harness-everything 0.19.0 → 0.20.0

This diff represents the content of publicly available package versions that have been released to one of the supported registries. The information contained in this diff is provided for informational purposes only and reflects changes between package versions as they appear in their respective public registries.
Files changed (69) hide show
  1. package/.claude-plugin/marketplace.json +1 -1
  2. package/.claude-plugin/plugin.json +1 -1
  3. package/.releaserc.json +1 -1
  4. package/AGENTS.md +3 -2
  5. package/CHANGELOG.md +9 -0
  6. package/README.md +14 -14
  7. package/RELEASING.md +10 -2
  8. package/ci/invariant-routing.test.js +42 -19
  9. package/ci/mechanism-2af-worktree-isolation.test.js +3 -3
  10. package/ci/mechanism-2ag-router-worktree-contract.test.js +1 -0
  11. package/ci/mechanism-2an-workflow-obligations.test.js +1 -0
  12. package/ci/mechanism-2ap-sbom.test.js +92 -0
  13. package/ci/mechanism-33-issues-205-207.test.js +2 -2
  14. package/ci/openai-plugin-package.test.js +6 -6
  15. package/ci/router-workflow-plan.test.js +12 -9
  16. package/ci/workflow-execution-contract.test.js +2 -2
  17. package/docs/architecture.md +15 -15
  18. package/docs/enforcement-locks.md +17 -15
  19. package/docs/philosophy.md +43 -8
  20. package/docs/routing.md +23 -16
  21. package/docs/workflow-runtime.md +20 -19
  22. package/environment-detection/SKILL.md +3 -1
  23. package/evals/harness-everything/tasks/positive-tier1.yaml +1 -1
  24. package/evals/harness-everything/tasks/positive-tier2.yaml +1 -1
  25. package/evals/harness-everything/tasks/positive-tier3.yaml +1 -1
  26. package/evals/using-git-worktrees/tasks/positive-trigger.yaml +1 -1
  27. package/find-skills/SKILL.md +20 -29
  28. package/git-commit/SKILL.md +4 -4
  29. package/harness-everything/SKILL.md +16 -17
  30. package/harness-everything/references/triage-and-tiers.md +17 -16
  31. package/harness-everything/scripts/kernel-router-core.js +26 -24
  32. package/harness-everything/scripts/kernel-router.js +8 -8
  33. package/harness-everything/scripts/router-contract-core.js +7 -7
  34. package/harness-everything/scripts/router-contract.js +1 -1
  35. package/hooks/scripts/atomic-commit-check.js +1 -1
  36. package/hooks/scripts/boundary-guard.js +2 -2
  37. package/hooks/scripts/depth-guard.js +5 -6
  38. package/hooks/scripts/subagent-scope-guard.js +2 -2
  39. package/hooks/scripts/workflow-gate.js +1 -1
  40. package/install-cognitive-os/SKILL.md +3 -3
  41. package/opencode-plugin/plugin.json +1 -1
  42. package/package.json +5 -2
  43. package/plugins/harness-everything/.codex-plugin/plugin.json +1 -1
  44. package/plugins/harness-everything/hooks/scripts/atomic-commit-check.js +1 -1
  45. package/plugins/harness-everything/hooks/scripts/boundary-guard.js +2 -2
  46. package/plugins/harness-everything/hooks/scripts/depth-guard.js +5 -6
  47. package/plugins/harness-everything/hooks/scripts/subagent-scope-guard.js +2 -2
  48. package/plugins/harness-everything/hooks/scripts/workflow-gate.js +1 -1
  49. package/plugins/harness-everything/plugin.json +1 -1
  50. package/plugins/harness-everything/scripts/lib/advisory-text.js +19 -17
  51. package/plugins/harness-everything/skills/environment-detection/SKILL.md +3 -1
  52. package/plugins/harness-everything/skills/find-skills/SKILL.md +20 -29
  53. package/plugins/harness-everything/skills/git-commit/SKILL.md +4 -4
  54. package/plugins/harness-everything/skills/harness-everything/SKILL.md +16 -17
  55. package/plugins/harness-everything/skills/harness-everything/references/triage-and-tiers.md +17 -16
  56. package/plugins/harness-everything/skills/harness-everything/scripts/kernel-router-core.js +26 -24
  57. package/plugins/harness-everything/skills/harness-everything/scripts/kernel-router.js +8 -8
  58. package/plugins/harness-everything/skills/harness-everything/scripts/router-contract-core.js +7 -7
  59. package/plugins/harness-everything/skills/harness-everything/scripts/router-contract.js +1 -1
  60. package/plugins/harness-everything/skills/install-cognitive-os/SKILL.md +3 -3
  61. package/plugins/harness-everything/skills/rewrite-commits/SKILL.md +2 -2
  62. package/plugins/harness-everything/skills/to-tickets/SKILL.md +2 -2
  63. package/plugins/harness-everything/skills/using-git-worktrees/SKILL.md +6 -6
  64. package/rewrite-commits/SKILL.md +2 -2
  65. package/sbom.cdx.json +2110 -0
  66. package/scripts/generate-sbom.js +239 -0
  67. package/scripts/lib/advisory-text.js +19 -17
  68. package/to-tickets/SKILL.md +2 -2
  69. package/using-git-worktrees/SKILL.md +6 -6
@@ -4,12 +4,12 @@ description: "Explain or explicitly apply the Harness cognitive policy: Discover
4
4
  license: Apache-2.0
5
5
  metadata:
6
6
  author: Miya Daniel
7
- version: 0.4.0
7
+ version: 0.19.1
8
8
  ---
9
9
 
10
10
  # Agent Cognitive OS
11
11
 
12
- The Cognitive OS is policy, not a required peer-skill selection. Supported runtimes should establish the smaller Harness invariant contract before domain-skill execution; this skill remains its human-readable/manual entry point.
12
+ The Cognitive OS is policy, not a required peer-skill selection. Supported runtimes **MUST** establish the smaller Harness invariant contract before domain-skill execution; this skill remains its human-readable/manual entry point.
13
13
 
14
14
  ## USE FOR:
15
15
  - Apply or explain Discover → Think → Try → Summarize → Record.
@@ -39,6 +39,6 @@ The Cognitive OS is policy, not a required peer-skill selection. Supported runti
39
39
 
40
40
  Domain skills may define their own tactics and phases. They do not need to invoke this skill first as long as the Harness invariants remain satisfied.
41
41
 
42
- On advisory-only platforms, these rules are guidance rather than hard tool-call gates.
42
+ On instruction-only platforms, the same semantic MUST/SHOULD/MAY contract applies through instructions rather than hard tool-call gates.
43
43
 
44
44
  Deep dive: <this-skill-dir>/references/cognitive-loop.md
@@ -4,7 +4,7 @@ description: "Rewrite past Git history to comply with Angular Style conventions.
4
4
  license: Apache-2.0
5
5
  metadata:
6
6
  author: Miya Daniel
7
- version: 0.4.0
7
+ version: 0.19.1
8
8
  ---
9
9
 
10
10
  # Rewrite Commits
@@ -31,7 +31,7 @@ metadata:
31
31
  ## Workflow
32
32
 
33
33
  1. `[Discover]` Run `git log --oneline -n <num>` to confirm the range. If commits were already pushed to remote `main`/`master`, warn and require secondary human confirmation.
34
- 2. `[Think] & [Try]` Create a temp branch. Never run bare interactive `git rebase -i`; prefer `git reset --soft HEAD~<N>` plus structured commits, or Node.js scripting (no hardcoded `sed -i`). Messages MUST follow Angular Style per the `git-commit` skill.
34
+ 2. `[Think/Try]` Create a temp branch. **MUST NOT** use bare `git rebase -i`; **SHOULD** use `git reset --soft HEAD~<N>` + structured commits or Node.js (no hardcoded `sed -i`). Messages MUST follow `git-commit`.
35
35
  3. `[Summarize]` Run `git log --oneline` for confirmation. On merge conflict, run `git rebase --abort`, STOP, and hand over to human decision or trigger `zoom-out`.
36
36
 
37
37
  Deep dive: <this-skill-dir>/references/workflow.md
@@ -4,7 +4,7 @@ description: Break a to-spec feature-spec, a plan, or a conversation into tracer
4
4
  license: Apache-2.0
5
5
  metadata:
6
6
  author: Miya Daniel
7
- version: 0.12.0
7
+ version: 0.19.1
8
8
  ---
9
9
 
10
10
  # To Tickets
@@ -33,7 +33,7 @@ Cuts a plan or spec into tracer-bullet vertical slices, each declaring its block
33
33
  ## Process
34
34
 
35
35
  1. Resolve path: script check (Exit 0 = configured location) → workspace convention dirs → platform fallback (`.claude`/`.github`/`.cursor` + `/harness-everything/tickets/`).
36
- 2. Gather context: prefer a referenced to-spec spec — design-audit verification MANDATORY first, else refuse; no spec is fine.
36
+ 2. Gather context: **SHOULD** use a referenced to-spec spec when available — design-audit verification is MANDATORY first, else refuse; no spec is fine.
37
37
  3. Explore codebase (optional): evidence-cited findings only; prefactor first.
38
38
  4. Draft vertical slices: complete path through every layer, demoable alone, one context window each; declare blocking edges.
39
39
  5. Quiz the user on granularity and edges until approved (MANDATORY gate).
@@ -1,10 +1,10 @@
1
1
  ---
2
2
  name: using-git-worktrees
3
- description: Use when starting feature work needing isolation or before implementation plans - recommends an isolated workspace via native tools or git worktree fallback
3
+ description: Use when work needs isolation or before major implementation plans - resolves workspace isolation via native tools or git worktree fallback, with an explicit degraded fallback when isolation is unavailable
4
4
  license: Apache-2.0
5
5
  metadata:
6
6
  author: Miya Daniel
7
- version: 0.16.1
7
+ version: 0.19.1
8
8
  ---
9
9
 
10
10
  # Using Git Worktrees
@@ -13,9 +13,9 @@ Use native worktree support first; raw Git is the fallback.
13
13
 
14
14
  ## Contract
15
15
 
16
- - **Major workflow guidance** — Tier 3 / Fable-class engineering is safer in a linked worktree before broad source/artifact mutation. Reuse one or create one when practical.
17
- - **Ordinary mode** — isolation-needing feature work may honor an explicit user preference to stay in place.
18
- - Never nest a worktree inside an already isolated worktree.
16
+ - **Tier 3 / Fable (MUST resolve)** — before broad source/artifact mutation, reuse/create a verified linked worktree. If isolation is unavailable or the user explicitly chooses to stay in place, MUST report an explicit degraded fallback/risk before continuing.
17
+ - **Ordinary mode (SHOULD)** — use isolation when it materially reduces collision/risk; explicit user preference may keep work in place.
18
+ - **MUST NOT** nest a worktree inside an already isolated worktree.
19
19
 
20
20
  ## Workflow
21
21
 
@@ -28,7 +28,7 @@ git rev-parse --show-superproject-working-tree
28
28
  ```
29
29
  Different git/common dirs and no superproject => already isolated; continue to Step 2. A submodule is a normal repo for this check.
30
30
 
31
- **Step 1 — Create/enter**: prefer native `EnterWorktree`, `/worktree`, or `--worktree`. Otherwise use `git worktree add "$path" -b "$BRANCH_NAME"`. Prefer an already-ignored or external/sibling path. If creation/entry fails, report it and continue only with explicit awareness of the isolation risk.
31
+ **Step 1 — Create/enter**: use native `EnterWorktree`, `/worktree`, or `--worktree` first; otherwise use `git worktree add "$path" -b "$BRANCH_NAME"`. Use an already-ignored or external/sibling path when possible. If creation/entry fails, MUST surface the degraded isolation disposition before continuing.
32
32
 
33
33
  **Step 2 — Setup**: install project dependencies as needed.
34
34
 
@@ -4,7 +4,7 @@ description: "Rewrite past Git history to comply with Angular Style conventions.
4
4
  license: Apache-2.0
5
5
  metadata:
6
6
  author: Miya Daniel
7
- version: 0.4.0
7
+ version: 0.19.1
8
8
  ---
9
9
 
10
10
  # Rewrite Commits
@@ -31,7 +31,7 @@ metadata:
31
31
  ## Workflow
32
32
 
33
33
  1. `[Discover]` Run `git log --oneline -n <num>` to confirm the range. If commits were already pushed to remote `main`/`master`, warn and require secondary human confirmation.
34
- 2. `[Think] & [Try]` Create a temp branch. Never run bare interactive `git rebase -i`; prefer `git reset --soft HEAD~<N>` plus structured commits, or Node.js scripting (no hardcoded `sed -i`). Messages MUST follow Angular Style per the `git-commit` skill.
34
+ 2. `[Think/Try]` Create a temp branch. **MUST NOT** use bare `git rebase -i`; **SHOULD** use `git reset --soft HEAD~<N>` + structured commits or Node.js (no hardcoded `sed -i`). Messages MUST follow `git-commit`.
35
35
  3. `[Summarize]` Run `git log --oneline` for confirmation. On merge conflict, run `git rebase --abort`, STOP, and hand over to human decision or trigger `zoom-out`.
36
36
 
37
37
  Deep dive: <this-skill-dir>/references/workflow.md