harness-everything 0.20.2 → 0.20.3

package/.claude-plugin/marketplace.json

@@ -10,7 +10,7 @@
       "name": "harness-everything",
       "source": "./",
       "description": "Harness OS: an orchestrated agent operating system — tier routing, circuit breaker guardrails, verification gates, WAL session memory, and self-evolving workspace rules.",
-      "version": "0.20.2",
+      "version": "0.20.3",
       "author": {
         "name": "Miya Daniel"
       },

package/.claude-plugin/plugin.json

@@ -1,7 +1,7 @@
 {
   "name": "harness-everything",
   "description": "Harness OS: an orchestrated agent operating system — tier routing, circuit breaker guardrails, verification gates, WAL session memory, and self-evolving workspace rules.",
-  "version": "0.20.2",
+  "version": "0.20.3",
   "author": {
     "name": "Miya Daniel"
   },

package/CHANGELOG.md

@@ -2,6 +2,12 @@
 
 All notable changes to this project are documented in this file.
 
+## [0.20.3](https://github.com/dyphn1/Harness-everything/compare/v0.20.2...v0.20.3) (2026-09-22)
+
+### Bug Fixes
+
+* **distribution:** support windows cli shims ([f634e6d](https://github.com/dyphn1/Harness-everything/commit/f634e6d84fd8d0751604efa1d9b8acd5e7d90b8b)), closes [#221](https://github.com/dyphn1/Harness-everything/issues/221)
+
 ## [0.20.2](https://github.com/dyphn1/Harness-everything/compare/v0.20.1...v0.20.2) (2026-09-22)
 
 ### Bug Fixes

package/ci/mechanism-2ao-plugin-sync.test.js

@@ -2,8 +2,10 @@
 
 const assert = require('assert');
 const fs = require('fs');
+const os = require('os');
 const path = require('path');
 const {
+  createContext,
   findMarketplace,
   findPlugin,
   parseJsonOutput,
@@ -178,6 +180,21 @@ assert.strictEqual(findPlugin({ plugins: [{ id: 'harness-everything@harness-ever
   assert.strictEqual(result.failed, 0);
 }
 
+if (process.platform === 'win32') {
+  const fixtureDir = fs.mkdtempSync(path.join(os.tmpdir(), 'harness-plugin-sync-command-'));
+  const originalPath = process.env.PATH;
+  try {
+    fs.writeFileSync(path.join(fixtureDir, 'harness-codex-fixture.cmd'), '@echo off\r\necho codex-cli fixture\r\n');
+    process.env.PATH = `${fixtureDir};${originalPath || ''}`;
+    const context = createContext();
+    assert.strictEqual(context.commandAvailable('harness-codex-fixture'), true, 'Windows .cmd CLI shims must be detected');
+  } finally {
+    if (originalPath === undefined) delete process.env.PATH;
+    else process.env.PATH = originalPath;
+    fs.rmSync(fixtureDir, { recursive: true, force: true });
+  }
+}
+
 for (const wrapper of ['scripts/plugin-sync.sh', 'scripts/plugin-sync.ps1']) {
   const text = fs.readFileSync(path.join(ROOT, wrapper), 'utf8');
   assert.match(text, /plugin-sync\.js/);

package/docs/platform-capabilities.md

@@ -84,6 +84,8 @@ The command detects Claude Code and Codex independently, ensures the Harness mar
 
 The installed branch is intentionally an update branch even when the current release is already the newest version; the host command may report “already latest.” Codex marketplace upgrade is the current native refresh operation; the command does not edit private cache paths or `config.toml`. These are deterministic command/state tests, not live-host evidence, so `liveHostVerification` remains `Unknown` in the matrix.
 
+On Windows, the synchronizer retries through `ComSpec` when Node cannot directly start a CLI shim, so npm-installed `codex.cmd` and `claude.cmd` commands remain discoverable when the wrapper is launched from Git Bash.
+
 ### Explicit Codex user-hook compatibility fallback
 
 Current Codex documentation supports plugin-bundled hooks, so native plugin mounting remains the preferred path. Some host/source combinations have nevertheless failed to expose enabled plugin hooks for review/entry attribution (#122 and upstream Codex reports). Harness therefore provides an **explicit compatibility fallback**, not an automatic replacement for native plugin hooks:

package/opencode-plugin/plugin.json

@@ -1,7 +1,7 @@
 {
   "name": "harness-enforcement",
   "description": "Repository inventory for the opencode enforcement plugin and its standalone helper",
-  "version": "0.20.2",
+  "version": "0.20.3",
   "runtime": "index.mjs",
   "hooks": {
     "verify": "hooks/verify.js"

package/package.json

@@ -1,6 +1,6 @@
 {
   "name": "harness-everything",
-  "version": "0.20.2",
+  "version": "0.20.3",
   "description": "Harness OS: An Orchestrated Agent Operating System for AI-driven Development",
   "main": "harness-everything/scripts/bootstrap.js",
   "bin": {

package/plugins/harness-everything/.codex-plugin/plugin.json

@@ -1,6 +1,6 @@
 {
   "name": "harness-everything",
-  "version": "0.20.2",
+  "version": "0.20.3",
   "description": "Invariant-first engineering harness for routing, verification, and failure recovery while preserving agent autonomy.",
   "author": {
     "name": "Miya Daniel",

package/plugins/harness-everything/plugin.json

@@ -1,7 +1,7 @@
 {
   "$schema": "https://agent-plugins.org/schemas/1.0.0/plugin.schema.json",
   "name": "harness-everything",
-  "version": "0.20.2",
+  "version": "0.20.3",
   "description": "Invariant-first engineering harness for routing, verification, and failure recovery while preserving agent autonomy.",
   "author": {
     "name": "Miya Daniel",

package/sbom.cdx.json

@@ -2,23 +2,23 @@
   "$schema": "https://cyclonedx.org/schema/bom-1.7.schema.json",
   "bomFormat": "CycloneDX",
   "specVersion": "1.7",
-  "serialNumber": "urn:uuid:338bfdd5-e2e1-5e75-b6b1-f114ba76e2f5",
+  "serialNumber": "urn:uuid:c82181bb-3272-5951-8990-f785d038f412",
   "version": 1,
   "metadata": {
-    "timestamp": "2026-09-22T01:26:05.707Z",
+    "timestamp": "2026-09-22T01:49:40.805Z",
     "tools": [
       {
         "vendor": "Harness Everything",
         "name": "generate-sbom.js",
-        "version": "0.20.2"
+        "version": "0.20.3"
       }
     ],
     "component": {
       "type": "application",
-      "bom-ref": "pkg:npm/harness-everything@0.20.2",
+      "bom-ref": "pkg:npm/harness-everything@0.20.3",
       "name": "harness-everything",
-      "version": "0.20.2",
-      "purl": "pkg:npm/harness-everything@0.20.2"
+      "version": "0.20.3",
+      "purl": "pkg:npm/harness-everything@0.20.3"
     }
   },
   "components": [
@@ -1999,7 +1999,7 @@
       ]
     },
     {
-      "ref": "pkg:npm/harness-everything@0.20.2",
+      "ref": "pkg:npm/harness-everything@0.20.3",
       "dependsOn": [
         "pkg:npm/%40commitlint/cli@19.8.1",
         "pkg:npm/%40commitlint/config-conventional@19.8.1",

package/scripts/plugin-sync.js

@@ -20,11 +20,21 @@ const DEFAULTS = Object.freeze({
 });
 
 function defaultRunner(command, args) {
-  const result = spawnSync(command, args, {
+  const options = {
     encoding: 'utf8',
     stdio: ['ignore', 'pipe', 'pipe'],
     windowsHide: true
-  });
+  };
+  let result = spawnSync(command, args, options);
+
+  // npm-installed Windows CLIs are often .cmd shims. Node can report those
+  // shims as an executable-resolution error when this script is launched from
+  // Git Bash, even though the same command is available to the shell.
+  if (process.platform === 'win32' && result.error && ['EACCES', 'EINVAL', 'ENOENT'].includes(result.error.code)) {
+    const comspec = process.env.ComSpec || process.env.COMSPEC || 'cmd.exe';
+    result = spawnSync(comspec, ['/d', '/c', command, ...args], options);
+  }
+
   return {
     status: result.status === null ? 1 : result.status,
     stdout: result.stdout || '',