metaharness 0.4.0 → 0.4.2

package/templates/vertical_repo-maintainer/manifest.json

@@ -1,121 +1,121 @@
-{
-  "id": "vertical:repo-maintainer",
-  "description": "A maintenance pod for an existing repo — maintainer, benchmarker, release, security agents. The \"this repo ships with its own agent\" demo.",
-  "domain": "engineering/repo-maintenance",
-  "category": "Engineering",
-  "files": [
-    {
-      "src": "package.json.tmpl",
-      "dst": "package.json",
-      "render": true
-    },
-    {
-      "src": "CLAUDE.md.tmpl",
-      "dst": "CLAUDE.md",
-      "render": true
-    },
-    {
-      "src": "README.md.tmpl",
-      "dst": "README.md",
-      "render": true
-    },
-    {
-      "src": ".claude/settings.json.tmpl",
-      "dst": ".claude/settings.json",
-      "render": true
-    },
-    {
-      "src": ".claude-plugin/plugin.json.tmpl",
-      "dst": ".claude-plugin/plugin.json",
-      "render": true
-    },
-    {
-      "src": "src/init.ts.tmpl",
-      "dst": "src/init.ts",
-      "render": true
-    },
-    {
-      "src": "src/agents/maintainer.ts.tmpl",
-      "dst": "src/agents/maintainer.ts",
-      "render": true
-    },
-    {
-      "src": "src/agents/benchmarker.ts.tmpl",
-      "dst": "src/agents/benchmarker.ts",
-      "render": true
-    },
-    {
-      "src": "src/agents/release.ts.tmpl",
-      "dst": "src/agents/release.ts",
-      "render": true
-    },
-    {
-      "src": "src/agents/security.ts.tmpl",
-      "dst": "src/agents/security.ts",
-      "render": true
-    },
-    {
-      "src": ".claude/skills/memory-inspect/SKILL.md.tmpl",
-      "dst": ".claude/skills/memory-inspect/SKILL.md",
-      "render": true
-    },
-    {
-      "src": ".claude/skills/plan-change/SKILL.md.tmpl",
-      "dst": ".claude/skills/plan-change/SKILL.md",
-      "render": true
-    },
-    {
-      "src": ".claude/commands/doctor.md.tmpl",
-      "dst": ".claude/commands/doctor.md",
-      "render": true
-    },
-    {
-      "src": ".claude/commands/repo-triage.md.tmpl",
-      "dst": ".claude/commands/repo-triage.md",
-      "render": true
-    },
-    {
-      "src": ".claude/commands/release-check.md.tmpl",
-      "dst": ".claude/commands/release-check.md",
-      "render": true
-    },
-    {
-      "src": "tsconfig.json.tmpl",
-      "dst": "tsconfig.json",
-      "render": true
-    },
-    {
-      "src": "bin/cli.js.tmpl",
-      "dst": "bin/cli.js",
-      "render": true
-    },
-    {
-      "src": "__tests__/smoke.test.ts.tmpl",
-      "dst": "__tests__/smoke.test.ts",
-      "render": true
-    }
-  ],
-  "vars": [
-    {
-      "name": "name",
-      "prompt": "Harness name (kebab-case)",
-      "validate": "^[a-z0-9-]+$"
-    },
-    {
-      "name": "description",
-      "prompt": "One-line description",
-      "default": "Maintain an existing repo: triage what changed, benchmark, release-check, security-flag"
-    },
-    {
-      "name": "host",
-      "prompt": "Host adapter",
-      "default": "claude-code",
-      "choices": [
-        "claude-code",
-        "codex",
-        "pi-dev",
-        "hermes"
-      ]
-    }
-  ]
-}
+{
+  "id": "vertical:repo-maintainer",
+  "description": "A maintenance pod for an existing repo — maintainer, benchmarker, release, security agents. The \"this repo ships with its own agent\" demo.",
+  "domain": "engineering/repo-maintenance",
+  "category": "Engineering",
+  "files": [
+    {
+      "src": "package.json.tmpl",
+      "dst": "package.json",
+      "render": true
+    },
+    {
+      "src": "CLAUDE.md.tmpl",
+      "dst": "CLAUDE.md",
+      "render": true
+    },
+    {
+      "src": "README.md.tmpl",
+      "dst": "README.md",
+      "render": true
+    },
+    {
+      "src": ".claude/settings.json.tmpl",
+      "dst": ".claude/settings.json",
+      "render": true
+    },
+    {
+      "src": ".claude-plugin/plugin.json.tmpl",
+      "dst": ".claude-plugin/plugin.json",
+      "render": true
+    },
+    {
+      "src": "src/init.ts.tmpl",
+      "dst": "src/init.ts",
+      "render": true
+    },
+    {
+      "src": "src/agents/maintainer.ts.tmpl",
+      "dst": "src/agents/maintainer.ts",
+      "render": true
+    },
+    {
+      "src": "src/agents/benchmarker.ts.tmpl",
+      "dst": "src/agents/benchmarker.ts",
+      "render": true
+    },
+    {
+      "src": "src/agents/release.ts.tmpl",
+      "dst": "src/agents/release.ts",
+      "render": true
+    },
+    {
+      "src": "src/agents/security.ts.tmpl",
+      "dst": "src/agents/security.ts",
+      "render": true
+    },
+    {
+      "src": ".claude/skills/memory-inspect/SKILL.md.tmpl",
+      "dst": ".claude/skills/memory-inspect/SKILL.md",
+      "render": true
+    },
+    {
+      "src": ".claude/skills/plan-change/SKILL.md.tmpl",
+      "dst": ".claude/skills/plan-change/SKILL.md",
+      "render": true
+    },
+    {
+      "src": ".claude/commands/doctor.md.tmpl",
+      "dst": ".claude/commands/doctor.md",
+      "render": true
+    },
+    {
+      "src": ".claude/commands/repo-triage.md.tmpl",
+      "dst": ".claude/commands/repo-triage.md",
+      "render": true
+    },
+    {
+      "src": ".claude/commands/release-check.md.tmpl",
+      "dst": ".claude/commands/release-check.md",
+      "render": true
+    },
+    {
+      "src": "tsconfig.json.tmpl",
+      "dst": "tsconfig.json",
+      "render": true
+    },
+    {
+      "src": "bin/cli.js.tmpl",
+      "dst": "bin/cli.js",
+      "render": true
+    },
+    {
+      "src": "__tests__/smoke.test.ts.tmpl",
+      "dst": "__tests__/smoke.test.ts",
+      "render": true
+    }
+  ],
+  "vars": [
+    {
+      "name": "name",
+      "prompt": "Harness name (kebab-case)",
+      "validate": "^[a-z0-9-]+$"
+    },
+    {
+      "name": "description",
+      "prompt": "One-line description",
+      "default": "Maintain an existing repo: triage what changed, benchmark, release-check, security-flag"
+    },
+    {
+      "name": "host",
+      "prompt": "Host adapter",
+      "default": "claude-code",
+      "choices": [
+        "claude-code",
+        "codex",
+        "pi-dev",
+        "hermes"
+      ]
+    }
+  ]
+}

package/templates/vertical_repo-maintainer/package.json.tmpl

@@ -1,30 +1,30 @@
-{
-  "name": "{{name}}",
-  "version": "0.1.0",
-  "description": "{{description}}",
-  "type": "module",
-  "bin": {
-    "{{name}}": "bin/cli.js"
-  },
-  "files": ["bin/**", "dist/**", "src/**", "tsconfig.json", ".claude/**", "CLAUDE.md", "README.md", "LICENSE"],
-  "scripts": {
-    "build": "tsc",
-    "test": "vitest run",
-    "init": "node ./bin/cli.js init", "doctor": "node ./bin/cli.js doctor"
-  },
-  "dependencies": {
-    "@metaharness/kernel": "^0.1.0",
-    "@metaharness/host-{{host}}": "^0.1.0"
-  },
-  "devDependencies": {
-    "@types/node": "^20.0.0",
-    "typescript": "^5.4.0",
-    "vitest": "^3.0.0"
-  },
-  "engines": {
-    "node": ">=20.0.0"
-  },
-  "publishConfig": {
-    "access": "public"
-  }
-}
+{
+  "name": "{{name}}",
+  "version": "0.1.0",
+  "description": "{{description}}",
+  "type": "module",
+  "bin": {
+    "{{name}}": "bin/cli.js"
+  },
+  "files": ["bin/**", "dist/**", "src/**", "tsconfig.json", ".claude/**", "CLAUDE.md", "README.md", "LICENSE"],
+  "scripts": {
+    "build": "tsc",
+    "test": "vitest run",
+    "init": "node ./bin/cli.js init", "doctor": "node ./bin/cli.js doctor"
+  },
+  "dependencies": {
+    "@metaharness/kernel": "^0.1.0",
+    "@metaharness/host-{{host}}": "^0.1.0"
+  },
+  "devDependencies": {
+    "@types/node": "^20.0.0",
+    "typescript": "^5.4.0",
+    "vitest": "^3.0.0"
+  },
+  "engines": {
+    "node": ">=20.0.0"
+  },
+  "publishConfig": {
+    "access": "public"
+  }
+}

package/templates/vertical_repo-maintainer/src/agents/benchmarker.ts.tmpl

@@ -1,7 +1,7 @@
-// SPDX-License-Identifier: MIT
-// Benchmarker agent — Runs the perf gates and reports regressions.
-
-export const SYSTEM_PROMPT = `You run the project's declared benchmark suite (cargo bench, npm run bench, or whatever the manifest names) and compare against the baseline. Report regressions only when they cross the project's declared threshold — noise is worse than no result. Distinguish a real regression (statistically significant + reproducible) from a single-run flake. Write the result to memory so the maintainer can quote it. You operate inside the {{name}} harness; defer destructive actions to the user.`;
-
-export const NAME = 'benchmarker';
-export const TIER = 'sonnet' as const;
+// SPDX-License-Identifier: MIT
+// Benchmarker agent — Runs the perf gates and reports regressions.
+
+export const SYSTEM_PROMPT = `You run the project's declared benchmark suite (cargo bench, npm run bench, or whatever the manifest names) and compare against the baseline. Report regressions only when they cross the project's declared threshold — noise is worse than no result. Distinguish a real regression (statistically significant + reproducible) from a single-run flake. Write the result to memory so the maintainer can quote it. You operate inside the {{name}} harness; defer destructive actions to the user.`;
+
+export const NAME = 'benchmarker';
+export const TIER = 'sonnet' as const;

package/templates/vertical_repo-maintainer/src/agents/maintainer.ts.tmpl

@@ -1,7 +1,7 @@
-// SPDX-License-Identifier: MIT
-// Maintainer agent — Triages the repo state — what changed, what is risky, what to review first.
-
-export const SYSTEM_PROMPT = `You are the repo maintainer. When asked "what changed?" you read git diff / git log / git status and produce a one-screen triage: the headline risk, the files most likely to regress, and the smallest test the team should run before merging. You never push, never publish, never auto-fix — your job is to surface, not to act. When uncertain you say "I can't tell from the diff alone" and ask for the specific file or commit you need. You operate inside the {{name}} harness; defer destructive actions to the user.`;
-
-export const NAME = 'maintainer';
-export const TIER = 'opus' as const;
+// SPDX-License-Identifier: MIT
+// Maintainer agent — Triages the repo state — what changed, what is risky, what to review first.
+
+export const SYSTEM_PROMPT = `You are the repo maintainer. When asked "what changed?" you read git diff / git log / git status and produce a one-screen triage: the headline risk, the files most likely to regress, and the smallest test the team should run before merging. You never push, never publish, never auto-fix — your job is to surface, not to act. When uncertain you say "I can't tell from the diff alone" and ask for the specific file or commit you need. You operate inside the {{name}} harness; defer destructive actions to the user.`;
+
+export const NAME = 'maintainer';
+export const TIER = 'opus' as const;

package/templates/vertical_repo-maintainer/src/agents/release.ts.tmpl

@@ -1,7 +1,7 @@
-// SPDX-License-Identifier: MIT
-// Release agent — Drafts the GitHub release body + runs the readiness gates.
-
-export const SYSTEM_PROMPT = `You draft a release. Read the conventional-commit log since the last tag, group commits by feat/fix/docs/chore, and write a release body that an outside reader could understand without the repo open. Before drafting you confirm the release-readiness gates have passed (validate / sbom / witness / score). If any gate is red you refuse to draft and name the specific blocker. The release is a public commitment; you treat it like one. You operate inside the {{name}} harness; defer destructive actions to the user.`;
-
-export const NAME = 'release';
-export const TIER = 'opus' as const;
+// SPDX-License-Identifier: MIT
+// Release agent — Drafts the GitHub release body + runs the readiness gates.
+
+export const SYSTEM_PROMPT = `You draft a release. Read the conventional-commit log since the last tag, group commits by feat/fix/docs/chore, and write a release body that an outside reader could understand without the repo open. Before drafting you confirm the release-readiness gates have passed (validate / sbom / witness / score). If any gate is red you refuse to draft and name the specific blocker. The release is a public commitment; you treat it like one. You operate inside the {{name}} harness; defer destructive actions to the user.`;
+
+export const NAME = 'release';
+export const TIER = 'opus' as const;

package/templates/vertical_repo-maintainer/src/agents/security.ts.tmpl

@@ -1,7 +1,7 @@
-// SPDX-License-Identifier: MIT
-// Security agent — Flags risky MCP grants, leaked secrets, dangerous diffs.
-
-export const SYSTEM_PROMPT = `You scan the harness for the security regressions that matter: MCP grants that widened (Bash(rm:*), shell on, network on, file-write on), .env or token strings that escaped the redaction set, dependency updates that pulled in CVEs, and policy files that drifted from default-deny. Report each finding with a file:line, a severity (HIGH / MEDIUM), and the smallest fix. Never approve a change that widens a permission without a written reason in the PR description. You operate inside the {{name}} harness; defer destructive actions to the user.`;
-
-export const NAME = 'security';
-export const TIER = 'opus' as const;
+// SPDX-License-Identifier: MIT
+// Security agent — Flags risky MCP grants, leaked secrets, dangerous diffs.
+
+export const SYSTEM_PROMPT = `You scan the harness for the security regressions that matter: MCP grants that widened (Bash(rm:*), shell on, network on, file-write on), .env or token strings that escaped the redaction set, dependency updates that pulled in CVEs, and policy files that drifted from default-deny. Report each finding with a file:line, a severity (HIGH / MEDIUM), and the smallest fix. Never approve a change that widens a permission without a written reason in the PR description. You operate inside the {{name}} harness; defer destructive actions to the user.`;
+
+export const NAME = 'security';
+export const TIER = 'opus' as const;

package/templates/vertical_repo-maintainer/src/init.ts.tmpl

@@ -1,21 +1,21 @@
-// SPDX-License-Identifier: MIT
-// Generated by create-agent-harness — your harness's `{{name}} init` entry.
-
-import { loadKernel } from '@metaharness/kernel';
-import adapter from '@metaharness/host-{{host}}';
-
-const HARNESS_NAME = '{{name}}';
-
-async function main(): Promise<number> {
-  const kernel = await loadKernel();
-  const info = kernel.kernelInfo();
-  console.log(`${HARNESS_NAME} — kernel ${info.version} (${kernel.backend})`);
-  console.log(`Host adapter: ${adapter.name}`);
-  console.log(`Run \`${HARNESS_NAME} doctor\` to verify the install.`);
-  return 0;
-}
-
-main().then(c => process.exit(c)).catch(err => {
-  console.error(err);
-  process.exit(1);
-});
+// SPDX-License-Identifier: MIT
+// Generated by create-agent-harness — your harness's `{{name}} init` entry.
+
+import { loadKernel } from '@metaharness/kernel';
+import adapter from '@metaharness/host-{{host}}';
+
+const HARNESS_NAME = '{{name}}';
+
+async function main(): Promise<number> {
+  const kernel = await loadKernel();
+  const info = kernel.kernelInfo();
+  console.log(`${HARNESS_NAME} — kernel ${info.version} (${kernel.backend})`);
+  console.log(`Host adapter: ${adapter.name}`);
+  console.log(`Run \`${HARNESS_NAME} doctor\` to verify the install.`);
+  return 0;
+}
+
+main().then(c => process.exit(c)).catch(err => {
+  console.error(err);
+  process.exit(1);
+});

package/templates/vertical_repo-maintainer/tsconfig.json.tmpl

@@ -1,19 +1,19 @@
-{
-  "compilerOptions": {
-    "target": "ES2022",
-    "module": "NodeNext",
-    "moduleResolution": "NodeNext",
-    "lib": ["ES2022"],
-    "outDir": "./dist",
-    "rootDir": "./src",
-    "declaration": true,
-    "declarationMap": true,
-    "sourceMap": true,
-    "strict": true,
-    "esModuleInterop": true,
-    "skipLibCheck": true,
-    "forceConsistentCasingInFileNames": true
-  },
-  "include": ["src/**/*.ts"],
-  "exclude": ["node_modules", "dist", "__tests__"]
-}
+{
+  "compilerOptions": {
+    "target": "ES2022",
+    "module": "NodeNext",
+    "moduleResolution": "NodeNext",
+    "lib": ["ES2022"],
+    "outDir": "./dist",
+    "rootDir": "./src",
+    "declaration": true,
+    "declarationMap": true,
+    "sourceMap": true,
+    "strict": true,
+    "esModuleInterop": true,
+    "skipLibCheck": true,
+    "forceConsistentCasingInFileNames": true
+  },
+  "include": ["src/**/*.ts"],
+  "exclude": ["node_modules", "dist", "__tests__"]
+}

package/templates/vertical_repo-maintainer/vitest.config.ts.tmpl

@@ -1,23 +1,23 @@
-// SPDX-License-Identifier: MIT
-// Generated by metaharness. Strips the `#!/usr/bin/env node` shebang from
-// importable entrypoints (e.g. bin/cli.js) before Vite parses them — Vite/esbuild
-// (used internally by Vitest) does NOT strip shebangs, so importing a shebanged
-// module throws `SyntaxError: Invalid or unexpected token`. See issue #44.
-// Has no effect on direct CLI execution or `npm run doctor` (those bypass Vite).
-import { defineConfig } from 'vitest/config';
-
-export default defineConfig({
-  plugins: [
-    {
-      name: 'strip-shebang',
-      enforce: 'pre',
-      transform(code: string) {
-        if (code.startsWith('#!')) {
-          // Replace with a blank line so source line numbers stay aligned.
-          return { code: code.replace(/^#![^\n]*/, ''), map: null };
-        }
-        return null;
-      },
-    },
-  ],
-});
+// SPDX-License-Identifier: MIT
+// Generated by metaharness. Strips the `#!/usr/bin/env node` shebang from
+// importable entrypoints (e.g. bin/cli.js) before Vite parses them — Vite/esbuild
+// (used internally by Vitest) does NOT strip shebangs, so importing a shebanged
+// module throws `SyntaxError: Invalid or unexpected token`. See issue #44.
+// Has no effect on direct CLI execution or `npm run doctor` (those bypass Vite).
+import { defineConfig } from 'vitest/config';
+
+export default defineConfig({
+  plugins: [
+    {
+      name: 'strip-shebang',
+      enforce: 'pre',
+      transform(code: string) {
+        if (code.startsWith('#!')) {
+          // Replace with a blank line so source line numbers stay aligned.
+          return { code: code.replace(/^#![^\n]*/, ''), map: null };
+        }
+        return null;
+      },
+    },
+  ],
+});

package/templates/vertical_research/.claude/settings.json.tmpl

@@ -1,9 +1,9 @@
-{
-  "permissions": {
-    "allow": ["Bash(npx {{name}}*)", "mcp__{{name}}__*", "WebFetch"],
-    "deny": ["Bash(rm *)", "Read(./.env)", "Read(./.env.*)"]
-  },
-  "mcpServers": {
-    "{{name}}": { "command": "npx", "args": ["-y", "{{name}}@latest", "mcp", "start"] }
-  }
-}
+{
+  "permissions": {
+    "allow": ["Bash(npx {{name}}*)", "mcp__{{name}}__*", "WebFetch"],
+    "deny": ["Bash(rm *)", "Read(./.env)", "Read(./.env.*)"]
+  },
+  "mcpServers": {
+    "{{name}}": { "command": "npx", "args": ["-y", "{{name}}@latest", "mcp", "start"] }
+  }
+}

package/templates/vertical_research/.claude-plugin/plugin.json.tmpl

@@ -1,23 +1,23 @@
-{
-  "name": "{{name}}",
-  "version": "0.1.0",
-  "description": "{{description}}",
-  "author": {
-    "displayName": "Generated by metaharness",
-    "url": "https://www.npmjs.com/package/metaharness"
-  },
-  "license": "MIT",
-  "categories": [
-    "agent-harness",
-    "metaharness-scaffold",
-    "vertical",
-    "research/multi-source-dossier"
-  ],
-  "tags": [
-    "metaharness",
-    "agent-harness",
-    "vertical:research",
-    "research/multi-source-dossier"
-  ],
-  "homepage": "https://github.com/ruvnet/agent-harness-generator"
-}
+{
+  "name": "{{name}}",
+  "version": "0.1.0",
+  "description": "{{description}}",
+  "author": {
+    "displayName": "Generated by metaharness",
+    "url": "https://www.npmjs.com/package/metaharness"
+  },
+  "license": "MIT",
+  "categories": [
+    "agent-harness",
+    "metaharness-scaffold",
+    "vertical",
+    "research/multi-source-dossier"
+  ],
+  "tags": [
+    "metaharness",
+    "agent-harness",
+    "vertical:research",
+    "research/multi-source-dossier"
+  ],
+  "homepage": "https://github.com/ruvnet/agent-harness-generator"
+}

package/templates/vertical_research/CLAUDE.md.tmpl

@@ -1,33 +1,33 @@
-# {{name}}
-
-{{description}}
-
-## Pipeline
-
-```
-scout -> web-searcher -> source-grader -> synthesizer -> fact-checker -> citer
-```
-
-Each agent only sees the OUTPUT of the previous one, not the raw inputs. This forces information to flow through grading + verification gates.
-
-## Agents
-
-| Agent | Role | Tier |
-|---|---|---|
-| `scout` | Decompose the research question into subqueries | Sonnet |
-| `web-searcher` | Run subqueries via WebSearch MCP, collect raw hits | Haiku |
-| `source-grader` | Grade each source A/B/C/D by authority + freshness + relevance | Sonnet |
-| `synthesizer` | Synthesise findings from grade A/B sources only | Sonnet |
-| `fact-checker` | Adversarially verify each claim in the synthesis | Sonnet |
-| `citer` | Final pass: every claim must cite a graded source | Sonnet |
-
-## Evidence grading rubric
-
-- **A**: Primary source (paper, official doc), <2 years old, on-topic
-- **B**: Reputable secondary source (major outlet, expert blog), <5 years
-- **C**: Tertiary source (Wikipedia, summary article) — informational only
-- **D**: Discarded (forum, unsourced claim, broken link)
-
-## Output
-
-A dossier markdown: TL;DR + body (every claim cited) + bibliography with grades.
+# {{name}}
+
+{{description}}
+
+## Pipeline
+
+```
+scout -> web-searcher -> source-grader -> synthesizer -> fact-checker -> citer
+```
+
+Each agent only sees the OUTPUT of the previous one, not the raw inputs. This forces information to flow through grading + verification gates.
+
+## Agents
+
+| Agent | Role | Tier |
+|---|---|---|
+| `scout` | Decompose the research question into subqueries | Sonnet |
+| `web-searcher` | Run subqueries via WebSearch MCP, collect raw hits | Haiku |
+| `source-grader` | Grade each source A/B/C/D by authority + freshness + relevance | Sonnet |
+| `synthesizer` | Synthesise findings from grade A/B sources only | Sonnet |
+| `fact-checker` | Adversarially verify each claim in the synthesis | Sonnet |
+| `citer` | Final pass: every claim must cite a graded source | Sonnet |
+
+## Evidence grading rubric
+
+- **A**: Primary source (paper, official doc), <2 years old, on-topic
+- **B**: Reputable secondary source (major outlet, expert blog), <5 years
+- **C**: Tertiary source (Wikipedia, summary article) — informational only
+- **D**: Discarded (forum, unsourced claim, broken link)
+
+## Output
+
+A dossier markdown: TL;DR + body (every claim cited) + bibliography with grades.