harnessed 1.0.0

package/manifests/skill-packs/ui-ux-pro-max.yaml

@@ -0,0 +1,61 @@
+# yaml-language-server: $schema=../../schemas/manifest.v1.schema.json
+apiVersion: harnessed/v1
+kind: Manifest
+metadata:
+  name: ui-ux-pro-max
+  display_name: ui-ux-pro-max (midwayjs/midway)
+  description: Data-driven, standards-based UI/UX expert skill (Codex skill ported via git-clone-with-setup; v4-next branch).
+  upstream:
+    source: midwayjs/midway
+    homepage: https://github.com/midwayjs/midway/tree/v4-next/.codex/skills/ui-ux-pro-max
+    repository: https://github.com/midwayjs/midway.git
+    license: MIT
+    notice: |
+      ui-ux-pro-max skill from midwayjs/midway v4-next branch (Codex skill ported to Claude Code skills/).
+      D1.3-5 path B 主推 (avoids vercel-labs/skills issue #373 update break on non-main branches).
+spec:
+  type: cc-skill-pack
+  component_type: command
+  category: design
+  install_type: git
+  install:
+    method: git-clone-with-setup
+    cmd: "rm -rf ~/.claude/skills/.cache/midway-uiux && git clone --depth 1 --branch v4-next https://github.com/midwayjs/midway.git ~/.claude/skills/.cache/midway-uiux && mkdir -p ~/.claude/skills && cp -R ~/.claude/skills/.cache/midway-uiux/.codex/skills/ui-ux-pro-max ~/.claude/skills/ui-ux-pro-max && rm -rf ~/.claude/skills/.cache/midway-uiux"
+    git_ref: e89d70e4bcd0ae04709a773db549cf61fcf813ac
+    idempotent_check: "test -f ~/.claude/skills/ui-ux-pro-max/SKILL.md"
+  verify:
+    cmd: "test -f ~/.claude/skills/ui-ux-pro-max/SKILL.md"
+    timeout_ms: 5000
+    expected_exit_code: 0
+  uninstall:
+    cmd: "rm -rf ~/.claude/skills/ui-ux-pro-max"
+    cleanup_paths:
+      - ~/.claude/skills/ui-ux-pro-max
+  upstream_health:
+    stability: beta
+    last_check: "2026-05-13"
+    last_known_good_version: v4-next-e89d70e4bcd0
+    fallback_action: warn
+  signed_by: easyinplay
+  platforms:
+    - linux
+    - darwin
+    - win32
+  decision_rules:
+    trigger: "user 请求 UI/UX 设计 / 前端组件 / design system / 数据驱动可视化"
+    default_expert: ui-ux-pro-max
+    arbitration_rule: "ui-ux-pro-max 出主方案 (数据驱动 / 标准化); frontend-design 补 layout / 动效 / 装饰细节"
+    override_signals:
+      - phrase: "做出风格"
+        use: frontend-design
+      - phrase: "experimental"
+        use: frontend-design
+      - phrase: "design-led"
+        use: frontend-design
+    # Phase 2.3 W2 T2.5 — B-17 per-manifest hint 冗余守护层 (SSOT 主导 routing/decision_rules.yaml — D-04)
+    do_not_use_when:
+      - 做出风格
+      - 独创
+      - 风格化
+      - design-led
+    if_rejected_use: frontend-design

package/manifests/tools/chrome-devtools-mcp.yaml

@@ -0,0 +1,44 @@
+# yaml-language-server: $schema=../../schemas/manifest.v1.schema.json
+apiVersion: harnessed/v1
+kind: Manifest
+metadata:
+  name: chrome-devtools-mcp
+  display_name: Chrome DevTools MCP
+  description: Performance / a11y / memory-leak diagnostics via Chrome DevTools MCP (LCP / Core Web Vitals / ARIA / heap snapshot).
+  upstream:
+    source: chrome-devtools-mcp
+    homepage: https://github.com/ChromeDevTools/chrome-devtools-mcp
+    repository: https://github.com/ChromeDevTools/chrome-devtools-mcp.git
+    license: Apache-2.0
+    notice: |
+      chrome-devtools-mcp by ChromeDevTools team (Apache-2.0, npm stdio MCP).
+      Method = mcp-stdio-add (research § 3.3: no HTTP endpoint; matches tavily-mcp shape).
+      testing category — perf / a11y / memory-leak; routed via `perf-a11y-memory` rule.
+spec:
+  type: mcp-npm
+  component_type: mcp-tool
+  category: testing
+  install_type: mcp
+  install:
+    method: mcp-stdio-add
+    cmd: "claude mcp add --scope project --transport stdio chrome-devtools-mcp -- npx --yes chrome-devtools-mcp@^0.1.0"
+    npm_version: ^0.1.0
+    idempotent_check: "claude mcp list | grep -q chrome-devtools-mcp"
+  verify:
+    cmd: "claude mcp list | grep -q chrome-devtools-mcp"
+    timeout_ms: 10000
+  uninstall:
+    cmd: "claude mcp remove --scope project chrome-devtools-mcp"
+  upstream_health:
+    stability: stable
+    last_check: "2026-05-16"
+    last_known_good_version: "0.1.0"
+    fallback_action: warn
+  signed_by: easyinplay
+  platforms:
+    - linux
+    - darwin
+    - win32
+  decision_rules:
+    trigger: "perf / a11y / memory-leak / LCP / Core Web Vitals"
+    default_expert: chrome-devtools-mcp

package/manifests/tools/ctx7.yaml

@@ -0,0 +1,39 @@
+# yaml-language-server: $schema=../../schemas/manifest.v1.schema.json
+apiVersion: harnessed/v1
+kind: Manifest
+metadata:
+  name: ctx7
+  display_name: ctx7 CLI
+  description: Up-to-date library / framework documentation fetcher (Upstash). Bash CLI, two-step library + docs.
+  upstream:
+    source: ctx7
+    homepage: https://context7.com
+    repository: https://github.com/upstash/context7.git
+    license: MIT
+    notice: ctx7 by Upstash (official), used as on-demand library doc retriever in harnessed plan-feature workflow.
+spec:
+  type: cli-npm
+  component_type: cli-binary
+  category: search
+  install_type: npm
+  install:
+    method: npm-cli
+    cmd: "npm install -g ctx7"
+    npm_version: ^0.4.0
+    idempotent_check: "command -v ctx7"
+  verify:
+    cmd: "ctx7 --version"
+    timeout_ms: 5000
+    expected_exit_code: 0
+  uninstall:
+    cmd: "npm uninstall -g ctx7"
+  upstream_health:
+    stability: stable
+    last_check: "2026-05-11"
+    last_known_good_version: 0.4.x
+    fallback_action: warn
+  signed_by: easyinplay
+  platforms:
+    - linux
+    - darwin
+    - win32

package/manifests/tools/exa-mcp.yaml

@@ -0,0 +1,39 @@
+# yaml-language-server: $schema=../../schemas/manifest.v1.schema.json
+apiVersion: harnessed/v1
+kind: Manifest
+metadata:
+  name: exa-mcp
+  display_name: Exa MCP
+  description: Neural-search MCP for descriptive queries / academic papers / batch URL fetch (web_fetch_exa).
+  upstream:
+    source: exa-mcp-server
+    homepage: https://docs.exa.ai/reference/exa-mcp
+    repository: https://github.com/exa-labs/exa-mcp-server.git
+    license: MIT
+    notice: exa-mcp-server by exa-labs (official), used as semantic-search MCP per harnessed routing rules.
+spec:
+  type: mcp-npm
+  component_type: mcp-tool
+  category: search
+  install_type: mcp
+  install:
+    method: mcp-stdio-add
+    cmd: "claude mcp add --scope project --transport stdio exa-mcp -- npx --yes exa-mcp-server@^3.2.0"
+    npm_version: ^3.2.0
+    idempotent_check: "claude mcp list | grep -q exa"
+  verify:
+    cmd: "claude mcp list | grep -q exa"
+    timeout_ms: 10000
+  uninstall:
+    cmd: "claude mcp remove --scope project exa-mcp"
+  upstream_health:
+    stability: stable
+    last_check: "2026-05-11"
+    last_known_good_version: 3.2.1
+    fallback_action: use_alternative
+    alternative: tavily-mcp
+  signed_by: easyinplay
+  platforms:
+    - linux
+    - darwin
+    - win32

package/manifests/tools/playwright-test.yaml

@@ -0,0 +1,47 @@
+# yaml-language-server: $schema=../../schemas/manifest.v1.schema.json
+apiVersion: harnessed/v1
+kind: Manifest
+metadata:
+  name: playwright-test
+  display_name: Playwright Test (microsoft/playwright-cli)
+  description: End-to-end browser test framework. Frontend e2e (TS / React / Vue) default per decision_rules e2e-default.
+  upstream:
+    source: github.com/microsoft/playwright-cli
+    homepage: https://github.com/microsoft/playwright-cli
+    repository: https://github.com/microsoft/playwright-cli.git
+    license: Apache-2.0
+    notice: |
+      playwright-test skill from microsoft/playwright-cli (Microsoft official, Apache-2.0; .planning/research/v0.2.0-extensions.md § 3.2).
+      testing category — frontend e2e default; routed via decision_rules.yaml `e2e-default` rule (priority 50 at L107-114).
+      perf / a11y / memory-leak forbidden — those route to chrome-devtools-mcp per `perf-a11y-memory` rule (L79-95).
+spec:
+  type: cc-skill-pack
+  component_type: command
+  category: testing
+  install_type: skill
+  install:
+    method: npx-skill-installer
+    cmd: "npx --yes skills@1.5.7 add microsoft/playwright-cli --copy --global"
+    npm_version: ^1.5.7
+    idempotent_check: "test -f ~/.claude/skills/playwright-cli/SKILL.md"
+  verify:
+    cmd: "test -f ~/.claude/skills/playwright-cli/SKILL.md"
+    timeout_ms: 5000
+    expected_exit_code: 0
+  uninstall:
+    cmd: "rm -rf ~/.claude/skills/playwright-cli"
+    cleanup_paths:
+      - ~/.claude/skills/playwright-cli
+  upstream_health:
+    stability: stable
+    last_check: "2026-05-16"
+    last_known_good_version: "1.5.7"
+    fallback_action: warn
+  signed_by: easyinplay
+  platforms:
+    - linux
+    - darwin
+    - win32
+  decision_rules:
+    trigger: "e2e test / browser test / TypeScript frontend e2e"
+    default_expert: playwright-test

package/manifests/tools/ralph-loop.yaml

@@ -0,0 +1,46 @@
+# yaml-language-server: $schema=../../schemas/manifest.v1.schema.json
+#
+# NOTE: spec.install.cmd is a Claude Code REPL slash command, NOT a shell command.
+# cc-plugin-marketplace install method's actual mechanism is undefined for
+# headless installer execution. Phase 1.2 plan-phase will resolve via one of:
+#   (A) Auto-print prompt + require user to paste into CC REPL (semi-automated);
+#   (B) Headless `claude plugin install <name>` CLI if/when CC ships it;
+#   (C) Defer ralph-loop to v0.2+ (until headless mechanism exists).
+# Tracked: progress.md § B F20.
+apiVersion: harnessed/v1
+kind: Manifest
+metadata:
+  name: ralph-loop
+  display_name: ralph-loop
+  description: Sub-task delivery loop with completion-promise (Anthropic-official). Windows requires jq + Git Bash.
+  upstream:
+    source: ralph-loop
+    homepage: https://github.com/anthropics/claude-plugins-official/tree/main/plugins/ralph-loop
+    repository: https://github.com/anthropics/claude-plugins-official.git
+    license: MIT
+    notice: ralph-loop maintained by Anthropic in claude-plugins-official, used as sub-task delivery guarantor in harnessed.
+spec:
+  type: cc-plugin
+  component_type: command
+  category: engineering
+  install_type: skill
+  install:
+    method: cc-plugin-marketplace
+    cmd: "/plugin install ralph-loop@claude-plugins-official"
+    git_ref: 45896c8f2fe68e68ca2a8e3554d4441f48475431
+    idempotent_check: "/plugin list | grep -q ralph-loop"
+  verify:
+    cmd: "/plugin list | grep -q ralph-loop"
+    timeout_ms: 5000
+  uninstall:
+    cmd: "/plugin uninstall ralph-loop@claude-plugins-official"
+  upstream_health:
+    stability: beta
+    last_check: "2026-05-11"
+    last_known_good_version: main
+    fallback_action: warn
+  signed_by: easyinplay
+  platforms:
+    - linux
+    - darwin
+    - win32

package/manifests/tools/superpowers.yaml

@@ -0,0 +1,42 @@
+# yaml-language-server: $schema=../../schemas/manifest.v1.schema.json
+#
+# NOTE: spec.install.cmd is a Claude Code REPL slash command, NOT a shell command.
+# cc-plugin-marketplace install method's actual mechanism is undefined for
+# headless installer execution. See progress.md § B F20.
+apiVersion: harnessed/v1
+kind: Manifest
+metadata:
+  name: superpowers
+  display_name: superpowers
+  description: Senior-engineer skill plugin (brainstorming, TDD, git worktrees) auto-activated by Claude.
+  upstream:
+    source: superpowers
+    homepage: https://github.com/obra/superpowers
+    repository: https://github.com/obra/superpowers.git
+    license: MIT
+    notice: superpowers by Jesse Vincent (obra) and Prime Radiant team, used as execution-layer engineering quality skills.
+spec:
+  type: cc-plugin
+  component_type: command
+  category: engineering
+  install_type: skill
+  install:
+    method: cc-plugin-marketplace
+    cmd: "/plugin marketplace add obra/superpowers-marketplace && /plugin install superpowers@superpowers-marketplace"
+    git_ref: v5.1.0
+    idempotent_check: "/plugin list | grep -q superpowers"
+  verify:
+    cmd: "/plugin list | grep -q superpowers"
+    timeout_ms: 5000
+  uninstall:
+    cmd: "/plugin uninstall superpowers@superpowers-marketplace"
+  upstream_health:
+    stability: stable
+    last_check: "2026-05-11"
+    last_known_good_version: 5.1.0
+    fallback_action: warn
+  signed_by: easyinplay
+  platforms:
+    - linux
+    - darwin
+    - win32

package/manifests/tools/tavily-mcp.yaml

@@ -0,0 +1,39 @@
+# yaml-language-server: $schema=../../schemas/manifest.v1.schema.json
+apiVersion: harnessed/v1
+kind: Manifest
+metadata:
+  name: tavily-mcp
+  display_name: Tavily MCP
+  description: Web search / extract / map / crawl MCP server. Default web search via tavily_search.
+  upstream:
+    source: tavily-mcp
+    homepage: https://docs.tavily.com/docs/mcp
+    repository: https://github.com/tavily-ai/tavily-mcp.git
+    license: MIT
+    notice: tavily-mcp by tavily-ai (official), used as default web-search MCP per harnessed routing rules.
+spec:
+  type: mcp-npm
+  component_type: mcp-tool
+  category: search
+  install_type: mcp
+  install:
+    method: mcp-stdio-add
+    cmd: "claude mcp add --scope project --transport stdio tavily-mcp -- npx --yes tavily-mcp@^0.2.0"
+    npm_version: ^0.2.0
+    idempotent_check: "claude mcp list | grep -q tavily"
+  verify:
+    cmd: "claude mcp list | grep -q tavily"
+    timeout_ms: 10000
+  uninstall:
+    cmd: "claude mcp remove --scope project tavily-mcp"
+  upstream_health:
+    stability: beta
+    last_check: "2026-05-11"
+    last_known_good_version: 0.2.19
+    fallback_action: use_alternative
+    alternative: exa-mcp
+  signed_by: easyinplay
+  platforms:
+    - linux
+    - darwin
+    - win32

package/package.json

@@ -0,0 +1,96 @@
+{
+  "name": "harnessed",
+  "version": "1.0.0",
+  "description": "AI coding harness package manager + composition orchestrator",
+  "type": "module",
+  "license": "Apache-2.0",
+  "author": "easyinplay",
+  "repository": {
+    "type": "git",
+    "url": "https://github.com/easyinplay/harnessed.git"
+  },
+  "homepage": "https://github.com/easyinplay/harnessed#readme",
+  "bugs": "https://github.com/easyinplay/harnessed/issues",
+  "keywords": [
+    "claude-code",
+    "ai-harness",
+    "package-manager",
+    "composition",
+    "skill-pack",
+    "mcp",
+    "orchestrator"
+  ],
+  "engines": {
+    "node": ">=22.0.0"
+  },
+  "packageManager": "pnpm@10.12.0",
+  "bin": {
+    "harnessed": "./dist/cli.mjs"
+  },
+  "main": "./dist/index.mjs",
+  "types": "./dist/index.d.ts",
+  "exports": {
+    ".": {
+      "types": "./dist/index.d.ts",
+      "import": "./dist/index.mjs",
+      "default": "./dist/index.mjs"
+    },
+    "./schemas": {
+      "types": "./dist/schemas/index.d.ts",
+      "import": "./dist/schemas/index.mjs"
+    },
+    "./package.json": "./package.json"
+  },
+  "files": [
+    "dist",
+    "manifests",
+    "workflows",
+    "routing",
+    "config-templates",
+    "schemas",
+    "README.md",
+    "LICENSE",
+    "NOTICE"
+  ],
+  "scripts": {
+    "dev": "tsup --watch",
+    "build": "tsc --noEmit && tsup",
+    "build:schema": "node ./scripts/build-schema.mjs",
+    "validate:schema": "node ./scripts/validate-schema.mjs",
+    "typecheck": "tsc --noEmit",
+    "test": "vitest run --passWithNoTests",
+    "test:watch": "vitest",
+    "test:coverage": "vitest run --coverage --passWithNoTests",
+    "bench": "vitest bench --run",
+    "lint": "biome check .",
+    "lint:fix": "biome check --write .",
+    "format": "biome format --write ."
+  },
+  "dependencies": {
+    "@anthropic-ai/claude-agent-sdk": "0.3.142",
+    "@clack/prompts": "^0.10.1",
+    "@sinclair/typebox": "^0.34.49",
+    "ajv": "^8.20.0",
+    "ajv-errors": "^3.0.0",
+    "ajv-formats": "^3.0.1",
+    "commander": "^13.0.0",
+    "diff": "^9.0.0",
+    "picocolors": "^1.1.1",
+    "proper-lockfile": "^4.1.2",
+    "yaml": "^2.9.0"
+  },
+  "devDependencies": {
+    "@biomejs/biome": "^2.0.0",
+    "@types/node": "^22.10.0",
+    "@types/proper-lockfile": "^4.1.4",
+    "@vitest/coverage-v8": "^4.0.0",
+    "tsup": "^8.3.0",
+    "typescript": "^5.6.0",
+    "vitest": "^4.0.0"
+  },
+  "pnpm": {
+    "onlyBuiltDependencies": [
+      "esbuild"
+    ]
+  }
+}

package/routing/README.md

@@ -0,0 +1,22 @@
+# routing/ — B+C 混合路由 SSOT
+
+`routing/` 是 harnessed 的**路由元规则**——B 层（skill description 自动生成）+ C 层（UserPromptSubmit hook 硬路由）共享同一份 yaml frontmatter，避免双轨维护。
+
+## 结构（v0.1 MVP）
+
+- `search.md` — research workflow 路由（ctx7 / tavily / exa / parallel） — v0.1.0
+- `ui.md` — UI/UX 任务路由（ui-ux-pro-max + frontend-design） — v0.3.0
+- `testing.md` — 测试工具路由（playwright / vitest / webapp-testing） — v0.3.0
+- `execute.md` — execute-task 内部路由（mattpocock 招式触发） — v0.2.0
+
+## Schema
+
+每个 routing 文件 yaml frontmatter 必须含 `trigger` / `hard_route` / `soft_hint` / `fallback` 四块（详见 `routing/SCHEMA.md`）。
+
+JSON Schema 严格校验：
+- 字段定义：`PROJECT-SPEC.md` v2.1 § 9
+- 实现：`schemas/routing.v1.schema.json`（v0.1 phase 1.4）
+
+## 透明度
+
+每次路由决策**必须可见输出**（默认折叠，可展开）— 决策来源、备选方案、实际命令均显示给用户。详见 `WORKFLOWS-MVP.md` § 路由透明度设计。