills/wf-remove/SKILL.md": "sha256-f27aee81d4d6988186f468ccc5dfd02c7605967636a5aea93d92443e030dbcc2",
+    ".claude/skills/wf-remove/SKILL.md": "sha256-21ebef1a1fa8645d094c8ceeca78b33f036b6c42cda6db8be425d38d9e91af75",
     ".claude/skills/wf-review/SKILL.md": "sha256-cc6d536ec6de25546a0ba96e686f195da50ed11bc03763a76ef46d77243d3537",
     ".claude/skills/wf-update/SKILL.md": "sha256-d57cd89e271b2af63b6a1264af552a30f8d44959cf4782b42f0ab082a90be9cf",
     ".claude/skills/wf/SKILL.md": "sha256-70766bd2cb02bc489b5cc021797af62596a005d444a026abb511054a1a820a67",
@@ -70,8 +70,8 @@
     "Harness/lifecycle.md": "sha256-a2d025e52f3b4412d8439083aca0d2cf7a4458ad0e30de4fc6465f990379190f",
     "Harness/research/README.md": "sha256-956c154df01cb9376972eb8b88bb3be0fe4e2dda802a72457c0126e3476fa755",
     "Harness/scripts/scan-clean.mjs": "sha256-7f693faf762c9c8e7657143d651f7c8369ed4823f18babe21daec58a55025593",
-    "Harness/scripts/validate-harness.mjs": "sha256-e584959476265d53408484ec3653dd652a0f64922c785db97f0638c26f19e04c",
-    "Harness/scripts/wf-remove.mjs": "sha256-4eb136ab26a9e20a949835e8cc6ff716b4beb3496c81ae3a4c03c049db60895c",
+    "Harness/scripts/validate-harness.mjs": "sha256-31dc33729034656d24ec163ff310164e2fc77289212b2278ab4a2f3d4b9294dc",
+    "Harness/scripts/wf-remove.mjs": "sha256-944e5da9dc1abcfb8f410bca743c3f5fbee2bc74d09b97e04ceaaf53da0cb9f1",
     "Harness/scripts/wf-update-check.mjs": "sha256-d14ce08f4c05ba118362a56a4b7d5965b114bc2b15a023c08e21d57f32b2cf93",
     "Harness/subagents.md": "sha256-16255092bab9011bb67359b4399d27ab292c14a717e67123e8a76e40e8669661",
     "Harness/templates/ACCEPTANCE.template.md": "sha256-394a6c08b155b1d121f1d51da774f7988bdb891224c6d5f2ca2c131e8c95ffb3",

package/templates/common/scripts/validate-harness.mjs

@@ -541,6 +541,9 @@ requireText('Harness/templates/TEST_PLAN.template.md', 'syntax-only checks', 'te
 requireText('.claude/skills/tdd/SKILL.md', 'Harness/ACCEPTANCE_PROTOCOL.md', 'tdd skill loads acceptance protocol');
 requireText('.claude/skills/tdd/SKILL.md', 'Harness/HARNESS_BRIDGE.md', 'tdd skill loads harness bridge');
 requireText('.claude/skills/tdd/SKILL.md', 'No syntax-only acceptance', 'tdd skill forbids syntax-only acceptance');
+requireText('.claude/skills/wf-remove/SKILL.md', 'User-facing removal is the slash/skill command', 'wf-remove slash command is user-facing');
+requireText('.claude/skills/wf-remove/SKILL.md', 'agent-internal execution steps', 'wf-remove script commands are agent-internal');
+requireText('.claude/skills/wf-remove/SKILL.md', 'verify residual discovery folders', 'wf-remove residual discovery verification');
 requireText('.claude/agents/tdd-guide.md', 'Browser Acceptance Rules', 'tdd-guide browser acceptance rules');
 requireText('.claude/agents/tdd-guide.md', 'real user actions', 'tdd-guide real user action requirement');
 requireText('.claude/agents/test-writer.md', 'Harness/ACCEPTANCE_PROTOCOL.md', 'test-writer loads acceptance protocol');

package/templates/common/scripts/wf-remove.mjs

@@ -1,11 +1,11 @@
 #!/usr/bin/env node
 /**
- * wf-remove.mjs — Safely remove Harness framework files.
+ * wf-remove.mjs �?Safely remove Harness framework files.
  *
  * Classifies all Harness-owned files into:
- *   SAFE     — framework files matching stored checksums → auto-remove
- *   MODIFIED — framework files edited by user → MUST confirm
- *   USER     — user data files → NEVER remove
+ *   SAFE     �?framework files matching stored checksums �?auto-remove
+ *   MODIFIED �?framework files edited by user �?MUST confirm
+ *   USER     �?user data files �?NEVER remove
  *
  * Usage:
  *   node Harness/scripts/wf-remove.mjs                    # dry-run: show plan
@@ -23,12 +23,12 @@ import { resolve, dirname, join, sep } from 'path';
 import { fileURLToPath } from 'url';
 import { createInterface } from 'readline';
 
-const __dirname = dirname(fileURLToPath(import.meta.url));
+const SCRIPT_FILE = fileURLToPath(import.meta.url);
+const __dirname = dirname(SCRIPT_FILE);
+const SCRIPT_ROOT = resolve(__dirname, '..', '..');
 const ROOT = process.env.WF_ROOT
   ? resolve(process.env.WF_ROOT)
-  : (existsSync(resolve(process.cwd(), 'Harness', '.harness-version'))
-    ? process.cwd()
-    : resolve(__dirname, '..', '..'));
+  : SCRIPT_ROOT;
 const VERSION_FILE = resolve(ROOT, 'Harness', '.harness-version');
 
 // ── Classification ─────────────────────────────────────────────────
@@ -45,7 +45,7 @@ const HARNESS_PREFIXES = [
   'tests/.gitkeep',
 ];
 
-/** Files the user owns — NEVER remove. Consistent with wf-update-check PRESERVE_PATTERNS. */
+/** Files the user owns �?NEVER remove. Consistent with wf-update-check PRESERVE_PATTERNS. */
 const USER_DATA_PATTERNS = [
   /^Harness\/PROGRESS\.md$/,
   /^Harness\/tasks\//,
@@ -97,14 +97,67 @@ function isPurgeableHarnessData(file, { keepTasks }) {
   if (keepTasks && /^Harness\/tasks\//.test(file) && !isFrameworkTaskFile(file)) return false;
   return PURGEABLE_HARNESS_DATA_PATTERNS.some(p => p.test(file));
 }
-
-/** Framework files that should always exist (not part of removal). */
-const KEEP_FRAMEWORK = new Set([
-  'Harness/.harness-version',
-]);
-
-/** Directories to clean up if empty after file removal. */
-const CLEANUP_DIRS = [
+
+/** Framework files that should always exist (not part of removal). */
+const KEEP_FRAMEWORK = new Set([
+  'Harness/.harness-version',
+]);
+
+const BUILT_IN_AGENT_NAMES = [
+  'architect-manager',
+  'architect',
+  'context-master',
+  'debugger',
+  'docs-researcher',
+  'explore-manager',
+  'implement-manager',
+  'implementer',
+  'memory-master',
+  'planner',
+  'researcher',
+  'review-manager',
+  'reviewer',
+  'tdd-guide',
+  'test-writer',
+  'verifier',
+];
+
+const BUILT_IN_SKILL_NAMES = [
+  'browser-e2e',
+  'github-pr-review',
+  'python-backend',
+  'subagent-orchestrator',
+  'tdd',
+  'ts-react-frontend',
+  'ui-ux-review',
+  'wf',
+  'wf-auto',
+  'wf-auto-spark',
+  'wf-browser',
+  'wf-learn',
+  'wf-max',
+  'wf-readme',
+  'wf-remove',
+  'wf-review',
+  'wf-update',
+];
+
+const KNOWN_FRAMEWORK_FILES = new Set([
+  ...BUILT_IN_AGENT_NAMES.map(name => `.claude/agents/${name}.md`),
+  ...BUILT_IN_SKILL_NAMES.flatMap(name => [
+    `.claude/skills/${name}/SKILL.md`,
+    `.agents/skills/${name}/SKILL.md`,
+  ]),
+  '.claude/commands/wf-help.md',
+  '.claude/rules/ecc/common.md',
+]);
+
+function isKnownFrameworkFile(file) {
+  return KNOWN_FRAMEWORK_FILES.has(file);
+}
+
+/** Directories to clean up if empty after file removal. */
+const CLEANUP_DIRS = [
   '.claude/agents',
   '.claude/skills/wf-auto',
   '.claude/skills/wf-browser',
@@ -251,7 +304,7 @@ function removeEmptyDirs(startDir) {
 
 async function askUser(question) {
   if (!process.stdin.isTTY) {
-    console.log('   (non-interactive — defaulting to KEEP)');
+    console.log('   (non-interactive �?defaulting to KEEP)');
     return 'k';
   }
   const rl = createInterface({ input: process.stdin, output: process.stdout });
@@ -300,8 +353,9 @@ async function main() {
     addFilesUnder(allFiles, dir, scanIssues);
   }
 
-  // Add framework files that might not be in checksums (newer additions)
+  // Add framework files that might not be in checksums (newer additions)
   const extraPatterns = [
+    ...KNOWN_FRAMEWORK_FILES,
     '.claude/skills/wf/SKILL.md',
     '.agents/skills/wf/SKILL.md',
     '.claude/skills/tdd/SKILL.md',
@@ -323,9 +377,9 @@ async function main() {
   }
 
   // 2. Classify every file
-  const safe = [];     // SAFE — matches checksum, auto-remove
-  const modified = []; // MODIFIED — user edited, must confirm
-  const user = [];     // USER — never remove
+  const safe = [];     // SAFE �?matches checksum, auto-remove
+  const modified = []; // MODIFIED �?user edited, must confirm
+  const user = [];     // USER �?never remove
   const skipped = [];  // File not on disk, traversal rejected, or framework-keep
   const purge = [];    // Explicitly requested Harness user-data removal
   skipped.push(...scanIssues);
@@ -347,13 +401,13 @@ async function main() {
         });
         continue;
       }
-      user.push({ file, reason: 'user data — NEVER removed' });
+      user.push({ file, reason: 'user data �?NEVER removed' });
       continue;
     }
 
     // Only allow deletion of files under harness-owned prefixes
     if (!isHarnessOwned(canonical)) {
-      user.push({ file, reason: 'outside harness prefix — NEVER removed' });
+      user.push({ file, reason: 'outside harness prefix �?NEVER removed' });
       continue;
     }
 
@@ -366,15 +420,24 @@ async function main() {
       skipped.push({ file, reason: 'not on disk' });
       continue;
     }
-
-    const currentHash = sha256File(diskPath);
-    const storedHash = storedChecksums[file];
-
-    if (!storedHash) {
-      modified.push({ file, currentHash, storedHash: 'none', reason: 'not in checksums' });
-    } else if (currentHash === storedHash) {
-      safe.push({ file, currentHash, storedHash });
-    } else {
+
+    const currentHash = sha256File(diskPath);
+    const storedHash = storedChecksums[file];
+
+    if (!storedHash) {
+      if (isKnownFrameworkFile(canonical)) {
+        safe.push({
+          file,
+          currentHash,
+          storedHash: currentHash,
+          reason: 'known framework file missing from legacy checksums',
+        });
+      } else {
+        modified.push({ file, currentHash, storedHash: 'none', reason: 'not in checksums' });
+      }
+    } else if (currentHash === storedHash) {
+      safe.push({ file, currentHash, storedHash });
+    } else {
       modified.push({ file, currentHash, storedHash, reason: 'user modified' });
     }
   }
@@ -385,7 +448,7 @@ async function main() {
     const settingsHash = sha256File(settingsFile);
     const storedSettingsHash = storedChecksums['.claude/settings.json'];
     if (storedSettingsHash && settingsHash !== storedSettingsHash) {
-      // User modified settings — move to modified
+      // User modified settings �?move to modified
       // Remove from safe if it was there
       const idx = safe.findIndex(s => s.file === '.claude/settings.json');
       if (idx >= 0) {
@@ -429,16 +492,16 @@ async function main() {
     return;
   }
 
-  console.log('\n🧹 WF-REMOVE — Harness framework removal plan\n');
+  console.log('\n🧹 WF-REMOVE �?Harness framework removal plan\n');
 
   if (safe.length > 0) {
-    console.log(`✅ SAFE (${safe.length} files — auto-remove, unmodified framework):`);
-    for (const s of safe) console.log(`   ✕ ${s.file}`);
+    console.log(`�?SAFE (${safe.length} files �?auto-remove, unmodified framework):`);
+    for (const s of safe) console.log(`   �?${s.file}`);
     console.log('');
   }
 
   if (modified.length > 0) {
-    console.log(`⚠ MODIFIED (${modified.length} files — REQUIRE CONFIRMATION):`);
+    console.log(`�?MODIFIED (${modified.length} files �?REQUIRE CONFIRMATION):`);
     for (const m of modified) {
       console.log(`   ? ${m.file}  [${m.reason}]`);
     }
@@ -446,8 +509,8 @@ async function main() {
   }
 
   if (user.length > 0) {
-    console.log(`🔒 USER DATA (${user.length} files — NEVER removed):`);
-    for (const u of user) console.log(`   ○ ${u.file}  [${u.reason}]`);
+    console.log(`🔒 USER DATA (${user.length} files �?NEVER removed):`);
+    for (const u of user) console.log(`   �?${u.file}  [${u.reason}]`);
     console.log('');
   }
 
@@ -464,17 +527,17 @@ async function main() {
     return;
   }
 
-  // 4. Apply — remove SAFE files automatically (rehash before unlink)
+  // 4. Apply �?remove SAFE files automatically (rehash before unlink)
   let safeRemoved = 0;
   let safeFailed = 0;
   for (const s of safe) {
     const diskPath = safePath(s.file);
-    if (!diskPath) { console.error(`   ✗ Traversal rejected: ${s.file}`); safeFailed++; continue; }
+    if (!diskPath) { console.error(`   �?Traversal rejected: ${s.file}`); safeFailed++; continue; }
     if (!existsSync(diskPath)) continue;
     // Re-verify hash hasn't changed since classification
     const currentHash = sha256File(diskPath);
     if (currentHash !== s.storedHash) {
-      console.log(`   ⊘ Skipped (modified since classification): ${s.file}`);
+      console.log(`   �?Skipped (modified since classification): ${s.file}`);
       safeFailed++;
       continue;
     }
@@ -482,13 +545,13 @@ async function main() {
       unlinkSync(diskPath);
       safeRemoved++;
     } catch (e) {
-      console.error(`   ✗ Failed to remove: ${s.file} — ${e.message}`);
+      console.error(`   �?Failed to remove: ${s.file} �?${e.message}`);
       safeFailed++;
     }
   }
-  console.log(`✓ Removed ${safeRemoved} safe files.`);
+  console.log(`�?Removed ${safeRemoved} safe files.`);
 
-  // 5. Handle MODIFIED files — prompt user
+  // 5. Handle MODIFIED files �?prompt user
   let modifiedRemoved = 0;
   let modifiedKept = 0;
   let modifiedFailed = 0;
@@ -508,7 +571,7 @@ async function main() {
     }
     if (yes) {
       // Non-interactive mode: skip all modified
-      console.log(`   ⊘ Skipped (modified): ${m.file}`);
+      console.log(`   �?Skipped (modified): ${m.file}`);
       modifiedKept++;
       continue;
     }
@@ -520,17 +583,17 @@ async function main() {
     const answer = await askUser('   Choose [d/k]: ');
     if (answer === 'd' || answer === 'delete') {
       const diskPath = safePath(m.file);
-      if (!diskPath) { console.error(`   ✗ Traversal rejected: ${m.file}`); modifiedFailed++; continue; }
+      if (!diskPath) { console.error(`   �?Traversal rejected: ${m.file}`); modifiedFailed++; continue; }
       try {
         unlinkSync(diskPath);
-        console.log(`   ✓ Deleted: ${m.file}`);
+        console.log(`   �?Deleted: ${m.file}`);
         modifiedRemoved++;
       } catch (e) {
-        console.error(`   ✗ Failed: ${m.file} — ${e.message}`);
+        console.error(`   �?Failed: ${m.file} �?${e.message}`);
         modifiedFailed++;
       }
     } else {
-      console.log(`   ⊘ Kept: ${m.file}`);
+      console.log(`   �?Kept: ${m.file}`);
       modifiedKept++;
     }
   }
@@ -591,7 +654,7 @@ async function main() {
       }
     } else if (!existsSync(harPath) || (existsSync(harPath) && readdirSync(harPath).filter(f => f !== '.harness-version').length === 0)) {
       unlinkSync(VERSION_FILE);
-      console.log('✓ Removed .harness-version (Harness directory empty).');
+      console.log('�?Removed .harness-version (Harness directory empty).');
     }
   }
 
@@ -610,7 +673,7 @@ async function main() {
     if (pruned > 0) {
       versionData.checksums = checksums;
       writeFileSync(VERSION_FILE, JSON.stringify(versionData, null, 2) + '\n', 'utf-8');
-      console.log(`✓ Pruned ${pruned} stale checksum(s) from .harness-version.`);
+      console.log(`�?Pruned ${pruned} stale checksum(s) from .harness-version.`);
     }
   }
 
@@ -624,7 +687,7 @@ async function main() {
         // Strip the harness section: everything from "## 1. Harness Binding" to the next "## "
         const cleaned = content.replace(/## 1\. Harness Binding[\s\S]*?(?=## 2\.)/, '');
         writeFileSync(claudePath, cleaned, 'utf-8');
-        console.log('✓ Stripped Harness binding section from CLAUDE.md.');
+        console.log('�?Stripped Harness binding section from CLAUDE.md.');
       }
     }
   }