harnery 0.46.1 → 0.47.0

package/dist/lib/headless/index.js

@@ -26,6 +26,11 @@
  *   PATH" is not "working", and under parallel load the first backend can
  *   flake on a fraction of calls while the second runs clean.
  *
+ * - A claude-code call loads NO MCP servers and no claude.ai connectors by
+ *   default (`claudeMcpLaunch`). Connectors attach about 130 tool schemas to
+ *   every turn of a one-shot call that never uses them; a caller that needs
+ *   one opts in per request with `mcp: "inherit"` or an explicit server map.
+ *
  * Env knobs (read through coordEnv, so the HARNERY_ prefix stays in one
  * place): HARNERY_HEADLESS_BACKEND forces one backend and disables the
  * fallback walk; HARNERY_HEADLESS_MODEL overrides the model passed to
@@ -38,6 +43,33 @@ import { delimiter, isAbsolute, join } from "node:path";
 import { promisify } from "node:util";
 import { coordEnv } from "../env.js";
 const execFileAsync = promisify(execFile);
+/** The two guards that keep a `claude` child free of MCP servers: strict MCP
+ * config with an empty server map, plus the env switch that stops claude.ai
+ * connectors attaching mid-session (the flag alone does not cover them). */
+export const CLAUDE_NO_MCP_ARGS = [
+    "--strict-mcp-config",
+    "--mcp-config",
+    '{"mcpServers":{}}',
+];
+export const CLAUDE_NO_CONNECTORS_ENV = {
+    ENABLE_CLAUDEAI_MCP_SERVERS: "false",
+};
+/** Resolve an MCP mode to the argv and env additions for a `claude` child.
+ * Throws on a malformed server map rather than launching with a guess. */
+export function claudeMcpLaunch(mode = "none") {
+    if (mode === "inherit")
+        return { args: [], env: {} };
+    if (mode === "none")
+        return { args: [...CLAUDE_NO_MCP_ARGS], env: { ...CLAUDE_NO_CONNECTORS_ENV } };
+    const servers = mode?.mcpServers;
+    if (!servers || typeof servers !== "object" || Array.isArray(servers)) {
+        throw new Error('mcp must be "none", "inherit", or { mcpServers: { <name>: <server config> } }');
+    }
+    return {
+        args: ["--strict-mcp-config", "--mcp-config", JSON.stringify({ mcpServers: servers })],
+        env: { ...CLAUDE_NO_CONNECTORS_ENV },
+    };
+}
 const MAX_BUFFER = 32 * 1024 * 1024;
 const DEFAULT_TIMEOUT_MS = 240_000;
 const DEFAULT_MAX_TURNS = 4;
@@ -90,15 +122,17 @@ function stageCall(req) {
         model: coordEnv("HEADLESS_MODEL") ?? req.model,
         timeoutMs: req.timeoutMs ?? DEFAULT_TIMEOUT_MS,
         maxTurns: req.maxTurns ?? DEFAULT_MAX_TURNS,
+        ...(req.mcp ? { mcp: req.mcp } : {}),
     };
 }
 /** Run a harness CLI from the neutral dir with stdin CLOSED (see module
  * comment: an open stdin pipe deadlocks codex). */
-function execHarness(bin, args, call) {
+function execHarness(bin, args, call, extraEnv = {}) {
     const pending = execFileAsync(bin, args, {
         cwd: call.dir,
         timeout: call.timeoutMs,
         maxBuffer: MAX_BUFFER,
+        ...(Object.keys(extraEnv).length ? { env: { ...process.env, ...extraEnv } } : {}),
     });
     pending.child.stdin?.end();
     return pending;
@@ -114,7 +148,9 @@ async function runClaudeCode(bin, call) {
         args.push("--allowedTools", "Read");
     if (call.model)
         args.push("--model", call.model);
-    const { stdout } = await execHarness(bin, args, call);
+    const mcp = claudeMcpLaunch(call.mcp);
+    args.push(...mcp.args);
+    const { stdout } = await execHarness(bin, args, call, mcp.env);
     const envelope = JSON.parse(stdout);
     if (envelope.is_error) {
         throw new Error(typeof envelope.result === "string" ? envelope.result : "claude-code: headless error");

package/dist/lib/http/client.d.ts

@@ -44,15 +44,6 @@ export interface FetchOptions<TResponseType extends FetchResponseType = "text">
     extraCookies?: ExtraCookies;
     /** Response body representation. Default `text`; use `bytes` for lossless file output. */
     responseType?: TResponseType;
-    /**
-     * With `redirect: "follow"`, follow redirects in this client instead of the
-     * runtime's fetch. Every hop then gets its own cookie header, `extraHeaders`
-     * call, and Set-Cookie persistence, so a caller that inspects those can stop
-     * a chain between hops. Credential headers are dropped on a cross-origin hop.
-     * Default: on whenever a `jar` is passed (host-only cookies must follow the
-     * jar's exact-host rule on every hop), off without one.
-     */
-    clientRedirects?: boolean;
 }
 type FetchBody<TResponseType extends FetchResponseType> = TResponseType extends "bytes" ? Uint8Array : string;
 export interface FetchResult<TBody = string> {
@@ -64,6 +55,8 @@ export interface FetchResult<TBody = string> {
     /** Number of cookies persisted back into the jar (0 if no jar passed). */
     cookiesSaved: number;
 }
+/** Caller headers that survive a redirect to a different origin (lowercase). */
+export declare const CROSS_ORIGIN_REDIRECT_HEADERS: ReadonlySet<string>;
 export declare function fetchWithJar<TResponseType extends FetchResponseType = "text">(url: string, opts?: FetchOptions<TResponseType>): Promise<FetchResult<FetchBody<TResponseType>>>;
 export {};
 //# sourceMappingURL=client.d.ts.map

package/dist/lib/http/client.d.ts.map

@@ -1 +1 @@
-{"version":3,"file":"client.d.ts","sourceRoot":"","sources":["../../../src/lib/http/client.ts"],"names":[],"mappings":"AAAA,OAAO,EAGL,KAAK,SAAS,EAEd,KAAK,YAAY,EAElB,MAAM,qBAAqB,CAAC;AAE7B;;;;;;;;;GASG;AAEH,MAAM,MAAM,iBAAiB,GAAG,MAAM,GAAG,OAAO,CAAC;AAEjD,MAAM,WAAW,YAAY,CAAC,aAAa,SAAS,iBAAiB,GAAG,MAAM;IAC5E,gCAAgC;IAChC,MAAM,CAAC,EAAE,MAAM,CAAC;IAChB,4EAA4E;IAC5E,IAAI,CAAC,EAAE,QAAQ,GAAG,IAAI,CAAC;IACvB,qDAAqD;IACrD,OAAO,CAAC,EAAE,MAAM,CAAC,MAAM,EAAE,MAAM,CAAC,CAAC;IACjC;;;;;OAKG;IACH,GAAG,CAAC,EAAE,SAAS,GAAG,IAAI,CAAC;IACvB,mEAAmE;IACnE,QAAQ,CAAC,EAAE,eAAe,CAAC;IAC3B,8CAA8C;IAC9C,MAAM,CAAC,EAAE,WAAW,CAAC;IACrB;;;;;;OAMG;IACH,YAAY,CAAC,EAAE,CAAC,GAAG,EAAE,MAAM,KAAK,MAAM,CAAC,MAAM,EAAE,MAAM,CAAC,CAAC;IACvD;;;;OAIG;IACH,YAAY,CAAC,EAAE,YAAY,CAAC;IAC5B,0FAA0F;IAC1F,YAAY,CAAC,EAAE,aAAa,CAAC;IAC7B;;;;;;;OAOG;IACH,eAAe,CAAC,EAAE,OAAO,CAAC;CAC3B;AAED,KAAK,SAAS,CAAC,aAAa,SAAS,iBAAiB,IAAI,aAAa,SAAS,OAAO,GACnF,UAAU,GACV,MAAM,CAAC;AAEX,MAAM,WAAW,WAAW,CAAC,KAAK,GAAG,MAAM;IACzC,MAAM,EAAE,MAAM,CAAC;IACf,UAAU,EAAE,MAAM,CAAC;IACnB,GAAG,EAAE,MAAM,CAAC;IACZ,OAAO,EAAE,MAAM,CAAC,MAAM,EAAE,MAAM,CAAC,CAAC;IAChC,IAAI,EAAE,KAAK,CAAC;IACZ,0EAA0E;IAC1E,YAAY,EAAE,MAAM,CAAC;CACtB;AAaD,wBAAsB,YAAY,CAAC,aAAa,SAAS,iBAAiB,GAAG,MAAM,EACjF,GAAG,EAAE,MAAM,EACX,IAAI,GAAE,YAAY,CAAC,aAAa,CAAM,GACrC,OAAO,CAAC,WAAW,CAAC,SAAS,CAAC,aAAa,CAAC,CAAC,CAAC,CAsChD"}
+{"version":3,"file":"client.d.ts","sourceRoot":"","sources":["../../../src/lib/http/client.ts"],"names":[],"mappings":"AAAA,OAAO,EAGL,KAAK,SAAS,EAEd,KAAK,YAAY,EAElB,MAAM,qBAAqB,CAAC;AAE7B;;;;;;;;;GASG;AAEH,MAAM,MAAM,iBAAiB,GAAG,MAAM,GAAG,OAAO,CAAC;AAEjD,MAAM,WAAW,YAAY,CAAC,aAAa,SAAS,iBAAiB,GAAG,MAAM;IAC5E,gCAAgC;IAChC,MAAM,CAAC,EAAE,MAAM,CAAC;IAChB,4EAA4E;IAC5E,IAAI,CAAC,EAAE,QAAQ,GAAG,IAAI,CAAC;IACvB,qDAAqD;IACrD,OAAO,CAAC,EAAE,MAAM,CAAC,MAAM,EAAE,MAAM,CAAC,CAAC;IACjC;;;;;OAKG;IACH,GAAG,CAAC,EAAE,SAAS,GAAG,IAAI,CAAC;IACvB,mEAAmE;IACnE,QAAQ,CAAC,EAAE,eAAe,CAAC;IAC3B,8CAA8C;IAC9C,MAAM,CAAC,EAAE,WAAW,CAAC;IACrB;;;;;;OAMG;IACH,YAAY,CAAC,EAAE,CAAC,GAAG,EAAE,MAAM,KAAK,MAAM,CAAC,MAAM,EAAE,MAAM,CAAC,CAAC;IACvD;;;;OAIG;IACH,YAAY,CAAC,EAAE,YAAY,CAAC;IAC5B,0FAA0F;IAC1F,YAAY,CAAC,EAAE,aAAa,CAAC;CAC9B;AAED,KAAK,SAAS,CAAC,aAAa,SAAS,iBAAiB,IAAI,aAAa,SAAS,OAAO,GACnF,UAAU,GACV,MAAM,CAAC;AAEX,MAAM,WAAW,WAAW,CAAC,KAAK,GAAG,MAAM;IACzC,MAAM,EAAE,MAAM,CAAC;IACf,UAAU,EAAE,MAAM,CAAC;IACnB,GAAG,EAAE,MAAM,CAAC;IACZ,OAAO,EAAE,MAAM,CAAC,MAAM,EAAE,MAAM,CAAC,CAAC;IAChC,IAAI,EAAE,KAAK,CAAC;IACZ,0EAA0E;IAC1E,YAAY,EAAE,MAAM,CAAC;CACtB;AA2BD,gFAAgF;AAChF,eAAO,MAAM,6BAA6B,EAAE,WAAW,CAAC,MAAM,CAK5D,CAAC;AAEH,wBAAsB,YAAY,CAAC,aAAa,SAAS,iBAAiB,GAAG,MAAM,EACjF,GAAG,EAAE,MAAM,EACX,IAAI,GAAE,YAAY,CAAC,aAAa,CAAM,GACrC,OAAO,CAAC,WAAW,CAAC,SAAS,CAAC,aAAa,CAAC,CAAC,CAAC,CAuChD"}

package/dist/lib/http/client.js

@@ -6,19 +6,35 @@ import { applyExtraCookies, domainMatches, violatesCookiePrefix, } from "../cook
  * Pass `responseType: "bytes"` when the caller must preserve the body exactly.
  * Streams aren't supported; this is a CLI helper, not a streaming HTTP
  * client. Use Bun's `fetch` directly for streaming workloads.
+ *
+ * With `redirect: "follow"` (the default) this client follows redirects
+ * itself instead of the runtime's fetch, with or without a jar, so one
+ * policy governs every hop:
+ *   - Each hop gets its own jar Cookie header (exact-host for host-only
+ *     cookies), its own `extraHeaders(url)` call for the hop's URL, and its
+ *     own Set-Cookie persistence. A callback that throws stops the chain
+ *     before the next request.
+ *   - A same-origin hop keeps every caller header.
+ *   - A cross-origin hop keeps only the caller headers in
+ *     `CROSS_ORIGIN_REDIRECT_HEADERS`; credentials, bypass tokens, and custom
+ *     `X-*` headers are dropped for the rest of the chain.
+ *   - A cross-origin 307 or 308 on a request that is not GET or HEAD throws
+ *     instead of resending the body to the new origin.
  */
 const REDIRECT_STATUSES = new Set([301, 302, 303, 307, 308]);
 const MAX_CLIENT_REDIRECTS = 20;
+/** Caller headers that survive a redirect to a different origin (lowercase). */
+export const CROSS_ORIGIN_REDIRECT_HEADERS = new Set([
+    "user-agent",
+    "accept",
+    "accept-language",
+    "range",
+]);
 export async function fetchWithJar(url, opts = {}) {
-    // With a jar, redirects are followed here so every hop gets its own Cookie
-    // header from the jar (exact-host for host-only cookies) and its own
-    // Set-Cookie persistence; the runtime would otherwise carry or drop the
-    // first hop's header on its own rules. Pass `clientRedirects: false` to opt out.
-    const clientRedirects = opts.clientRedirects ?? Boolean(opts.jar);
-    if (!clientRedirects || (opts.redirect ?? "follow") !== "follow")
+    if ((opts.redirect ?? "follow") !== "follow")
         return fetchOnce(url, opts);
     let current = url;
-    let method = opts.method ?? "GET";
+    let method = (opts.method ?? "GET").toUpperCase();
     let body = opts.body;
     let headers = opts.headers;
     let cookiesSaved = 0;
@@ -32,13 +48,18 @@ export async function fetchWithJar(url, opts = {}) {
             throw new Error(`Too many redirects (more than ${MAX_CLIENT_REDIRECTS}) starting at ${url}`);
         }
         const next = new URL(location, current);
+        const crossOrigin = next.origin !== new URL(current).origin;
         if (result.status === 303 ||
             ((result.status === 301 || result.status === 302) && method !== "GET" && method !== "HEAD")) {
             method = "GET";
             body = undefined;
         }
-        if (next.origin !== new URL(current).origin && headers) {
-            headers = Object.fromEntries(Object.entries(headers).filter(([name]) => !["authorization", "cookie"].includes(name.toLowerCase())));
+        else if (crossOrigin && method !== "GET" && method !== "HEAD") {
+            throw new Error(`Refusing to follow a ${result.status} redirect of a ${method} request from ${new URL(current).origin} to ${next.origin}: ` +
+                "it would resend the request body to a different origin. Send the request to the new URL directly if that is intended.");
+        }
+        if (crossOrigin && headers) {
+            headers = Object.fromEntries(Object.entries(headers).filter(([name]) => CROSS_ORIGIN_REDIRECT_HEADERS.has(name.toLowerCase())));
         }
         current = next.href;
     }

package/dist/lib/instructions/apply.d.ts

@@ -37,6 +37,15 @@ export interface ApplyResult {
  * writes nothing. `dryRun` reports without touching the fs.
  */
 export declare function applyInstructions(projectRoot: string, opts: ApplyOpts): ApplyResult;
+/**
+ * Warn when instructions are being installed in a folder that is not a Git
+ * work tree but holds projects carrying their own Harnery instructions block.
+ * Harnesses that read instruction files from parent folders (Claude Code walks
+ * up for CLAUDE.md) would load this block on top of each project's own, and
+ * with the wrong command name when a project pins a different one. Installing
+ * in a non-Git folder stays supported; this only names the overlap.
+ */
+export declare function parentScopeWarning(projectRoot: string): string | null;
 interface RemoveOpts {
     adapter: string;
     dryRun: boolean;

package/dist/lib/instructions/apply.d.ts.map

@@ -1 +1 @@
-{"version":3,"file":"apply.d.ts","sourceRoot":"","sources":["../../../src/lib/instructions/apply.ts"],"names":[],"mappings":"AAAA;;;;;;;;;;;;;;;;;;;;;GAqBG;AA2FH,sFAAsF;AACtF,wBAAgB,iBAAiB,CAAC,WAAW,EAAE,MAAM,GAAG,GAAG,CAAC,MAAM,CAAC,CAYlE;AAmBD,UAAU,SAAS;IACjB,OAAO,EAAE,MAAM,CAAC;IAChB,OAAO,EAAE,MAAM,CAAC;IAChB,MAAM,EAAE,OAAO,CAAC;CACjB;AAED,MAAM,WAAW,WAAW;IAC1B,OAAO,EAAE,MAAM,EAAE,CAAC;IAClB,QAAQ,EAAE,MAAM,EAAE,CAAC;CACpB;AAED;;;;GAIG;AACH,wBAAgB,iBAAiB,CAAC,WAAW,EAAE,MAAM,EAAE,IAAI,EAAE,SAAS,GAAG,WAAW,CAoInF;AAED,UAAU,UAAU;IAClB,OAAO,EAAE,MAAM,CAAC;IAChB,MAAM,EAAE,OAAO,CAAC;CACjB;AAED;;;;;GAKG;AACH,wBAAgB,kBAAkB,CAAC,WAAW,EAAE,MAAM,EAAE,IAAI,EAAE,UAAU,GAAG,WAAW,CA8FrF;AAED,MAAM,WAAW,WAAW;IAC1B,MAAM,EAAE,OAAO,GAAG,OAAO,GAAG,OAAO,CAAC;IACpC,MAAM,EAAE,MAAM,EAAE,CAAC;CAClB;AAED;;;;;GAKG;AACH,wBAAgB,iBAAiB,CAC/B,WAAW,EAAE,MAAM,EACnB,IAAI,EAAE;IAAE,OAAO,EAAE,MAAM,CAAC;IAAC,OAAO,EAAE,MAAM,CAAA;CAAE,GACzC,WAAW,CA2Db"}
+{"version":3,"file":"apply.d.ts","sourceRoot":"","sources":["../../../src/lib/instructions/apply.ts"],"names":[],"mappings":"AAAA;;;;;;;;;;;;;;;;;;;;;GAqBG;AAiGH,sFAAsF;AACtF,wBAAgB,iBAAiB,CAAC,WAAW,EAAE,MAAM,GAAG,GAAG,CAAC,MAAM,CAAC,CAYlE;AA0CD,UAAU,SAAS;IACjB,OAAO,EAAE,MAAM,CAAC;IAChB,OAAO,EAAE,MAAM,CAAC;IAChB,MAAM,EAAE,OAAO,CAAC;CACjB;AAED,MAAM,WAAW,WAAW;IAC1B,OAAO,EAAE,MAAM,EAAE,CAAC;IAClB,QAAQ,EAAE,MAAM,EAAE,CAAC;CACpB;AAED;;;;GAIG;AACH,wBAAgB,iBAAiB,CAAC,WAAW,EAAE,MAAM,EAAE,IAAI,EAAE,SAAS,GAAG,WAAW,CAiJnF;AAYD;;;;;;;GAOG;AACH,wBAAgB,kBAAkB,CAAC,WAAW,EAAE,MAAM,GAAG,MAAM,GAAG,IAAI,CA2BrE;AAED,UAAU,UAAU;IAClB,OAAO,EAAE,MAAM,CAAC;IAChB,MAAM,EAAE,OAAO,CAAC;CACjB;AAED;;;;;GAKG;AACH,wBAAgB,kBAAkB,CAAC,WAAW,EAAE,MAAM,EAAE,IAAI,EAAE,UAAU,GAAG,WAAW,CAqFrF;AAED,MAAM,WAAW,WAAW;IAC1B,MAAM,EAAE,OAAO,GAAG,OAAO,GAAG,OAAO,CAAC;IACpC,MAAM,EAAE,MAAM,EAAE,CAAC;CAClB;AAED;;;;;GAKG;AACH,wBAAgB,iBAAiB,CAC/B,WAAW,EAAE,MAAM,EACnB,IAAI,EAAE;IAAE,OAAO,EAAE,MAAM,CAAC;IAAC,OAAO,EAAE,MAAM,CAAA;CAAE,GACzC,WAAW,CAmEb"}

package/dist/lib/instructions/apply.js

@@ -20,9 +20,10 @@
  *     `skills.exclude` in `.harnery/config.jsonc`. Claude Code uses
  *     `.claude/skills/`; Cursor and Codex use `.agents/skills/`.
  */
+import { spawnSync } from "node:child_process";
 import { existsSync, mkdirSync, readdirSync, readFileSync, rmdirSync, rmSync, writeFileSync, } from "node:fs";
 import { dirname, join } from "node:path";
-import { endOfTurnStatusCommand, stripJsonComments } from "../../core/config.js";
+import { endOfTurnStatusCommand, readComputerConfig, stripJsonComments, } from "../../core/config.js";
 import { readHostAddendum } from "./host-addendum.js";
 import { checkOwnedSkill, checkRegion, isOwnedFile, removeRegion, shortHash, spliceRegion, } from "./splice.js";
 import { HOST_ADDENDUM_REGION, IMPORT_REGION, INSTRUCTIONS_REGION, renderInstructionsBlock, SKILLS, } from "./templates.js";
@@ -101,12 +102,36 @@ export function readSkillsExclude(projectRoot) {
 function blockSkills(projectRoot, adapter) {
     const supported = adapterSkillsDir(adapter) !== null;
     const exclude = readSkillsExclude(projectRoot);
-    return {
+    const skills = {
         decide: supported && !exclude.has("harn-decide"),
         council: supported && !exclude.has("harn-council"),
         end: supported && !exclude.has("harn-end"),
         team: supported && !exclude.has("harn-team"),
     };
+    // Only an enabled project's block mentions the opt-in skill, so every other
+    // project's block stays byte-identical.
+    if (supported && !exclude.has("harn-computer") && readComputerConfig(projectRoot).enabled) {
+        skills.computer = true;
+    }
+    return skills;
+}
+/** False for an opt-in skill whose config gate is off in this project. */
+function skillOptedIn(projectRoot, skill) {
+    if (skill.optIn === "computer")
+        return readComputerConfig(projectRoot).enabled;
+    return true;
+}
+/** Delete an owned skill file and its now-empty harn-* dir (adapter root stays). */
+function removeOwnedSkillFile(skillPath) {
+    rmSync(skillPath);
+    const dir = dirname(skillPath);
+    try {
+        if (readdirSync(dir).length === 0)
+            rmdirSync(dir);
+    }
+    catch {
+        /* dir not empty or gone → leave it */
+    }
 }
 /**
  * Inject / refresh the instructions block, the CLAUDE.md import shim (claude-code),
@@ -123,6 +148,9 @@ export function applyInstructions(projectRoot, opts) {
     // Resolve the host addendum before touching a single file, so a bad path
     // aborts the whole run instead of leaving AGENTS.md half-updated.
     const addendum = readHostAddendum(projectRoot);
+    const parentScope = parentScopeWarning(projectRoot);
+    if (parentScope)
+        warnings.push(parentScope);
     // ── AGENTS.md orientation block ─────────────────────────────────────────
     const agentsPath = join(projectRoot, AGENTS_FILE);
     const agentsExisted = existsSync(agentsPath);
@@ -221,6 +249,15 @@ export function applyInstructions(projectRoot, opts) {
                 continue;
             }
             const skillPath = join(projectRoot, skillsDir, skill.relPath);
+            if (!skillOptedIn(projectRoot, skill)) {
+                // Turning the gate off takes back a skill an earlier init wrote.
+                if (existsSync(skillPath) && isOwnedFile(readFileSync(skillPath, "utf8"))) {
+                    if (!opts.dryRun)
+                        removeOwnedSkillFile(skillPath);
+                    actions.push(`+ ${verbed("remove", "removed")} skill ${skill.id} (${skill.optIn}.enabled is off)`);
+                }
+                continue;
+            }
             const content = skill.render(opts.binName);
             const before = existsSync(skillPath) ? readFileSync(skillPath, "utf8") : null;
             if (before === content) {
@@ -237,6 +274,51 @@ export function applyInstructions(projectRoot, opts) {
     }
     return { actions, warnings };
 }
+/** True when `dir` is inside a real Git work tree (an empty `.git` folder does not count). */
+function insideGitWorkTree(dir) {
+    const r = spawnSync("git", ["-C", dir, "rev-parse", "--is-inside-work-tree"], {
+        encoding: "utf8",
+    });
+    return r.status === 0 && r.stdout.trim() === "true";
+}
+const PARENT_SCAN_SKIP = new Set(["node_modules"]);
+/**
+ * Warn when instructions are being installed in a folder that is not a Git
+ * work tree but holds projects carrying their own Harnery instructions block.
+ * Harnesses that read instruction files from parent folders (Claude Code walks
+ * up for CLAUDE.md) would load this block on top of each project's own, and
+ * with the wrong command name when a project pins a different one. Installing
+ * in a non-Git folder stays supported; this only names the overlap.
+ */
+export function parentScopeWarning(projectRoot) {
+    if (insideGitWorkTree(projectRoot))
+        return null;
+    let entries;
+    try {
+        entries = readdirSync(projectRoot, { withFileTypes: true })
+            .filter((e) => e.isDirectory() && !e.name.startsWith(".") && !PARENT_SCAN_SKIP.has(e.name))
+            .map((e) => e.name)
+            .sort();
+    }
+    catch {
+        return null;
+    }
+    const marker = `harnery:begin ${INSTRUCTIONS_REGION}`;
+    const children = entries.filter((name) => {
+        try {
+            return readFileSync(join(projectRoot, name, AGENTS_FILE), "utf8").includes(marker);
+        }
+        catch {
+            return false;
+        }
+    });
+    if (children.length === 0)
+        return null;
+    const listed = children.slice(0, 5).join(", ") + (children.length > 5 ? `, +${children.length - 5} more` : "");
+    return (`${projectRoot} is not a Git work tree and contains ${children.length} project(s) with their own ` +
+        `Harnery instructions (${listed}). Harnesses that read parent folders, such as Claude Code, will load ` +
+        `this block on top of theirs. Run init inside each project instead, or pass --project-root <project>.`);
+}
 /**
  * Reverse {@link applyInstructions}: strip the AGENTS.md block, the CLAUDE.md
  * import shim, and delete the shipped skill files (only ones harnery generated).
@@ -317,18 +399,8 @@ export function removeInstructions(projectRoot, opts) {
                 warnings.push(`left ${skill.relPath} (hand-edited; no harnery ownership marker)`);
                 continue;
             }
-            if (!opts.dryRun) {
-                rmSync(skillPath);
-                // Drop the now-empty harn-* dir, leaving the adapter skills root intact.
-                const dir = dirname(skillPath);
-                try {
-                    if (readdirSync(dir).length === 0)
-                        rmdirSync(dir);
-                }
-                catch {
-                    /* dir not empty or gone → leave it */
-                }
-            }
+            if (!opts.dryRun)
+                removeOwnedSkillFile(skillPath);
             actions.push(`+ ${opts.dryRun ? "would delete" : "deleted"} skill ${skill.id}`);
         }
     }
@@ -370,6 +442,12 @@ export function checkInstructions(projectRoot, opts) {
                     continue;
                 const skillPath = join(projectRoot, skillsDir, skill.relPath);
                 const c = existsSync(skillPath) ? readFileSync(skillPath, "utf8") : "";
+                if (!skillOptedIn(projectRoot, skill)) {
+                    if (isOwnedFile(c)) {
+                        issues.push(`skill ${skill.id}: present but ${skill.optIn}.enabled is off (re-run init)`);
+                    }
+                    continue;
+                }
                 note(`skill ${skill.id}`, checkOwnedSkill(c, skillBody(skill.render, opts.binName)));
             }
         }

package/dist/lib/instructions/git-hooks.d.ts.map

@@ -1 +1 @@
-{"version":3,"file":"git-hooks.d.ts","sourceRoot":"","sources":["../../../src/lib/instructions/git-hooks.ts"],"names":[],"mappings":"AAAA;;;;;;;;;;;;;;;;;;;GAmBG;AAKH,OAAO,KAAK,EAAE,YAAY,EAAE,MAAM,+BAA+B,CAAC;AAClE,OAAO,EAEL,KAAK,aAAa,EAInB,MAAM,aAAa,CAAC;AAErB,eAAO,MAAM,eAAe,yDAIgB,CAAC;AAC7C,YAAY,EAAE,YAAY,EAAE,CAAC;AAM7B;;;;;;;;GAQG;AACH,wBAAgB,iBAAiB,CAAC,KAAK,EAAE,YAAY,GAAG,MAAM,CAkB7D;AAED;;;;;GAKG;AACH,wBAAgB,eAAe,CAAC,WAAW,EAAE,MAAM,GAAG,MAAM,GAAG,IAAI,CAUlE;AAED,MAAM,WAAW,cAAc;IAC7B,OAAO,EAAE,MAAM,EAAE,CAAC;IAClB,QAAQ,EAAE,MAAM,EAAE,CAAC;CACpB;AAED,6EAA6E;AAC7E,wBAAgB,aAAa,CAAC,WAAW,EAAE,MAAM,EAAE,IAAI,EAAE;IAAE,MAAM,CAAC,EAAE,OAAO,CAAA;CAAE,GAAG,cAAc,CAoE7F;AAED;;;;;;GAMG;AACH,wBAAgB,iBAAiB,CAAC,WAAW,EAAE,MAAM,GAAG,OAAO,CAa9D;AAED;;;;GAIG;AACH,wBAAgB,aAAa,CAAC,WAAW,EAAE,MAAM,GAAG;IAAE,MAAM,EAAE,aAAa,CAAC;IAAC,MAAM,EAAE,MAAM,EAAE,CAAA;CAAE,CA2B9F;AAED;;;;GAIG;AACH,wBAAgB,cAAc,CAAC,WAAW,EAAE,MAAM,EAAE,IAAI,EAAE;IAAE,MAAM,CAAC,EAAE,OAAO,CAAA;CAAE,GAAG,cAAc,CA8B9F"}
+{"version":3,"file":"git-hooks.d.ts","sourceRoot":"","sources":["../../../src/lib/instructions/git-hooks.ts"],"names":[],"mappings":"AAAA;;;;;;;;;;;;;;;;;;;GAmBG;AAKH,OAAO,KAAK,EAAE,YAAY,EAAE,MAAM,+BAA+B,CAAC;AAClE,OAAO,EAEL,KAAK,aAAa,EAInB,MAAM,aAAa,CAAC;AAErB,eAAO,MAAM,eAAe,yDAIgB,CAAC;AAC7C,YAAY,EAAE,YAAY,EAAE,CAAC;AAM7B;;;;;;;;GAQG;AACH,wBAAgB,iBAAiB,CAAC,KAAK,EAAE,YAAY,GAAG,MAAM,CAqB7D;AAED;;;;;GAKG;AACH,wBAAgB,eAAe,CAAC,WAAW,EAAE,MAAM,GAAG,MAAM,GAAG,IAAI,CAWlE;AAED,MAAM,WAAW,cAAc;IAC7B,OAAO,EAAE,MAAM,EAAE,CAAC;IAClB,QAAQ,EAAE,MAAM,EAAE,CAAC;CACpB;AAED,6EAA6E;AAC7E,wBAAgB,aAAa,CAAC,WAAW,EAAE,MAAM,EAAE,IAAI,EAAE;IAAE,MAAM,CAAC,EAAE,OAAO,CAAA;CAAE,GAAG,cAAc,CAoE7F;AAED;;;;;;GAMG;AACH,wBAAgB,iBAAiB,CAAC,WAAW,EAAE,MAAM,GAAG,OAAO,CAa9D;AAED;;;;GAIG;AACH,wBAAgB,aAAa,CAAC,WAAW,EAAE,MAAM,GAAG;IAAE,MAAM,EAAE,aAAa,CAAC;IAAC,MAAM,EAAE,MAAM,EAAE,CAAA;CAAE,CA2B9F;AAED;;;;GAIG;AACH,wBAAgB,cAAc,CAAC,WAAW,EAAE,MAAM,EAAE,IAAI,EAAE;IAAE,MAAM,CAAC,EAAE,OAAO,CAAA;CAAE,GAAG,cAAc,CA8B9F"}

package/dist/lib/instructions/git-hooks.js

@@ -41,17 +41,20 @@ function regionName(event) {
  */
 export function renderGitHookBody(event) {
     const blocking = event === "pre-commit";
+    const native = process.platform === "win32";
+    const command = `${native ? "node " : ""}"$harnery_hook_bin"`;
+    const extension = native ? ".mjs" : "";
     const invoke = blocking
-        ? `  "$harnery_hook_bin" git-hook ${event} "$@"\n` +
+        ? `  ${command} git-hook ${event} "$@"\n` +
             `  harnery_hook_rc=$?\n` +
             `  [ "$harnery_hook_rc" -ne 0 ] && exit "$harnery_hook_rc"\n`
-        : `  "$harnery_hook_bin" git-hook ${event} "$@" >/dev/null 2>&1 || true\n`;
+        : `  ${command} git-hook ${event} "$@" >/dev/null 2>&1 || true\n`;
     return (`# Coordination for this hook lives in harnery (agent-coord git-hook ${event});\n` +
         `# upgrading harnery upgrades the behavior. Managed region: do not edit by hand.\n` +
         `harnery_hook_root=$(git rev-parse --show-superproject-working-tree 2>/dev/null)\n` +
         `[ -n "$harnery_hook_root" ] || harnery_hook_root=$(git rev-parse --show-toplevel 2>/dev/null)\n` +
-        `for harnery_hook_bin in "$harnery_hook_root/harnery/bin/agent-coord" "$harnery_hook_root/node_modules/harnery/bin/agent-coord"; do\n` +
-        `  [ -x "$harnery_hook_bin" ] || continue\n` +
+        `for harnery_hook_bin in "$harnery_hook_root/harnery/bin/agent-coord${extension}" "$harnery_hook_root/node_modules/harnery/bin/agent-coord${extension}"; do\n` +
+        `  [ -${native ? "f" : "x"} "$harnery_hook_bin" ] || continue\n` +
         invoke +
         `  break\n` +
         `done`);
@@ -64,6 +67,7 @@ export function renderGitHookBody(event) {
  */
 export function resolveHooksDir(projectRoot) {
     const r = spawnSync("git", ["rev-parse", "--git-path", "hooks"], {
+        windowsHide: true,
         cwd: projectRoot,
         encoding: "utf8",
         timeout: 5000,

package/dist/lib/instructions/templates.d.ts

@@ -31,6 +31,11 @@ export interface BlockSkills {
     end: boolean;
     /** the `harn-team` skill file is present */
     team: boolean;
+    /**
+     * the opt-in `harn-computer` skill file is present (only when the project
+     * sets `computer.enabled`); absent from the default block entirely
+     */
+    computer?: boolean;
 }
 /**
  * The always-on orientation spliced into `AGENTS.md`. Target ≤ 80 rendered
@@ -51,6 +56,12 @@ export interface SkillTemplate {
     /** path under the adapter skill dir, e.g. `harn-decide/SKILL.md` */
     relPath: string;
     render: (binName: string) => string;
+    /**
+     * Config gate for an opt-in skill. `"computer"` renders only when the project
+     * sets `computer.enabled: true`; ungated skills always render (minus
+     * `skills.exclude`).
+     */
+    optIn?: "computer";
 }
 export declare const SKILLS: SkillTemplate[];
 //# sourceMappingURL=templates.d.ts.map

package/dist/lib/instructions/templates.d.ts.map

@@ -1 +1 @@
-{"version":3,"file":"templates.d.ts","sourceRoot":"","sources":["../../../src/lib/instructions/templates.ts"],"names":[],"mappings":"AAAA;;;;;;;;;;;GAWG;AAKH,+DAA+D;AAC/D,eAAO,MAAM,mBAAmB,iBAAiB,CAAC;AAClD,sEAAsE;AACtE,eAAO,MAAM,aAAa,WAAW,CAAC;AACtC;;;;;GAKG;AACH,eAAO,MAAM,oBAAoB,kBAAkB,CAAC;AAEpD,2EAA2E;AAC3E,MAAM,WAAW,WAAW;IAC1B,8CAA8C;IAC9C,MAAM,EAAE,OAAO,CAAC;IAChB,+CAA+C;IAC/C,OAAO,EAAE,OAAO,CAAC;IACjB,2CAA2C;IAC3C,GAAG,EAAE,OAAO,CAAC;IACb,4CAA4C;IAC5C,IAAI,EAAE,OAAO,CAAC;CACf;AAED;;;;;;;;;;;GAWG;AACH,wBAAgB,uBAAuB,CACrC,OAAO,EAAE,MAAM,EACf,MAAM,GAAE,WAAoE,GAC3E,MAAM,CAiHR;AAID,mFAAmF;AACnF,MAAM,WAAW,aAAa;IAC5B,EAAE,EAAE,MAAM,CAAC;IACX,oEAAoE;IACpE,OAAO,EAAE,MAAM,CAAC;IAChB,MAAM,EAAE,CAAC,OAAO,EAAE,MAAM,KAAK,MAAM,CAAC;CACrC;AAsVD,eAAO,MAAM,MAAM,EAAE,aAAa,EAiDjC,CAAC"}
+{"version":3,"file":"templates.d.ts","sourceRoot":"","sources":["../../../src/lib/instructions/templates.ts"],"names":[],"mappings":"AAAA;;;;;;;;;;;GAWG;AAKH,+DAA+D;AAC/D,eAAO,MAAM,mBAAmB,iBAAiB,CAAC;AAClD,sEAAsE;AACtE,eAAO,MAAM,aAAa,WAAW,CAAC;AACtC;;;;;GAKG;AACH,eAAO,MAAM,oBAAoB,kBAAkB,CAAC;AAEpD,2EAA2E;AAC3E,MAAM,WAAW,WAAW;IAC1B,8CAA8C;IAC9C,MAAM,EAAE,OAAO,CAAC;IAChB,+CAA+C;IAC/C,OAAO,EAAE,OAAO,CAAC;IACjB,2CAA2C;IAC3C,GAAG,EAAE,OAAO,CAAC;IACb,4CAA4C;IAC5C,IAAI,EAAE,OAAO,CAAC;IACd;;;OAGG;IACH,QAAQ,CAAC,EAAE,OAAO,CAAC;CACpB;AAED;;;;;;;;;;;GAWG;AACH,wBAAgB,uBAAuB,CACrC,OAAO,EAAE,MAAM,EACf,MAAM,GAAE,WAAoE,GAC3E,MAAM,CAsHR;AAID,mFAAmF;AACnF,MAAM,WAAW,aAAa;IAC5B,EAAE,EAAE,MAAM,CAAC;IACX,oEAAoE;IACpE,OAAO,EAAE,MAAM,CAAC;IAChB,MAAM,EAAE,CAAC,OAAO,EAAE,MAAM,KAAK,MAAM,CAAC;IACpC;;;;OAIG;IACH,KAAK,CAAC,EAAE,UAAU,CAAC;CACpB;AAuZD,eAAO,MAAM,MAAM,EAAE,aAAa,EA8DjC,CAAC"}

package/dist/lib/instructions/templates.js

@@ -58,6 +58,11 @@ export function renderInstructionsBlock(binName, skills = { decide: true, counci
     const teamPointer = skills.team
         ? "The `harn-team` skill owns the tier choice, the governor artifacts, and the drive loop."
         : `See \`${b} governor --help\` for the tier choice and the drive loop.`;
+    // Opt-in surface: the default block stays byte-identical unless the project
+    // enabled computer use and the skill is actually installed.
+    const computerPointer = skills.computer
+        ? `\n\n**Desktop control.** This project enables \`${b} computer\` for driving native desktop apps and real browsers as a last resort. The \`harn-computer\` skill has the loop, and the desktop is one shared resource held by one agent at a time.`
+        : "";
     // Render the journal categories from the canonical enum so this prose can
     // never drift from what `journal add` actually accepts (the "note, plan…" list
     // silently lagged the tool by two categories before this).
@@ -143,7 +148,7 @@ can't resolve from the repo, file it instead. \`${b} decision file "<question>"\
 records it and lets you proceed on a stated default; \`${b} decision search "<terms>"\`
 surfaces prior decisions, so check for precedent before re-deciding. ${decidePointer}
 
-**Councils.** For a hard or contested decision, convene a council of agents. \`${b} council create "<objective>"\` runs structured rounds toward a decision. ${councilPointer}`;
+**Councils.** For a hard or contested decision, convene a council of agents. \`${b} council create "<objective>"\` runs structured rounds toward a decision. ${councilPointer}${computerPointer}`;
 }
 function decideBody(b) {
     return `The decision docket is a persistent queue for decisions you would otherwise
@@ -481,6 +486,70 @@ Tell the operator which tier you chose and why, the goal id, the roles, and the
 single next action. If you declined to build a team because one already existed,
 say that first; it is the most useful sentence in the reply.`;
 }
+function computerBody(b) {
+    return `\`${b} computer\` drives this machine's desktop through a pinned desktop driver.
+It is the last resort: use a vendor API, a CLI, or the browser tools first.
+Reach for it only for a native desktop app, or a page that needs a real
+browser you cannot drive any other way.
+
+## Setup check
+
+\`\`\`bash
+${b} computer status
+\`\`\`
+
+It shows the host, the pinned driver and whether it is installed, the daemon,
+and who holds the desktop. When the driver is missing, the project must enable
+computer use and run \`${b} computer install --yes\`. \`${b} computer doctor\`
+reports the driver's own health checks.
+
+## Core loop
+
+Every step is one call: \`${b} computer call <tool> '<json>'\`. Look up a tool's
+arguments with \`${b} computer describe <tool>\` rather than guessing; \`${b} computer tools\`
+lists them.
+
+1. **Launch** the app in the background with \`launch_app\`.
+2. **Read state** with \`get_window_state\` and \`include_screenshot: false\`. When
+   you need to see the window, pass \`screenshot_out_file\` with a file path
+   and read that file. Inline screenshots are redacted from the output unless
+   you pass \`--keep-screenshot\`, because they flood your context.
+3. **Act by element token** \`"<snapshot_id>:<row>"\` from the latest state:
+   click, \`set_value\`, or invoke, batched through \`run_steps\` when several
+   actions belong together.
+4. **Read back** the state after acting. Confirm the change landed before you
+   retry anything; never repeat an action blind.
+
+## Rules
+
+- Prefer accessibility routes (\`set_value\`, invoke) over \`type_text\` and
+  coordinate clicks.
+- Never pass \`delivery_mode: "foreground"\` unless the driver returned
+  \`background_unavailable\` or \`delivery_failed\` for that action.
+- For a browser, call \`browser_prepare\` with \`allow_launch: true\` and
+  \`profile: {"mode": "isolated_new"}\`. Never attach to the user's real
+  profile unless the operator asks for it.
+- Never type a password, username, or one-time code into a sign-in page. Stop
+  and ask the operator to sign in.
+- Only \`kill_app\` processes you launched.
+
+## One desktop, one holder
+
+Every agent on this machine shares one desktop. \`call\` takes a lease for you
+and refreshes it on every call; it lapses after a short idle period.
+
+- A refusal naming another holder means **wait**, then try once more later. Do
+  not retry in a loop. \`--wait <seconds>\` waits longer on one call.
+- Check the holder with \`${b} computer lease status\`.
+- Release the desktop as soon as you finish:
+
+  \`\`\`bash
+  ${b} computer lease release
+  \`\`\`
+
+Report what you did on the desktop, which apps you launched and closed, and
+anything you left open.`;
+}
 export const SKILLS = [
     {
         id: "harn-decide",
@@ -522,4 +591,15 @@ export const SKILLS = [
             body: teamBody(binName),
         }),
     },
+    {
+        id: "harn-computer",
+        relPath: "harn-computer/SKILL.md",
+        optIn: "computer",
+        render: (binName) => buildOwnedSkill({
+            name: "harn-computer",
+            description: "Drive a native desktop app or a real browser through the project's pinned desktop driver, as a last resort after APIs, CLIs, and browser tools. Covers the setup check, the launch / read state / act by element token / read back loop, safety rules, and the shared desktop lease.",
+            binName,
+            body: computerBody(binName),
+        }),
+    },
 ];

package/package.json

@@ -1,6 +1,6 @@
 {
   "name": "harnery",
-  "version": "0.46.1",
+  "version": "0.47.0",
   "description": "Multi-agent coordination for AI coding agents - Claude Code, Cursor, and Codex.",
   "license": "MIT",
   "author": "Ryan Kelly",
@@ -224,9 +224,9 @@
     }
   },
   "bin": {
-    "harn": "./bin/harn",
-    "agent-coord": "./bin/agent-coord",
-    "agent-hook": "./bin/agent-hook"
+    "harn": "./bin/harn.mjs",
+    "agent-coord": "./bin/agent-coord.mjs",
+    "agent-hook": "./bin/agent-hook.mjs"
   },
   "//files": "src ships as TS so the `bun` export condition resolves to source; negate co-located tests, fixture directories, and shared test helpers so they don't ride into the tarball (a .npmignore is inert for paths already inside the files allowlist).",
   "files": [
@@ -256,7 +256,7 @@
   "scripts": {
     "build": "npm run clean && tsc -p tsconfig.build.json && node scripts/rewrite-dts-extensions.mjs",
     "build:openclaw-plugin": "mkdir -p openclaw-plugin/dist && bun build openclaw-plugin/src/index.ts openclaw-plugin/src/record-worker.ts --target=node --format=esm --external openclaw --outdir openclaw-plugin/dist --entry-naming '[name].js' && cp openclaw-plugin/package.json openclaw-plugin/openclaw.plugin.json openclaw-plugin/dist/",
-    "clean": "rm -rf dist",
+    "clean": "node -e \"require('node:fs').rmSync('dist', { recursive: true, force: true })\"",
     "prepublishOnly": "npm run build",
     "typecheck": "bun x tsc --noEmit",
     "lint": "bun x @biomejs/biome check src openclaw-plugin opencode-plugin",