harness-everything 0.31.1 → 0.31.2

package/.claude-plugin/marketplace.json

@@ -10,7 +10,7 @@
       "name": "harness-everything",
       "source": "./",
       "description": "Harness OS: an orchestrated agent operating system — tier routing, circuit breaker guardrails, verification gates, WAL session memory, and self-evolving workspace rules.",
-      "version": "0.31.1",
+      "version": "0.31.2",
       "author": {
         "name": "Miya Daniel"
       },

package/.claude-plugin/plugin.json

@@ -1,7 +1,7 @@
 {
   "name": "harness-everything",
   "description": "Harness OS: an orchestrated agent operating system — tier routing, circuit breaker guardrails, verification gates, WAL session memory, and self-evolving workspace rules.",
-  "version": "0.31.1",
+  "version": "0.31.2",
   "author": {
     "name": "Miya Daniel"
   },

package/CHANGELOG.md

@@ -2,6 +2,12 @@
 
 All notable changes to this project are documented in this file.
 
+## [0.31.2](https://github.com/dyphn1/Harness-everything/compare/v0.31.1...v0.31.2) (2026-10-15)
+
+### Bug Fixes
+
+* **cli:** support successful workflow disposition help ([2bf55f9](https://github.com/dyphn1/Harness-everything/commit/2bf55f92d9a6ffab5e41152dfb38a5ef01659f05)), closes [#310](https://github.com/dyphn1/Harness-everything/issues/310) [#310](https://github.com/dyphn1/Harness-everything/issues/310)
+
 ## [0.31.1](https://github.com/dyphn1/Harness-everything/compare/v0.31.0...v0.31.1) (2026-10-13)
 
 ### Bug Fixes
@@ -31,8 +37,13 @@ All notable changes to this project are documented in this file.
 * **workflow:** reject present non-array required/optional binding declarations before accepting a requirement plan, preserving workflow state on invalid input (#303 review).
 * **test:** isolate verification fixtures from an inherited project-check recursion guard while preserving explicit guard coverage.
 
+### Security
+
+* **deps:** update the locked `fast-uri` transitive dependency to patched version 3.1.8 (#309).
+
 ### Bug Fixes
 
+* **workflow:** make `workflow-disposition --help` and `-h` print usage successfully (#310).
 * **codex:** keep compatibility hooks and session labels in sync
 * **verify:** recognize a validated in-root host `cd <workspace> && <check>` prelude (Claude Code Windows Bash) as verification evidence for exactly one plain check; chaining, redirection, substitution, and out-of-root targets still never count, and verification evidence now requires a confirmed `PostToolUse` or zero exit (#306). Only CDPATH-stable `cd` targets (absolute or explicit `./`/`../`) are accepted, and a declared `.harness/verify.json` check counts only when run in its declared `cwd` (#307 review).
 

package/ci/mechanism-2as-workflow-disposition-help.test.js

@@ -0,0 +1,41 @@
+'use strict';
+
+const assert = require('assert');
+const fs = require('fs');
+const os = require('os');
+const path = require('path');
+const { spawnSync } = require('child_process');
+
+const ROOT = path.resolve(__dirname, '..');
+const scripts = [
+  path.join(ROOT, 'hooks/scripts/workflow-disposition.js'),
+  path.join(ROOT, 'plugins/harness-everything/hooks/scripts/workflow-disposition.js'),
+];
+const stateHome = fs.mkdtempSync(path.join(os.tmpdir(), 'harness-workflow-help-'));
+
+function run(script, args) {
+  return spawnSync(process.execPath, [script, ...args], {
+    cwd: ROOT,
+    encoding: 'utf8',
+    env: { ...process.env, HARNESS_STATE_HOME: stateHome },
+  });
+}
+
+for (const script of scripts) {
+  for (const flag of ['--help', '-h']) {
+    const result = run(script, [flag]);
+    assert.strictEqual(result.status, 0, `${path.relative(ROOT, script)} ${flag} exits successfully: ${result.stderr}`);
+    assert.match(result.stdout, /^Usage: workflow-disposition\.js </);
+    assert.strictEqual(result.stderr, '', 'help is written to stdout without an error');
+    assert.deepStrictEqual(fs.readdirSync(stateHome), [], 'help does not read or create session state');
+  }
+
+  for (const args of [[], ['unknown']]) {
+    const result = run(script, args);
+    assert.strictEqual(result.status, 2, `${path.relative(ROOT, script)} invalid invocation retains exit 2`);
+    assert.match(result.stderr, /Usage: workflow-disposition\.js/);
+  }
+}
+
+fs.rmSync(stateHome, { recursive: true, force: true });
+console.log('PASS workflow-disposition help is successful, read-only, and packaged');

package/hooks/scripts/workflow-disposition.js

@@ -149,6 +149,10 @@ function activatePlan(workflow, plan) {
 }
 
 function main() {
+  if (process.argv[2] === '--help' || process.argv[2] === '-h') {
+    process.stdout.write(usage() + '\n');
+    return;
+  }
   const args = parseArgs(process.argv.slice(2));
   if (!WORKFLOW_CONTROLLER_COMMANDS.has(args.command)) throw new Error(usage());
   const sessionId = args.sessionId || readCurrentSession(getWorkspaceRoot());

package/opencode-plugin/plugin.json

@@ -1,7 +1,7 @@
 {
   "name": "harness-enforcement",
   "description": "Repository inventory for the opencode enforcement plugin and its standalone helper",
-  "version": "0.31.1",
+  "version": "0.31.2",
   "runtime": "index.mjs",
   "hooks": {
     "verify": "hooks/verify.js"

package/package.json

@@ -1,6 +1,6 @@
 {
   "name": "harness-everything",
-  "version": "0.31.1",
+  "version": "0.31.2",
   "description": "Harness OS: An Orchestrated Agent Operating System for AI-driven Development",
   "main": "harness-everything/scripts/bootstrap.js",
   "bin": {

package/plugins/harness-everything/.codex-plugin/plugin.json

@@ -1,6 +1,6 @@
 {
   "name": "harness-everything",
-  "version": "0.31.1",
+  "version": "0.31.2",
   "description": "Invariant-first engineering harness for routing, verification, and failure recovery while preserving agent autonomy.",
   "author": {
     "name": "Miya Daniel",

package/plugins/harness-everything/hooks/scripts/workflow-disposition.js

@@ -149,6 +149,10 @@ function activatePlan(workflow, plan) {
 }
 
 function main() {
+  if (process.argv[2] === '--help' || process.argv[2] === '-h') {
+    process.stdout.write(usage() + '\n');
+    return;
+  }
   const args = parseArgs(process.argv.slice(2));
   if (!WORKFLOW_CONTROLLER_COMMANDS.has(args.command)) throw new Error(usage());
   const sessionId = args.sessionId || readCurrentSession(getWorkspaceRoot());

package/plugins/harness-everything/plugin.json

@@ -1,7 +1,7 @@
 {
   "$schema": "https://agent-plugins.org/schemas/1.0.0/plugin.schema.json",
   "name": "harness-everything",
-  "version": "0.31.1",
+  "version": "0.31.2",
   "description": "Invariant-first engineering harness for routing, verification, and failure recovery while preserving agent autonomy.",
   "author": {
     "name": "Miya Daniel",

package/sbom.cdx.json

@@ -2,23 +2,23 @@
   "$schema": "https://cyclonedx.org/schema/bom-1.7.schema.json",
   "bomFormat": "CycloneDX",
   "specVersion": "1.7",
-  "serialNumber": "urn:uuid:1eaedc2c-236e-55be-b84d-9f710a2e88a2",
+  "serialNumber": "urn:uuid:9d3ce484-1be2-5a01-aaf1-830f69f479f8",
   "version": 1,
   "metadata": {
-    "timestamp": "2026-10-13T09:35:47.413Z",
+    "timestamp": "2026-10-15T15:15:14.070Z",
     "tools": [
       {
         "vendor": "Harness Everything",
         "name": "generate-sbom.js",
-        "version": "0.31.1"
+        "version": "0.31.2"
       }
     ],
     "component": {
       "type": "application",
-      "bom-ref": "pkg:npm/harness-everything@0.31.1",
+      "bom-ref": "pkg:npm/harness-everything@0.31.2",
       "name": "harness-everything",
-      "version": "0.31.1",
-      "purl": "pkg:npm/harness-everything@0.31.1"
+      "version": "0.31.2",
+      "purl": "pkg:npm/harness-everything@0.31.2"
     }
   },
   "components": [
@@ -920,15 +920,15 @@
     },
     {
       "type": "library",
-      "bom-ref": "pkg:npm/fast-uri@3.1.6",
+      "bom-ref": "pkg:npm/fast-uri@3.1.8",
       "name": "fast-uri",
-      "version": "3.1.6",
+      "version": "3.1.8",
       "scope": "excluded",
-      "purl": "pkg:npm/fast-uri@3.1.6",
+      "purl": "pkg:npm/fast-uri@3.1.8",
       "hashes": [
         {
           "alg": "SHA-512",
-          "content": "7Ical1vFEMr0onbVzEDIreM22I4khW+fzyQPwvAFWBp1iwdshSZRsL4jjRvPG9JP1uiqMHRto+YU6R2/CzDz5Q=="
+          "content": "GZMtZUTNRpOVIECoXwLNZS5xUGE+mVNbTB8h/7Rwh2TFWcBQiPzTgyZi05BF9UMZKkLJv8XBRJTlU7zg8+ZfMg=="
         }
       ]
     },
@@ -1896,7 +1896,7 @@
       "ref": "pkg:npm/ajv@8.20.0",
       "dependsOn": [
         "pkg:npm/fast-deep-equal@3.1.3",
-        "pkg:npm/fast-uri@3.1.6",
+        "pkg:npm/fast-uri@3.1.8",
         "pkg:npm/json-schema-traverse@1.0.0",
         "pkg:npm/require-from-string@2.0.2"
       ]
@@ -1999,7 +1999,7 @@
       ]
     },
     {
-      "ref": "pkg:npm/harness-everything@0.31.1",
+      "ref": "pkg:npm/harness-everything@0.31.2",
       "dependsOn": [
         "pkg:npm/%40commitlint/cli@19.8.1",
         "pkg:npm/%40commitlint/config-conventional@19.8.1",