harnessed 4.5.0 → 4.5.1

package/README.md

@@ -21,7 +21,7 @@
 
 ### 🔁 The operating loop
 
-> **Discuss → Plan → Build → Verify → Ship → Learn** — one repeatable loop, machine-executed across the three-layer stack (gstack governance · GSD orchestration · superpowers TDD · checkpoint evidence). Raw agent work drifts; harnessed turns it into a source-of-truth path where progress, evidence, and learnings persist instead of living in chat.
+> **Discuss → Plan → Build → Verify → Ship**, closed by a **Learn** loop — machine-executed across the three-layer stack (gstack governance · GSD orchestration · superpowers TDD · checkpoint evidence). Raw agent work drifts; harnessed turns it into a source-of-truth path where progress and evidence persist instead of living in chat. **Learning is automatic**: every completed workflow appends its failure/loop/reject signals to `.planning/LEARNINGS.md`, which are injected into the next cycle — this is always-on, **not** gated on the optional Retro. Retro (`/retro`) is a separate, optional milestone summary.
 
 ```mermaid
 flowchart LR
@@ -30,9 +30,9 @@ flowchart LR
   P --> T(["③ Task<br/>TDD build + checkpoint"])
   T --> V(["④ Verify<br/>independent review + evidence gate"])
   V --> S(["⑤ Ship<br/>release-preflight → tag-ready (publish via CI)"])
-  S --> L(["⑥ Retro<br/>capture learnings → next session smarter"])
+  S -. "milestone summary" .-> RT(["Retro<br/>(optional)"]):::opt
   V -. "fail / gap" .-> T
-  L -. "next requirement" .-> D
+  S == "🔁 Learn — learnings captured on every workflow completion → injected next cycle" ==> D
   classDef opt stroke-dasharray:5,opacity:0.8
 ```
 
@@ -405,10 +405,17 @@ planning-with-files /plan (cross-cutting tool) → write artifacts to .planning/
 | `harnessed gates <master>` | Evaluate which sub-workflows fire for a master stage (JSON: fire/skip/parallelism). Used by slash commands to orchestrate native spawns. |
 | `harnessed prompt <sub>` | Output a spawn-ready prompt (role + checklist + disciplines + completion/clarification protocols) for a sub-workflow. |
 | `harnessed checkpoint <action> <sub>` | Record sub-workflow start/complete/fail to `~/.claude/harnessed/checkpoints/`. |
+| `harnessed next` | Deterministic next-step contract (`NEXT: auto\|manual\|done`) for the active workflow. |
+| `harnessed reject <sub>` | Mark a sub as user-rejected (terminal, distinct from `failed`). |
+| `harnessed compact [--tokens <n>]` | Summarize+evict resolved ledger entries (G6-safe: `fail_count>0` never evicted); auto-triggers on `checkpoint complete --tokens`. |
+| `harnessed workflows` | List in-flight workflows (one per repo). |
+| `harnessed learn "<lesson>"` | Append a prose learning to this repo's `.planning/LEARNINGS.md`. |
 | `harnessed run <name>` | Run a workflow via in-process SDK spawn (CI/headless mode). Slash commands use CC-native spawn instead. |
 | `harnessed resume` | Resume from the most recent checkpoint after a session interruption |
 | `harnessed status` | Current phase + lock holder |
-| `harnessed doctor` | 8-check health check (Node / MCP / jq / Win bash / routing / token budget, etc.) |
+| `harnessed doctor` | 14-check health check (Node / MCP / jq / Win bash / routing / token budget / mattpocock / CodeGraph / update-available, etc.) |
+| `harnessed update [--check\|--upstreams\|--migration-report]` | Self-update (`npm i -g harnessed@latest`); `--check` reports the latest version; `--upstreams` re-runs the base manifests; `--migration-report` is a read-only stale-state inventory |
+| `harnessed release-preflight` | Read-only release-readiness gate (CHANGELOG `[Unreleased]` / version / git-clean / tag-absent); exits 1 if not ready. The Ship-stage gate. |
 | `harnessed install <name>` | Install an upstream manifest |
 | `harnessed uninstall [name]` | Reverse uninstall |
 | `harnessed backup` | Snapshot backup management |

package/dist/cli.mjs

@@ -38,7 +38,7 @@ var init_package = __esm({
   "package.json"() {
     package_default = {
       name: "harnessed",
-      version: "4.5.0",
+      version: "4.5.1",
       description: "AI coding harness package manager + composition orchestrator",
       type: "module",
       license: "Apache-2.0",
@@ -944,6 +944,10 @@ async function backup(plan, ctx) {
         });
         continue;
       }
+      if (code === "EISDIR") {
+        entries.push({ target: file.target, backup: "", sha1: "", eol: "lf" });
+        continue;
+      }
       return {
         ok: false,
         error: {
@@ -4816,7 +4820,7 @@ function expandTildeForWindows(cmd) {
   const home = homedir().replace(/\\/g, "/");
   return cmd.replace(/(^|[\s"'`(])~\//g, `$1${home}/`);
 }
-async function spawnCmd(ctx, cmd, args, timeoutMs) {
+async function spawnCmd(ctx, cmd, args, timeoutMs, opts) {
   const violation = checkCmdString(cmd);
   if (violation) {
     return {
@@ -4837,14 +4841,21 @@ async function spawnCmd(ctx, cmd, args, timeoutMs) {
   const env = { ...process.env, ...installCfg.env ?? {} };
   const cwd = installCfg.cwd ?? ctx.cwd;
   let child;
+  let triedBash = false;
   if (process.platform === "win32") {
-    const expandedCmd = expandTildeForWindows(cmd);
-    const expandedArgs = args.map(expandTildeForWindows);
-    child = spawn("cmd.exe", ["/c", expandedCmd, ...expandedArgs], {
-      cwd,
-      env,
-      windowsHide: true
-    });
+    if (opts?.posixShell) {
+      const joined = args.length > 0 ? `${cmd} ${args.join(" ")}` : cmd;
+      triedBash = true;
+      child = spawn("bash", ["-c", joined], { cwd, env, windowsHide: true });
+    } else {
+      const expandedCmd = expandTildeForWindows(cmd);
+      const expandedArgs = args.map(expandTildeForWindows);
+      child = spawn("cmd.exe", ["/c", expandedCmd, ...expandedArgs], {
+        cwd,
+        env,
+        windowsHide: true
+      });
+    }
   } else {
     const joined = args.length > 0 ? `${cmd} ${args.join(" ")}` : cmd;
     child = spawn("/bin/sh", ["-c", joined], { cwd, env });
@@ -4875,16 +4886,17 @@ async function spawnCmd(ctx, cmd, args, timeoutMs) {
     }, effectiveTimeoutMs);
     child.on("error", (err2) => {
       clearTimeout(timer);
+      const bashMissing = triedBash && err2.code === "ENOENT";
       resolve20({
         ok: false,
         phase: "spawn",
         error: {
           file: ctx.manifest.metadata.name,
           path: "/spec/install/cmd",
-          message: `spawn failed: ${err2.message}`,
+          message: bashMissing ? "Git Bash is required for this component on Windows, but `bash` was not found on PATH. Install Git for Windows (https://git-scm.com/download/win) and re-run `harnessed setup`." : `spawn failed: ${err2.message}`,
           line: null,
           column: null,
-          keyword: "spawn-error"
+          keyword: bashMissing ? "bash-missing" : "spawn-error"
         }
       });
     });
@@ -4899,7 +4911,7 @@ var init_spawn = __esm({
   "src/installers/lib/spawn.ts"() {
     init_security();
     DEFAULT_VERIFY_TIMEOUT_MS = 15e3;
-    DEFAULT_INSTALL_TIMEOUT_MS = 6e4;
+    DEFAULT_INSTALL_TIMEOUT_MS = 12e4;
   }
 });
 function extractSkillName(cmd, fallback) {
@@ -5335,7 +5347,7 @@ var init_gitCloneWithSetup2 = __esm({
       if (ctx.opts.dryRun) return { aborted: true, reason: "user-cancel" };
       const bk = await backup(plan, ctx);
       if (!bk.ok) return { ok: false, phase: "preflight", error: bk.error };
-      const sp = await spawnCmd(ctx, install.cmd, [], DEFAULT_INSTALL_TIMEOUT_MS);
+      const sp = await spawnCmd(ctx, install.cmd, [], DEFAULT_INSTALL_TIMEOUT_MS, { posixShell: true });
       if (!("exitCode" in sp)) return { ...sp, backupId: bk.backupId };
       if (sp.exitCode !== 0) {
         return {
@@ -5378,7 +5390,9 @@ var init_gitCloneWithSetup2 = __esm({
         };
       }
       const verifyTimeoutMs = ctx.manifest.spec.verify.timeout_ms ?? DEFAULT_VERIFY_TIMEOUT_MS;
-      const vr = await spawnCmd(ctx, ctx.manifest.spec.verify.cmd, [], verifyTimeoutMs);
+      const vr = await spawnCmd(ctx, ctx.manifest.spec.verify.cmd, [], verifyTimeoutMs, {
+        posixShell: true
+      });
       if (!("exitCode" in vr)) return { ...vr, backupId: bk.backupId };
       const expected = ctx.manifest.spec.verify.expected_exit_code ?? 0;
       if (vr.exitCode !== expected) {
@@ -5809,7 +5823,9 @@ var init_npmCli2 = __esm({
         };
       }
       const verifyTimeoutMs = ctx.manifest.spec.verify.timeout_ms ?? DEFAULT_VERIFY_TIMEOUT_MS;
-      const vr = await spawnCmd(ctx, ctx.manifest.spec.verify.cmd, [], verifyTimeoutMs);
+      const vr = await spawnCmd(ctx, ctx.manifest.spec.verify.cmd, [], verifyTimeoutMs, {
+        posixShell: true
+      });
       if (!("exitCode" in vr)) return { ...vr, backupId: bk.backupId };
       const expected = ctx.manifest.spec.verify.expected_exit_code ?? 0;
       if (vr.exitCode !== expected) {
@@ -5938,7 +5954,9 @@ var init_npxSkillInstaller2 = __esm({
         };
       }
       const verifyTimeoutMs = ctx.manifest.spec.verify.timeout_ms ?? DEFAULT_VERIFY_TIMEOUT_MS;
-      const vr = await spawnCmd(ctx, ctx.manifest.spec.verify.cmd, [], verifyTimeoutMs);
+      const vr = await spawnCmd(ctx, ctx.manifest.spec.verify.cmd, [], verifyTimeoutMs, {
+        posixShell: true
+      });
       if (!("exitCode" in vr)) return { ...vr, backupId: bk.backupId };
       const expected = ctx.manifest.spec.verify.expected_exit_code ?? 0;
       if (vr.exitCode !== expected) {