harness-everything 0.20.1 → 0.20.3

package/.claude-plugin/marketplace.json

@@ -10,7 +10,7 @@
       "name": "harness-everything",
       "source": "./",
       "description": "Harness OS: an orchestrated agent operating system — tier routing, circuit breaker guardrails, verification gates, WAL session memory, and self-evolving workspace rules.",
-      "version": "0.20.1",
+      "version": "0.20.3",
       "author": {
         "name": "Miya Daniel"
       },

package/.claude-plugin/plugin.json

@@ -1,7 +1,7 @@
 {
   "name": "harness-everything",
   "description": "Harness OS: an orchestrated agent operating system — tier routing, circuit breaker guardrails, verification gates, WAL session memory, and self-evolving workspace rules.",
-  "version": "0.20.1",
+  "version": "0.20.3",
   "author": {
     "name": "Miya Daniel"
   },

package/CHANGELOG.md

@@ -2,6 +2,18 @@
 
 All notable changes to this project are documented in this file.
 
+## [0.20.3](https://github.com/dyphn1/Harness-everything/compare/v0.20.2...v0.20.3) (2026-09-22)
+
+### Bug Fixes
+
+* **distribution:** support windows cli shims ([f634e6d](https://github.com/dyphn1/Harness-everything/commit/f634e6d84fd8d0751604efa1d9b8acd5e7d90b8b)), closes [#221](https://github.com/dyphn1/Harness-everything/issues/221)
+
+## [0.20.2](https://github.com/dyphn1/Harness-everything/compare/v0.20.1...v0.20.2) (2026-09-22)
+
+### Bug Fixes
+
+* **distribution:** handle legacy claude flags ([2e09915](https://github.com/dyphn1/Harness-everything/commit/2e09915cff6c7cbf7cd10b08587df18264403a01)), closes [#221](https://github.com/dyphn1/Harness-everything/issues/221)
+
 ## [0.20.1](https://github.com/dyphn1/Harness-everything/compare/v0.20.0...v0.20.1) (2026-09-22)
 
 ### Bug Fixes

package/ci/mechanism-2ao-plugin-sync.test.js

@@ -2,8 +2,10 @@
 
 const assert = require('assert');
 const fs = require('fs');
+const os = require('os');
 const path = require('path');
 const {
+  createContext,
   findMarketplace,
   findPlugin,
   parseJsonOutput,
@@ -12,7 +14,7 @@ const {
 
 const ROOT = path.resolve(__dirname, '..');
 
-function fakeHost({ claudeInstalled = false, codexInstalled = false, claudeMarketplace = true, codexMarketplace = true, unknownClaudePluginState = false, unknownClaudeYesFlag = false } = {}) {
+function fakeHost({ claudeInstalled = false, codexInstalled = false, claudeMarketplace = true, codexMarketplace = true, unknownClaudePluginState = false, unknownClaudeYesFlag = false, unknownClaudeJsonFlag = false } = {}) {
   const calls = [];
   const state = {
     claudeInstalled,
@@ -47,6 +49,9 @@ function fakeHost({ claudeInstalled = false, codexInstalled = false, claudeMarke
       if (unknownClaudeYesFlag && joined.includes('--yes')) {
         return { status: 1, stdout: '', stderr: "error: unknown option '--yes'" };
       }
+      if (unknownClaudeJsonFlag && joined.includes('--json')) {
+        return { status: 1, stdout: '', stderr: "error: unknown option '--json'" };
+      }
       if (joined.startsWith('plugin install') || joined.startsWith('plugin update')) {
         state.claudeInstalled = true;
         return { status: 0, stdout: '{}', stderr: '' };
@@ -132,6 +137,17 @@ assert.strictEqual(findPlugin({ plugins: [{ id: 'harness-everything@harness-ever
   assert.ok(!updateCalls[1].args.includes('--yes'), 'compatibility retry must omit unsupported --yes');
 }
 
+{
+  const fake = fakeHost({ claudeInstalled: true, unknownClaudeYesFlag: true, unknownClaudeJsonFlag: true });
+  const result = runHost('claude', fake);
+  const updateCalls = callsFor(fake.calls, 'claude', 'plugin update');
+  assert.strictEqual(result.failed, 0, 'unsupported Claude --yes and --json must fall back to a compatible update command');
+  assert.strictEqual(updateCalls.length, 3, 'each unsupported option must cause one compatibility retry');
+  assert.ok(updateCalls[0].args.includes('--yes') && updateCalls[0].args.includes('--json'), 'first update attempt should use current flags');
+  assert.ok(!updateCalls[1].args.includes('--yes') && updateCalls[1].args.includes('--json'), 'second attempt should omit only unsupported --yes');
+  assert.ok(!updateCalls[2].args.includes('--yes') && !updateCalls[2].args.includes('--json'), 'final attempt must omit both unsupported flags');
+}
+
 {
   const fake = fakeHost({ codexInstalled: false });
   const result = runHost('codex', fake);
@@ -164,6 +180,21 @@ assert.strictEqual(findPlugin({ plugins: [{ id: 'harness-everything@harness-ever
   assert.strictEqual(result.failed, 0);
 }
 
+if (process.platform === 'win32') {
+  const fixtureDir = fs.mkdtempSync(path.join(os.tmpdir(), 'harness-plugin-sync-command-'));
+  const originalPath = process.env.PATH;
+  try {
+    fs.writeFileSync(path.join(fixtureDir, 'harness-codex-fixture.cmd'), '@echo off\r\necho codex-cli fixture\r\n');
+    process.env.PATH = `${fixtureDir};${originalPath || ''}`;
+    const context = createContext();
+    assert.strictEqual(context.commandAvailable('harness-codex-fixture'), true, 'Windows .cmd CLI shims must be detected');
+  } finally {
+    if (originalPath === undefined) delete process.env.PATH;
+    else process.env.PATH = originalPath;
+    fs.rmSync(fixtureDir, { recursive: true, force: true });
+  }
+}
+
 for (const wrapper of ['scripts/plugin-sync.sh', 'scripts/plugin-sync.ps1']) {
   const text = fs.readFileSync(path.join(ROOT, wrapper), 'utf8');
   assert.match(text, /plugin-sync\.js/);

package/docs/platform-capabilities.md

@@ -84,6 +84,8 @@ The command detects Claude Code and Codex independently, ensures the Harness mar
 
 The installed branch is intentionally an update branch even when the current release is already the newest version; the host command may report “already latest.” Codex marketplace upgrade is the current native refresh operation; the command does not edit private cache paths or `config.toml`. These are deterministic command/state tests, not live-host evidence, so `liveHostVerification` remains `Unknown` in the matrix.
 
+On Windows, the synchronizer retries through `ComSpec` when Node cannot directly start a CLI shim, so npm-installed `codex.cmd` and `claude.cmd` commands remain discoverable when the wrapper is launched from Git Bash.
+
 ### Explicit Codex user-hook compatibility fallback
 
 Current Codex documentation supports plugin-bundled hooks, so native plugin mounting remains the preferred path. Some host/source combinations have nevertheless failed to expose enabled plugin hooks for review/entry attribution (#122 and upstream Codex reports). Harness therefore provides an **explicit compatibility fallback**, not an automatic replacement for native plugin hooks:

package/opencode-plugin/plugin.json

@@ -1,7 +1,7 @@
 {
   "name": "harness-enforcement",
   "description": "Repository inventory for the opencode enforcement plugin and its standalone helper",
-  "version": "0.20.1",
+  "version": "0.20.3",
   "runtime": "index.mjs",
   "hooks": {
     "verify": "hooks/verify.js"

package/package.json

@@ -1,6 +1,6 @@
 {
   "name": "harness-everything",
-  "version": "0.20.1",
+  "version": "0.20.3",
   "description": "Harness OS: An Orchestrated Agent Operating System for AI-driven Development",
   "main": "harness-everything/scripts/bootstrap.js",
   "bin": {

package/plugins/harness-everything/.codex-plugin/plugin.json

@@ -1,6 +1,6 @@
 {
   "name": "harness-everything",
-  "version": "0.20.1",
+  "version": "0.20.3",
   "description": "Invariant-first engineering harness for routing, verification, and failure recovery while preserving agent autonomy.",
   "author": {
     "name": "Miya Daniel",

package/plugins/harness-everything/plugin.json

@@ -1,7 +1,7 @@
 {
   "$schema": "https://agent-plugins.org/schemas/1.0.0/plugin.schema.json",
   "name": "harness-everything",
-  "version": "0.20.1",
+  "version": "0.20.3",
   "description": "Invariant-first engineering harness for routing, verification, and failure recovery while preserving agent autonomy.",
   "author": {
     "name": "Miya Daniel",

package/sbom.cdx.json

@@ -2,23 +2,23 @@
   "$schema": "https://cyclonedx.org/schema/bom-1.7.schema.json",
   "bomFormat": "CycloneDX",
   "specVersion": "1.7",
-  "serialNumber": "urn:uuid:02942ee4-18db-5ce8-9307-59cd8d7ba31a",
+  "serialNumber": "urn:uuid:c82181bb-3272-5951-8990-f785d038f412",
   "version": 1,
   "metadata": {
-    "timestamp": "2026-09-22T01:14:56.692Z",
+    "timestamp": "2026-09-22T01:49:40.805Z",
     "tools": [
       {
         "vendor": "Harness Everything",
         "name": "generate-sbom.js",
-        "version": "0.20.1"
+        "version": "0.20.3"
       }
     ],
     "component": {
       "type": "application",
-      "bom-ref": "pkg:npm/harness-everything@0.20.1",
+      "bom-ref": "pkg:npm/harness-everything@0.20.3",
       "name": "harness-everything",
-      "version": "0.20.1",
-      "purl": "pkg:npm/harness-everything@0.20.1"
+      "version": "0.20.3",
+      "purl": "pkg:npm/harness-everything@0.20.3"
     }
   },
   "components": [
@@ -1999,7 +1999,7 @@
       ]
     },
     {
-      "ref": "pkg:npm/harness-everything@0.20.1",
+      "ref": "pkg:npm/harness-everything@0.20.3",
       "dependsOn": [
         "pkg:npm/%40commitlint/cli@19.8.1",
         "pkg:npm/%40commitlint/config-conventional@19.8.1",

package/scripts/plugin-sync.js

@@ -20,11 +20,21 @@ const DEFAULTS = Object.freeze({
 });
 
 function defaultRunner(command, args) {
-  const result = spawnSync(command, args, {
+  const options = {
     encoding: 'utf8',
     stdio: ['ignore', 'pipe', 'pipe'],
     windowsHide: true
-  });
+  };
+  let result = spawnSync(command, args, options);
+
+  // npm-installed Windows CLIs are often .cmd shims. Node can report those
+  // shims as an executable-resolution error when this script is launched from
+  // Git Bash, even though the same command is available to the shell.
+  if (process.platform === 'win32' && result.error && ['EACCES', 'EINVAL', 'ENOENT'].includes(result.error.code)) {
+    const comspec = process.env.ComSpec || process.env.COMSPEC || 'cmd.exe';
+    result = spawnSync(comspec, ['/d', '/c', command, ...args], options);
+  }
+
   return {
     status: result.status === null ? 1 : result.status,
     stdout: result.stdout || '',
@@ -191,25 +201,27 @@ function runClaudePluginMutation(context, action, pluginId) {
     'plugin', action, pluginId,
     '--scope', 'user'
   ];
-  const currentArgs = [...baseArgs, '--yes', '--json'];
-  const compatibleArgs = [...baseArgs, '--json'];
-  const current = invoke(context, 'claude', currentArgs, {
-    mutate: true,
-    label: `claude plugin ${action}`,
-    warnOnFailure: false
-  });
-  if (current.status === 0) return current;
+  let args = [...baseArgs, '--yes', '--json'];
+  let attempt = 0;
+
+  while (true) {
+    const result = invoke(context, 'claude', args, {
+      mutate: true,
+      label: attempt === 0 ? `claude plugin ${action}` : `claude plugin ${action} compatibility retry`,
+      warnOnFailure: false
+    });
+    if (result.status === 0) return result;
+
+    const unsupported = ['--yes', '--json'].find(option => args.includes(option) && hasUnknownOption(result, option));
+    if (!unsupported) {
+      context.warn(`[failed] ${commandLine('claude', args)}\n  ${resultError(result)}`);
+      return result;
+    }
 
-  if (!hasUnknownOption(current, '--yes')) {
-    context.warn(`[failed] ${commandLine('claude', currentArgs)}\n  ${resultError(current)}`);
-    return current;
+    args = args.filter(arg => arg !== unsupported);
+    attempt += 1;
+    context.warn(`[notice] Claude CLI does not support ${unsupported}; retrying ${action} without that option.`);
   }
-
-  context.warn(`[notice] Claude CLI does not support --yes; retrying ${action} without that option.`);
-  return invoke(context, 'claude', compatibleArgs, {
-    mutate: true,
-    label: `claude plugin ${action} compatibility retry`
-  });
 }
 
 function listState(context, { command, jsonArgs, plainArgs, detectJson, detectText }) {