harness-everything 0.16.3 → 0.16.5

package/.claude-plugin/marketplace.json

@@ -10,7 +10,7 @@
       "name": "harness-everything",
       "source": "./",
       "description": "Harness OS: an orchestrated agent operating system — tier routing, circuit breaker guardrails, verification gates, WAL session memory, and self-evolving workspace rules.",
-      "version": "0.16.3",
+      "version": "0.16.5",
       "author": {
         "name": "Miya Daniel"
       },

package/.claude-plugin/plugin.json

@@ -1,7 +1,7 @@
 {
   "name": "harness-everything",
   "description": "Harness OS: an orchestrated agent operating system — tier routing, circuit breaker guardrails, verification gates, WAL session memory, and self-evolving workspace rules.",
-  "version": "0.16.3",
+  "version": "0.16.5",
   "author": {
     "name": "Miya Daniel"
   },

package/CHANGELOG.md

@@ -2,6 +2,18 @@
 
 All notable changes to this project are documented in this file.
 
+## [0.16.5](https://github.com/dyphn1/Harness-everything/compare/v0.16.4...v0.16.5) (2026-09-21)
+
+### Bug Fixes
+
+* **codex:** make packaged helper runtime self-contained ([96cba55](https://github.com/dyphn1/Harness-everything/commit/96cba55b2347251c90306a727825377ba26465c2))
+
+## [0.16.4](https://github.com/dyphn1/Harness-everything/compare/v0.16.3...v0.16.4) (2026-09-20)
+
+### Bug Fixes
+
+* **repo:** close issues 205-207 ([423ff63](https://github.com/dyphn1/Harness-everything/commit/423ff638f08cdaa14d4ab0856bfe2d2bc6b050db)), closes [#205](https://github.com/dyphn1/Harness-everything/issues/205) [#206](https://github.com/dyphn1/Harness-everything/issues/206) [#205](https://github.com/dyphn1/Harness-everything/issues/205) [#206](https://github.com/dyphn1/Harness-everything/issues/206) [#207](https://github.com/dyphn1/Harness-everything/issues/207)
+
 ## [0.16.3](https://github.com/dyphn1/Harness-everything/compare/v0.16.2...v0.16.3) (2026-09-20)
 
 ### Bug Fixes

package/ci/mechanism-2am-openai-packaged-helper-runtime.test.js

@@ -0,0 +1,82 @@
+'use strict';
+
+const assert = require('assert');
+const fs = require('fs');
+const os = require('os');
+const path = require('path');
+const { spawnSync } = require('child_process');
+
+const repoRoot = path.resolve(__dirname, '..');
+const packagedPlugin = path.join(repoRoot, 'plugins', 'harness-everything');
+
+function runNode(script, args, options) {
+  return spawnSync(process.execPath, [script, ...args], {
+    cwd: options.cwd,
+    env: { ...process.env, ...options.env },
+    input: options.input,
+    encoding: 'utf8'
+  });
+}
+
+function describe(result) {
+  return [result.stdout, result.stderr].filter(Boolean).join('\n');
+}
+
+const tempRoot = fs.mkdtempSync(path.join(os.tmpdir(), 'harness-openai-plugin-'));
+try {
+  const pluginRoot = path.join(tempRoot, 'plugin');
+  const workspaceRoot = path.join(tempRoot, 'workspace');
+  const stateHome = path.join(tempRoot, 'state');
+  fs.cpSync(packagedPlugin, pluginRoot, { recursive: true });
+  fs.mkdirSync(workspaceRoot, { recursive: true });
+  fs.mkdirSync(stateHome, { recursive: true });
+  fs.mkdirSync(path.join(workspaceRoot, '.git'), { recursive: true });
+  fs.writeFileSync(path.join(workspaceRoot, 'AGENTS.md'), '# managed workspace\n', 'utf8');
+
+  const env = {
+    HARNESS_STATE_HOME: stateHome,
+    HARNESS_WORKSPACE_ROOT: workspaceRoot,
+  };
+
+  const scriptsRoot = path.join(pluginRoot, 'skills', 'harness-everything', 'scripts');
+  const selfHeal = runNode(path.join(scriptsRoot, 'self-heal.js'), ['--check'], {
+    cwd: workspaceRoot,
+    env,
+  });
+  assert.strictEqual(selfHeal.status, 0, `packaged self-heal --check failed:\n${describe(selfHeal)}`);
+
+  const installer = runNode(path.join(pluginRoot, 'scripts', 'installer.js'), ['--codex', '--no-skills', '--yes'], {
+    cwd: workspaceRoot,
+    env,
+  });
+  assert.strictEqual(installer.status, 0, `packaged installer failed:\n${describe(installer)}`);
+  assert.match(
+    fs.readFileSync(path.join(workspaceRoot, 'AGENTS.md'), 'utf8'),
+    /Harness OS Guidance \(Advisory\)/,
+    'packaged installer did not write the Codex advisory file'
+  );
+
+  const bootstrap = runNode(path.join(scriptsRoot, 'bootstrap.js'), [], {
+    cwd: workspaceRoot,
+    env,
+    input: JSON.stringify({ session_id: 'packaged-runtime-smoke', cwd: workspaceRoot }),
+  });
+  assert.strictEqual(bootstrap.status, 0, `packaged bootstrap failed:\n${describe(bootstrap)}`);
+  assert.match(describe(bootstrap), /Harness OS initialized/, 'packaged bootstrap did not initialize Harness');
+
+  const tierRouter = runNode(path.join(scriptsRoot, 'tier-router.js'), ['audit the repository and run tests'], {
+    cwd: workspaceRoot,
+    env,
+  });
+  assert.strictEqual(tierRouter.status, 0, `packaged tier-router failed:\n${describe(tierRouter)}`);
+  assert.doesNotMatch(
+    describe(tierRouter),
+    /BASE EXECUTION LOOP: Load 'todo-driven-workflow'/,
+    'direct packaged tier-router still emits retired mandatory todo guidance'
+  );
+  assert.match(describe(tierRouter), /WORKFLOW STRATEGY:/, 'packaged tier-router did not emit the workflow contract');
+
+  console.log('OpenAI packaged helper runtime smoke test passed');
+} finally {
+  fs.rmSync(tempRoot, { recursive: true, force: true });
+}

package/ci/mechanism-33-issues-205-207.test.js

@@ -0,0 +1,59 @@
+#!/usr/bin/env node
+'use strict';
+
+const fs = require('fs');
+const os = require('os');
+const path = require('path');
+const { spawnSync } = require('child_process');
+
+const ROOT = path.resolve(__dirname, '..');
+let failed = 0;
+
+function check(condition, message) {
+  if (condition) {
+    console.log(`PASS ${message}`);
+  } else {
+    failed += 1;
+    console.error(`FAIL ${message}`);
+  }
+}
+
+const dockerVerify = fs.readFileSync(path.join(ROOT, 'docker-verify.sh'), 'utf8');
+const legacyStatePath = '.claude/harness-everything/state/sessions/default';
+check(/STATE_DIR=\$\(node -e[\s\S]*getSessionDir\(null, 'default'\)/.test(dockerVerify),
+  '#205 docker verifier resolves one canonical session state directory');
+check(!dockerVerify.includes(legacyStatePath),
+  '#205 docker verifier does not seed or read the legacy repo-relative state directory');
+check((dockerVerify.match(/\$STATE_DIR\//g) || []).length >= 10,
+  '#205 docker verifier routes all state checks through STATE_DIR');
+
+const architecture = fs.readFileSync(path.join(ROOT, 'docs/architecture.md'), 'utf8');
+check(architecture.includes('advisory loop-awareness reminders'),
+  '#206 architecture names loop-awareness as advisory');
+check(!/\bloop budgets\b/.test(architecture),
+  '#206 architecture does not describe retired loop budgets as enforcement');
+
+const commitlintConfig = require(path.join(ROOT, 'commitlint.config.js'));
+check(JSON.stringify(commitlintConfig.rules['subject-case']) === JSON.stringify([2, 'always', 'lower-case']),
+  '#207 commitlint aligns subject-case with repository Conventional Commit history');
+
+const tempDir = fs.mkdtempSync(path.join(os.tmpdir(), 'harness-issue-207-'));
+const messageFile = path.join(tempDir, 'commit-message.txt');
+fs.writeFileSync(messageFile, 'fix(runtime): align post-190 advisory contracts\n', 'utf8');
+const commitlintPackage = require.resolve('@commitlint/cli/package.json');
+const commitlintMeta = JSON.parse(fs.readFileSync(commitlintPackage, 'utf8'));
+const commitlintBin = typeof commitlintMeta.bin === 'string'
+  ? commitlintMeta.bin
+  : commitlintMeta.bin.commitlint;
+const commitlintCli = path.resolve(path.dirname(commitlintPackage), commitlintBin);
+const result = spawnSync(process.execPath, [commitlintCli, '--edit', messageFile], {
+  cwd: ROOT,
+  encoding: 'utf8',
+});
+check(result.status === 0,
+  '#207 representative lowercase repository subject passes commitlint');
+
+fs.rmSync(tempDir, { recursive: true, force: true });
+
+console.log(`\n${failed === 0 ? 'PASS' : 'FAIL'}: issues #205-#207 regression mechanism (${failed} failure${failed === 1 ? '' : 's'})`);
+process.exit(failed === 0 ? 0 : 1);

package/ci/skill-routing-check.js

@@ -49,7 +49,7 @@ function discoverNestedSkills(skillDir) {
 
 function expectedMarker(skill) {
   if (skill === 'harness-everything') return 'RECOMMENDED TIER';
-  if (skill === 'todo-driven-workflow') return 'BASE EXECUTION LOOP';
+  if (skill === 'todo-driven-workflow') return 'WORKFLOW STRATEGY';
   return `${skill}/SKILL.md`;
 }
 

package/commitlint.config.js

@@ -18,8 +18,8 @@ module.exports = {
         'build'
       ]
     ],
-    'subject-case': [2, 'always', 'sentence-case'],
+    'subject-case': [2, 'always', 'lower-case'],
     'subject-empty': [2, 'never'],
     'header-max-length': [2, 'always', 100]
   }
-};
+};

package/docker-verify.sh

@@ -26,13 +26,12 @@ npm test
 echo -e "\n[Step 3] Running Mechanism Checks..."
 
 # 3a. Rule of 3 Circuit Breaker actually blocks
-# Runtime state lives under .claude/harness-everything/state/sessions/<session_id>/;
-# invocations with no session_id (like these bare/manual calls) fall into a
-# fixed sessions/default/ bucket.
+# Runtime state is resolved once through the same workspace-keyed helper used by
+# the hooks. Invocations with no session_id use the fixed default session.
+STATE_DIR=$(node -e "process.stdout.write(require('./hooks/scripts/lib/harness-state').getSessionDir(null, 'default'))")
 echo -e "\n---> Running 3a: Rule of 3 Circuit Breaker"
-mkdir -p .claude/harness-everything/state/sessions/default
-rm -f .claude/harness-everything/state/sessions/default/zoom-out-report.md
-echo '{"count":3,"lastHash":"verify-test","zoomOutResolved":false}' > .claude/harness-everything/state/sessions/default/rule-of-3-state.json
+rm -f "$STATE_DIR/zoom-out-report.md"
+echo '{"count":3,"lastHash":"verify-test","zoomOutResolved":false}' > "$STATE_DIR/rule-of-3-state.json"
 
 # We expect this to exit with 2 and print CRITICAL trigger message
 set +e
@@ -68,8 +67,8 @@ echo "✅ PASS: Rule of 3 reset check passed."
 
 # 3a-bis. Zoom-out reflection report releases the breaker (self-recovery path)
 echo -e "\n---> Running 3a-bis: Zoom-out report releases the breaker"
-echo '{"count":3,"lastHash":"verify-test","zoomOutResolved":false,"lastFailureAt":0,"zoomOutCycles":0}' > .claude/harness-everything/state/sessions/default/rule-of-3-state.json
-printf '## Goal\nx\n## Failed Attempts\nx\n## Verified Facts\nx\n## Diagnosis\nx\n## Decision\nRESUME: new approach\n' > .claude/harness-everything/state/sessions/default/zoom-out-report.md
+echo '{"count":3,"lastHash":"verify-test","zoomOutResolved":false,"lastFailureAt":0,"zoomOutCycles":0}' > "$STATE_DIR/rule-of-3-state.json"
+printf '## Goal\nx\n## Failed Attempts\nx\n## Verified Facts\nx\n## Diagnosis\nx\n## Decision\nRESUME: new approach\n' > "$STATE_DIR/zoom-out-report.md"
 
 set +e
 node hooks/scripts/rule-of-3.js
@@ -79,9 +78,9 @@ if [ "$EXIT_CODE" -ne 0 ]; then
   echo "❌ FAIL: Valid reflection report did not release the breaker (expected 0, got $EXIT_CODE)"
   exit 1
 fi
-if ! node -e "const s=require('./.claude/harness-everything/state/sessions/default/rule-of-3-state.json'); process.exit(s.count===0 && s.zoomOutResolved===true && s.zoomOutCycles===1 ? 0 : 1)"; then
+if ! node -e "const s=require(process.argv[1]); process.exit(s.count===0 && s.zoomOutResolved===true && s.zoomOutCycles===1 ? 0 : 1)" "$STATE_DIR/rule-of-3-state.json"; then
   echo "❌ FAIL: Breaker state not updated after report release"
-  cat .claude/harness-everything/state/sessions/default/rule-of-3-state.json
+  cat "$STATE_DIR/rule-of-3-state.json"
   exit 1
 fi
 echo "✅ PASS: Valid reflection report released the breaker (self-recovery)."
@@ -91,11 +90,8 @@ echo "✅ PASS: Valid reflection report released the breaker (self-recovery)."
 # the contract is exit 2 plus the reflection-required message the hook actually
 # prints - never a permanent lock (ci/mechanism-2a-rule-of-3.test.js:58-64).
 echo -e "\n---> Running 3a-ter: Re-trip requests another zoom-out"
-# Seed through the hooks' own resolver: since #42 runtime state lives in the
-# global, workspace-keyed state root ($HARNESS_STATE_HOME or
-# ~/.agents/harness-everything/...), and a repo-relative seed only reaches the
-# hook while the one-time legacy migration can still move it.
-STATE_DIR=$(node -e "process.stdout.write(require('./hooks/scripts/lib/harness-state').getSessionDir(null, 'default'))")
+# Seed through the hooks' own resolver in the already resolved workspace-keyed
+# state root.
 RETRIP_AT=$(node -e "process.stdout.write(String(Date.now()))")
 node -e "require('fs').writeFileSync(process.argv[1], JSON.stringify({count:3,lastHash:'verify-test',zoomOutResolved:false,lastFailureAt:Number(process.argv[2]),zoomOutCycles:1}))" "$STATE_DIR/rule-of-3-state.json" "$RETRIP_AT"
 set +e
@@ -173,17 +169,17 @@ echo "✅ PASS: Boundary Guard blocked large read successfully."
 
 # 3c. State persistence (WAL) records failure and handles clear
 echo -e "\n---> Running 3c: State persistence (WAL)"
-rm -f .claude/harness-everything/state/sessions/default/handoff-state.json
+rm -f "$STATE_DIR/handoff-state.json"
 
 # Record failure
 echo '{"tool_name":"Bash","tool_response":{"stdout":"","stderr":"npm ERR! verify-test failure"}}' | node hooks/scripts/state-persist.js
 
-if [ ! -f ".claude/harness-everything/state/sessions/default/handoff-state.json" ]; then
+if [ ! -f "$STATE_DIR/handoff-state.json" ]; then
   echo "❌ FAIL: handoff-state.json was not created"
   exit 1
 fi
 
-STATUS=$(node -e "console.log(JSON.parse(require('fs').readFileSync('.claude/harness-everything/state/sessions/default/handoff-state.json','utf8')).status)")
+STATUS=$(node -e "console.log(JSON.parse(require('fs').readFileSync(process.argv[1],'utf8')).status)" "$STATE_DIR/handoff-state.json")
 if [ "$STATUS" != "failed" ]; then
   echo "❌ FAIL: Expected status to be 'failed', got '$STATUS'"
   exit 1
@@ -254,8 +250,8 @@ echo "✅ PASS: Subagent scope guard successfully blocked out-of-scope modificat
 
 # 3f. Stop gate bounces an unverified-edit stop exactly once
 echo -e "\n---> Running 3f: Stop Gate"
-rm -f .claude/harness-everything/state/sessions/default/stop-gate-state.json
-node -e "require('fs').mkdirSync('.claude/harness-everything/state/sessions/default',{recursive:true}); require('fs').writeFileSync('.claude/harness-everything/state/sessions/default/handoff-state.json', JSON.stringify({status:'idle',lastEditAt:Date.now(),lastVerifyAt:0}))"
+rm -f "$STATE_DIR/stop-gate-state.json"
+node -e "require('fs').writeFileSync(process.argv[1], JSON.stringify({status:'idle',lastEditAt:Date.now(),lastVerifyAt:0}))" "$STATE_DIR/handoff-state.json"
 echo "dirty" > .verify-dirty.tmp
 
 set +e
@@ -285,7 +281,7 @@ if [ "$EXIT_CODE" -ne 0 ]; then
 fi
 
 # Loop guard: stop_hook_active always passes
-rm -f .claude/harness-everything/state/sessions/default/stop-gate-state.json
+rm -f "$STATE_DIR/stop-gate-state.json"
 set +e
 echo '{"stop_hook_active":true}' | node hooks/scripts/stop-gate.js
 EXIT_CODE=$?
@@ -294,7 +290,7 @@ if [ "$EXIT_CODE" -ne 0 ]; then
   echo "❌ FAIL: Stop gate blocked despite stop_hook_active (expected 0, got $EXIT_CODE)"
   exit 1
 fi
-rm -f .verify-dirty.tmp .claude/harness-everything/state/sessions/default/handoff-state.json .claude/harness-everything/state/sessions/default/stop-gate-state.json
+rm -f .verify-dirty.tmp "$STATE_DIR/handoff-state.json" "$STATE_DIR/stop-gate-state.json"
 echo "✅ PASS: Stop gate bounced once, then respected the batch and loop guards."
 
 # Clean up temporary test output logs

package/docs/architecture.md

@@ -71,7 +71,7 @@ For selected Fable topologies on Claude:
 - `workflow-stop-gate.js` reports unresolved stage/verification evidence without rejecting Stop;
 - `workflow-disposition.js` records explicit lifecycle/audit decisions; numeric budgets are no longer authoritative control state.
 
-Other topologies use their own applicable mechanisms: loop budgets, regular verification stop-gates, action gates, and task-specific skills. Mechanism coverage is not assumed identical across hosts.
+Other topologies use their own applicable mechanisms: advisory loop-awareness reminders, regular verification stop-gates, action gates, and task-specific skills. Mechanism coverage is not assumed identical across hosts.
 
 ### Scoped runtime advisories and capabilities
 

package/harness-everything/SKILL.md

@@ -4,7 +4,7 @@ description: "Route software/project work through the Harness kernel: classify T
 license: Apache-2.0
 metadata:
   author: Miya Daniel
-  version: 0.16.3
+  version: 0.16.5
 ---
 
 # Harness Everything

package/harness-everything/scripts/bootstrap.js

@@ -1,13 +1,14 @@
 #!/usr/bin/env node
 const fs = require('fs');
 const path = require('path');
+const { getHarnessRoot, requireHarnessState, requireWorkspace } = require('./runtime-paths');
 const {
   getWorkspaceRoot,
   getSessionId,
   getSessionDir,
   writeCurrentSession,
   pruneStaleSessions,
-} = require('../../hooks/scripts/lib/harness-state');
+} = requireHarnessState();
 
 console.log("Bootstrapping Harness Skills OS...");
 
@@ -162,9 +163,9 @@ try {
   // npx/global install auditing the harness checkout itself compares two
   // different paths and wrongly advises a repair that self-heal then skips
   // (issue #40). Required lazily so a missing lib can never break session start.
-  const { isHarnessRepo } = require('../../scripts/lib/workspace');
+  const { isHarnessRepo } = requireWorkspace();
   const auditingSelf = isHarnessRepo(workspaceRoot)
-    || path.resolve(workspaceRoot) === path.resolve(__dirname, '..', '..');
+    || path.resolve(workspaceRoot) === path.resolve(getHarnessRoot());
 
   if (missing.length > 0 && !auditingSelf) {
     console.log(`\n[Self-Heal] Missing integration touchpoints: ${missing.join(', ')}`);

package/harness-everything/scripts/runtime-paths.js

@@ -0,0 +1,37 @@
+'use strict';
+
+const fs = require('fs');
+const path = require('path');
+
+// Helpers live in both the source checkout and the packaged plugin's skill
+// tree. Resolve the owning runtime root instead of assuming either layout.
+function candidateRoots() {
+  return [
+    path.resolve(__dirname, '..', '..'),
+    path.resolve(__dirname, '..', '..', '..'),
+  ];
+}
+
+function getHarnessRoot() {
+  const root = candidateRoots().find(candidate =>
+    fs.existsSync(path.join(candidate, 'scripts', 'lib', 'workspace.js'))
+  );
+  if (!root) {
+    throw new Error(`Harness runtime root not found from ${__dirname}`);
+  }
+  return root;
+}
+
+function requireWorkspace() {
+  return require(path.join(getHarnessRoot(), 'scripts', 'lib', 'workspace.js'));
+}
+
+function requireHarnessState() {
+  return require(path.join(getHarnessRoot(), 'hooks', 'scripts', 'lib', 'harness-state.js'));
+}
+
+module.exports = {
+  getHarnessRoot,
+  requireWorkspace,
+  requireHarnessState,
+};

package/harness-everything/scripts/self-heal.js

@@ -23,7 +23,8 @@
 const fs = require('fs');
 const path = require('path');
 const { execSync } = require('child_process');
-const { getWorkspaceRoot, isHarnessRepo } = require('../../scripts/lib/workspace');
+const { getHarnessRoot, requireWorkspace } = require('./runtime-paths');
+const { getWorkspaceRoot, isHarnessRepo } = requireWorkspace();
 
 const MARKER = 'Harness OS Guidance (Advisory)';
 const HOOK_ID = 'harness:pre:bootstrap';
@@ -194,7 +195,7 @@ function main() {
   const forceSelf = process.argv.includes('--force-self');
 
   const workspaceRoot = getWorkspaceRoot();
-  const harnessSourceDir = path.resolve(__dirname, '..', '..');
+  const harnessSourceDir = getHarnessRoot();
   const installerPath = path.join(harnessSourceDir, 'scripts', 'installer.js');
 
   console.log(`Workspace: ${workspaceRoot}`);

package/harness-everything/scripts/tier-router.js

@@ -5,6 +5,7 @@ const {
   buildRouterContract,
   writeRouterContract,
 } = require('./router-contract');
+const { requireWorkspace } = require('./runtime-paths');
 
 const DEFAULT_ROUTING_CONFIG = {
   tiers: { tier3: [], tier2: [] },
@@ -163,7 +164,7 @@ function plannerInputsFromContext(context, promptLower) {
 function emitDynamicSkills(promptLower, context, recommendedGuides) {
   try {
     const userHome = process.env.HOME || process.env.USERPROFILE || '';
-    const { getWorkspaceRoot } = require('../../scripts/lib/workspace');
+    const { getWorkspaceRoot } = requireWorkspace();
     const workspaceRoot = getWorkspaceRoot(context);
 
     const manifestPaths = [
@@ -315,11 +316,6 @@ function run(userPrompt, context) {
   console.log(`\n=> RECOMMENDED TIER: ${recommendedTier}`);
   console.log(`=> RATIONALE: ${rationale}`);
 
-  if (recommendedTier.startsWith('Tier 2') || recommendedTier.startsWith('Tier 3')) {
-    console.log(`\n=> BASE EXECUTION LOOP: Load 'todo-driven-workflow' and initialize its checklist (3-7 verifiable sub-tasks) BEFORE editing any file.`);
-    console.log(`   Track exactly ONE item in-progress at a time; verify with real evidence before marking completed.`);
-  }
-
   const requestedFableModel = detectFableModel(promptLower);
   if (requestedFableModel) {
     console.log(`\n=> REQUESTED FABLE MODEL MODE: ${requestedFableModel}`);

package/hooks/scripts/lib/platforms/claude.js

@@ -107,7 +107,7 @@ module.exports = {
       manifestPath: manifest.getManifestPath(claudeDir)
     };
   },
-  install({ isGlobal, targetWorkspaceRoot, harnessSourceDir, packageVersion, claudeHooks, manifest }) {
+  install({ isGlobal, targetWorkspaceRoot, harnessSourceDir, harnessRuntimeRoot = harnessSourceDir, packageVersion, claudeHooks, manifest }) {
     const userHome = require('os').homedir();
     const claudeDir = isGlobal ? path.join(userHome, '.claude') : path.join(targetWorkspaceRoot, '.claude');
     if (!fs.existsSync(claudeDir)) {
@@ -124,7 +124,7 @@ module.exports = {
       }
     }
 
-    const sourceHooksFile = path.join(harnessSourceDir, 'hooks', 'hooks.json');
+    const sourceHooksFile = path.join(harnessRuntimeRoot, 'hooks', 'hooks.json');
     if (fs.existsSync(sourceHooksFile)) {
       const sourceHooksObj = JSON.parse(fs.readFileSync(sourceHooksFile, 'utf8'));
       const resolvedHooks = {};
@@ -134,7 +134,7 @@ module.exports = {
           if (cloned.hooks) {
             cloned.hooks = cloned.hooks.map(h => {
               if (h.type === 'command' && h.command) {
-                h.command = resolveClaudeHookCommand(h.command, harnessSourceDir);
+                h.command = resolveClaudeHookCommand(h.command, harnessRuntimeRoot);
               }
               return h;
             });

package/opencode-plugin/plugin.json

@@ -1,7 +1,7 @@
 {
   "name": "harness-enforcement",
   "description": "Repository inventory for the opencode enforcement plugin and its standalone helper",
-  "version": "0.16.3",
+  "version": "0.16.5",
   "runtime": "index.mjs",
   "hooks": {
     "verify": "hooks/verify.js"

package/package.json

@@ -1,6 +1,6 @@
 {
   "name": "harness-everything",
-  "version": "0.16.3",
+  "version": "0.16.5",
   "description": "Harness OS: An Orchestrated Agent Operating System for AI-driven Development",
   "main": "harness-everything/scripts/bootstrap.js",
   "bin": {

package/plugins/harness-everything/.codex-plugin/plugin.json

@@ -1,6 +1,6 @@
 {
   "name": "harness-everything",
-  "version": "0.16.3",
+  "version": "0.16.5",
   "description": "Invariant-first engineering harness for routing, verification, and failure recovery while preserving agent autonomy.",
   "author": {
     "name": "Miya Daniel",

package/plugins/harness-everything/hooks/scripts/lib/platforms/claude.js

@@ -107,7 +107,7 @@ module.exports = {
       manifestPath: manifest.getManifestPath(claudeDir)
     };
   },
-  install({ isGlobal, targetWorkspaceRoot, harnessSourceDir, packageVersion, claudeHooks, manifest }) {
+  install({ isGlobal, targetWorkspaceRoot, harnessSourceDir, harnessRuntimeRoot = harnessSourceDir, packageVersion, claudeHooks, manifest }) {
     const userHome = require('os').homedir();
     const claudeDir = isGlobal ? path.join(userHome, '.claude') : path.join(targetWorkspaceRoot, '.claude');
     if (!fs.existsSync(claudeDir)) {
@@ -124,7 +124,7 @@ module.exports = {
       }
     }
 
-    const sourceHooksFile = path.join(harnessSourceDir, 'hooks', 'hooks.json');
+    const sourceHooksFile = path.join(harnessRuntimeRoot, 'hooks', 'hooks.json');
     if (fs.existsSync(sourceHooksFile)) {
       const sourceHooksObj = JSON.parse(fs.readFileSync(sourceHooksFile, 'utf8'));
       const resolvedHooks = {};
@@ -134,7 +134,7 @@ module.exports = {
           if (cloned.hooks) {
             cloned.hooks = cloned.hooks.map(h => {
               if (h.type === 'command' && h.command) {
-                h.command = resolveClaudeHookCommand(h.command, harnessSourceDir);
+                h.command = resolveClaudeHookCommand(h.command, harnessRuntimeRoot);
               }
               return h;
             });

package/plugins/harness-everything/plugin.json

@@ -1,7 +1,7 @@
 {
   "$schema": "https://agent-plugins.org/schemas/1.0.0/plugin.schema.json",
   "name": "harness-everything",
-  "version": "0.16.3",
+  "version": "0.16.5",
   "description": "Invariant-first engineering harness for routing, verification, and failure recovery while preserving agent autonomy.",
   "author": {
     "name": "Miya Daniel",