repo-harness 0.11.2 → 0.12.0

This diff represents the content of publicly available package versions that have been released to one of the supported registries. The information contained in this diff is provided for informational purposes only and reflects changes between package versions as they appear in their respective public registries.
Files changed (77) hide show
  1. package/AGENTS.md +2 -2
  2. package/CLAUDE.md +2 -2
  3. package/README.es.md +12 -12
  4. package/README.fr.md +13 -13
  5. package/README.ja.md +12 -12
  6. package/README.md +14 -14
  7. package/README.zh-CN.md +14 -15
  8. package/SKILL.md +1 -1
  9. package/agents/fleet/deep-worker.md +14 -0
  10. package/agents/fleet/fast-worker.md +4 -4
  11. package/agents/fleet/harness-evaluator.md +1 -1
  12. package/assets/AGENTS.md +7 -7
  13. package/assets/CLAUDE.md +7 -7
  14. package/assets/reference-configs/agentic-development-flow.md +2 -2
  15. package/assets/reference-configs/external-tooling.md +24 -13
  16. package/assets/reference-configs/harness-overview.md +42 -12
  17. package/assets/reference-configs/hook-operations.md +3 -3
  18. package/assets/reference-configs/sprint-contracts.md +1 -1
  19. package/assets/skill-commands/manifest.json +1 -1
  20. package/assets/skill-commands/repo-harness-architecture/SKILL.md +1 -1
  21. package/assets/skill-version.json +10 -2
  22. package/assets/skills/repo-harness-chatgpt/SKILL.md +3 -1
  23. package/assets/skills/repo-harness-chatgpt/references/delegate.md +409 -0
  24. package/assets/skills/repo-harness-chatgpt/references/setup.md +41 -0
  25. package/assets/skills/repo-harness-plan/references/create.md +1 -1
  26. package/assets/skills/repo-harness-product/references/prd.md +1 -1
  27. package/assets/skills/repo-harness-setup/SKILL.md +2 -2
  28. package/assets/skills/repo-harness-setup/references/capability.md +1 -1
  29. package/assets/skills/repo-harness-setup/references/{adopt-init.md → init.md} +4 -4
  30. package/assets/skills/repo-harness-setup/references/migrate.md +2 -2
  31. package/assets/skills/repo-harness-setup/references/scaffold.md +1 -1
  32. package/assets/templates/helpers/acceptance-receipt.ts +1 -1
  33. package/assets/templates/helpers/check-agent-tooling.sh +1 -1
  34. package/assets/templates/helpers/contract-worktree.sh +38 -6
  35. package/assets/templates/helpers/ensure-task-workflow.sh +18 -8
  36. package/assets/templates/helpers/install-agent-fleet.sh +13 -4
  37. package/assets/templates/helpers/verify-contract.sh +3 -1
  38. package/docs/repo-harness-chatgpt-browser-engine.md +65 -2
  39. package/install.ps1 +1 -1
  40. package/install.sh +1 -1
  41. package/package.json +3 -1
  42. package/scripts/AGENTS.md +1 -1
  43. package/scripts/CLAUDE.md +1 -1
  44. package/scripts/acceptance-receipt.ts +1 -1
  45. package/scripts/check-agent-tooling.sh +1 -1
  46. package/scripts/check-ci.sh +4 -1
  47. package/scripts/check-tarball-install-smoke.sh +5 -5
  48. package/scripts/contract-worktree.sh +38 -6
  49. package/scripts/ensure-task-workflow.sh +18 -8
  50. package/scripts/install-agent-fleet.sh +13 -4
  51. package/scripts/run-harness-profile-benchmark.ts +1 -1
  52. package/scripts/run-skill-evals.ts +4 -4
  53. package/scripts/setup-plugins.sh +3 -3
  54. package/scripts/sync-reference-configs.ts +136 -0
  55. package/scripts/verify-contract.sh +3 -1
  56. package/src/cli/chatgpt-browser/engine.ts +12 -0
  57. package/src/cli/chatgpt-browser/oracle-provider.ts +50 -8
  58. package/src/cli/chatgpt-browser/secret-scan.ts +139 -0
  59. package/src/cli/chatgpt-browser/session-store.ts +4 -0
  60. package/src/cli/chatgpt-browser/types.ts +19 -0
  61. package/src/cli/chatgpt-skill/installer.ts +131 -0
  62. package/src/cli/chatgpt-skill/source.ts +59 -0
  63. package/src/cli/commands/{adopt-plan.ts → adoption-plan.ts} +15 -15
  64. package/src/cli/commands/chatgpt.ts +57 -0
  65. package/src/cli/commands/init-hook.ts +6 -6
  66. package/src/cli/commands/init.ts +7 -7
  67. package/src/cli/commands/migrate.ts +1 -1
  68. package/src/cli/index.ts +151 -170
  69. package/src/cli/mcp/policy.ts +12 -4
  70. package/src/cli/mcp/setup.ts +8 -27
  71. package/src/cli/repo-adoption/target.ts +4 -3
  72. package/src/core/adoption/operations.ts +1 -1
  73. package/src/core/adoption/plan.ts +3 -3
  74. package/src/core/adoption/render.ts +6 -6
  75. package/src/core/skill-surface/catalog.ts +2 -2
  76. package/src/effects/fs-transaction.ts +9 -4
  77. package/src/effects/repo-registry.ts +2 -2
package/AGENTS.md CHANGED
@@ -46,7 +46,7 @@ This repository self-hosts the `repo-harness` contract; the former `repo-harness
46
46
  - Treat `.ai/harness/brain-manifest.json` and `repo-harness run sync-brain-docs` as explicit operator-invoked export surfaces only; hooks and workflow checks must not read, write, or gate on external brain-vault state.
47
47
  - Treat Waza as Codex-first: `~/.codex/skills` is the Codex runtime source; `~/.agents/skills` is skills CLI staging/cache only. Update by staging upstream Waza, copying the eight managed `SKILL.md` files into Codex, and verifying with `cmp`.
48
48
  - Use `docs/reference-configs/external-tooling.md` and `bash scripts/check-agent-tooling.sh --host both --check-updates` for environment checks; this self-host repo vendors CodeGraph as a dev dependency while generated downstream repos keep the global MCP default unless local policy opts in.
49
- - When changing adoption planner or transaction code, verify `repo-harness adopt --repo . --dry-run` and a fixture apply use the same TS operation model.
49
+ - When changing adoption planner or transaction code, verify `repo-harness init --repo . --dry-run` and a fixture apply use the same TS operation model.
50
50
  - Treat repo-local `.claude/settings.json` and `.codex/hooks.json` hook adapters as retired legacy config; migration may back them up locally, but they are not product deliverables.
51
51
 
52
52
  ## Code Optimization Principles
@@ -65,7 +65,7 @@ bash scripts/check-architecture-sync.sh
65
65
  bash scripts/check-task-sync.sh
66
66
  repo-harness run check-task-workflow --strict
67
67
  bun scripts/inspect-project-state.ts --repo . --format text
68
- bun src/cli/index.ts adopt --repo . --dry-run
68
+ bun src/cli/index.ts init --repo . --dry-run
69
69
  ```
70
70
 
71
71
  <!-- BEGIN ARCHITECTURE CONTRACT -->
package/CLAUDE.md CHANGED
@@ -46,7 +46,7 @@ This repository self-hosts the `repo-harness` contract; the former `repo-harness
46
46
  - Treat `.ai/harness/brain-manifest.json` and `repo-harness run sync-brain-docs` as explicit operator-invoked export surfaces only; hooks and workflow checks must not read, write, or gate on external brain-vault state.
47
47
  - Treat Waza as Codex-first: `~/.codex/skills` is the Codex runtime source; `~/.agents/skills` is skills CLI staging/cache only. Update by staging upstream Waza, copying the eight managed `SKILL.md` files into Codex, and verifying with `cmp`.
48
48
  - Use `docs/reference-configs/external-tooling.md` and `bash scripts/check-agent-tooling.sh --host both --check-updates` for environment checks; this self-host repo vendors CodeGraph as a dev dependency while generated downstream repos keep the global MCP default unless local policy opts in.
49
- - When changing adoption planner or transaction code, verify `repo-harness adopt --repo . --dry-run` and a fixture apply use the same TS operation model.
49
+ - When changing adoption planner or transaction code, verify `repo-harness init --repo . --dry-run` and a fixture apply use the same TS operation model.
50
50
  - Treat repo-local `.claude/settings.json` and `.codex/hooks.json` hook adapters as retired legacy config; migration may back them up locally, but they are not product deliverables.
51
51
 
52
52
  ## Code Optimization Principles
@@ -65,7 +65,7 @@ bash scripts/check-architecture-sync.sh
65
65
  bash scripts/check-task-sync.sh
66
66
  repo-harness run check-task-workflow --strict
67
67
  bun scripts/inspect-project-state.ts --repo . --format text
68
- bun src/cli/index.ts adopt --repo . --dry-run
68
+ bun src/cli/index.ts init --repo . --dry-run
69
69
  ```
70
70
 
71
71
  <!-- BEGIN ARCHITECTURE CONTRACT -->
package/README.es.md CHANGED
@@ -82,7 +82,7 @@ artifacts.
82
82
  ## Novedades
83
83
 
84
84
  Las notas de versión viven en [`docs/CHANGELOG.md`](docs/CHANGELOG.md). La línea
85
- actual es `0.11.2`.
85
+ actual es `0.12.0`.
86
86
 
87
87
  ## Cómo funciona
88
88
 
@@ -91,7 +91,7 @@ En conjunto hay tres capas y un único runtime typed para host events:
91
91
  1. **Capa del paquete fuente**: este repositorio mantiene la CLI, los command
92
92
  skill facades, los templates, los hook assets, el workflow contract, los tests
93
93
  y el release gate.
94
- 2. **Capa del contract del repositorio objetivo**: `repo-harness adopt` o la
94
+ 2. **Capa del contract del repositorio objetivo**: `repo-harness init` o la
95
95
  migración escribe `docs/spec.md`, `plans/`, `tasks/`, `.ai/context/`,
96
96
  `.ai/harness/` y helper scripts. `.ai/hooks/lib/workflow-state.sh` es solo
97
97
  una proyección de operator helper.
@@ -225,7 +225,7 @@ repo-harness install
225
225
  ```
226
226
 
227
227
  `repo-harness install` es el bootstrap global, `repo-harness update` es el refresco
228
- user-level y `repo-harness adopt` es el refresco repo-local. `repo-harness install`
228
+ user-level y `repo-harness init` es el refresco repo-local. `repo-harness install`
229
229
  configura el CLI, los hook adapters de nivel usuario, Waza, Mermaid, el brain
230
230
  root y CodeGraph MCP; el viejo camino Claude plugin `scripts/setup-plugins.sh`
231
231
  queda retirado.
@@ -235,17 +235,17 @@ queda retirado.
235
235
  En un repositorio existente, ejecuta desde el repo root:
236
236
 
237
237
  ```bash
238
- repo-harness adopt --dry-run
238
+ repo-harness init --dry-run
239
239
  ```
240
240
 
241
241
  Aplica solo después de que el reporte del dry-run sea correcto:
242
242
 
243
243
  ```bash
244
- repo-harness adopt
244
+ repo-harness init
245
245
  ```
246
246
 
247
247
  Para un proyecto o módulo nuevo, usa el modo scaffold de `repo-harness-setup`.
248
- Para un repositorio existente, usa `repo-harness adopt`; este instala o refresca
248
+ Para un repositorio existente, usa `repo-harness init`; este instala o refresca
249
249
  el harness y no crea el stack tecnológico de la aplicación.
250
250
 
251
251
  ### Cómo se ve el éxito
@@ -413,8 +413,8 @@ Guards habituales:
413
413
 
414
414
  ## Release actual
415
415
 
416
- - npm package: `repo-harness@0.11.2`
417
- - Generated workflow stamp: `repo-harness@0.11.2+template@0.11.2`
416
+ - npm package: `repo-harness@0.12.0`
417
+ - Generated workflow stamp: `repo-harness@0.12.0+template@0.12.0`
418
418
  - GitHub repository: `Ancienttwo/repo-harness`
419
419
  - Release history: [`docs/CHANGELOG.md`](docs/CHANGELOG.md)
420
420
 
@@ -455,7 +455,7 @@ hooks ejecutan:
455
455
 
456
456
  - Router: `repo-harness` (Skill raíz, sincronizado sin condición en cada
457
457
  profile)
458
- - Capa setup: `repo-harness-setup` (modos adopt/init, migrate, upgrade,
458
+ - Capa setup: `repo-harness-setup` (modos init, migrate, upgrade,
459
459
  repair, scaffold, y capability-configuration; router-only, nunca
460
460
  descubierto automáticamente por un profile)
461
461
  - Planning: `repo-harness-plan` (crea un plan decision-complete, o revisa uno
@@ -492,7 +492,7 @@ Sprint detallado; prepara un prompt `/goal` acotado para Codex/Claude y
492
492
  mantiene el PRD/Sprint como source of truth. Si falta ese documento, el modo
493
493
  Goal debe pedirlo antes de empezar implementación desde el chat.
494
494
 
495
- `repo-harness adopt` se usa para repositorios existentes; el modo scaffold de
495
+ `repo-harness init` se usa para repositorios existentes; el modo scaffold de
496
496
  `repo-harness-setup` queda para crear proyectos o módulos nuevos. `hooks-init`,
497
497
  `docs-init` y `create-project-dirs` son pasos internos, no commands públicos.
498
498
 
@@ -553,7 +553,7 @@ bun test
553
553
  bash scripts/check-task-sync.sh
554
554
  bash scripts/check-task-workflow.sh --strict
555
555
  bun scripts/inspect-project-state.ts --repo . --format text
556
- bun src/cli/index.ts adopt --repo . --dry-run
556
+ bun src/cli/index.ts init --repo . --dry-run
557
557
  bash scripts/check-agent-tooling.sh --host both --check-updates
558
558
  bun run benchmark:skills --eval route-workflow-check
559
559
  ```
@@ -628,7 +628,7 @@ bash scripts/check-architecture-sync.sh
628
628
  bash scripts/check-task-sync.sh
629
629
  bash scripts/check-task-workflow.sh --strict
630
630
  bun scripts/inspect-project-state.ts --repo . --format text
631
- bun src/cli/index.ts adopt --repo . --dry-run
631
+ bun src/cli/index.ts init --repo . --dry-run
632
632
  bash scripts/check-agent-tooling.sh --host both --check-updates
633
633
  bun run benchmark:skills --eval route-workflow-check
634
634
  ```
package/README.fr.md CHANGED
@@ -82,7 +82,7 @@ l'emportent.
82
82
  ## Nouveautés
83
83
 
84
84
  Les notes de version vivent dans [`docs/CHANGELOG.md`](docs/CHANGELOG.md). La
85
- ligne actuelle est `0.11.2`.
85
+ ligne actuelle est `0.12.0`.
86
86
 
87
87
  ## Comment ça marche
88
88
 
@@ -91,7 +91,7 @@ L'ensemble se découpe en trois couches, avec un seul runtime typed pour les hos
91
91
  1. **Couche package source** : ce dépôt maintient le CLI, les command skill
92
92
  facades, les templates, les hook assets, le workflow contract, les tests et le
93
93
  release gate.
94
- 2. **Couche contrat du dépôt cible** : `repo-harness adopt` ou une migration écrit
94
+ 2. **Couche contrat du dépôt cible** : `repo-harness init` ou une migration écrit
95
95
  `docs/spec.md`, `plans/`, `tasks/`, `.ai/context/`, `.ai/harness/` et les helper
96
96
  scripts. `.ai/hooks/lib/workflow-state.sh` n'est qu'une projection d'operator helper.
97
97
  3. **Couche host adapter** : les `~/.claude/settings.json` et `~/.codex/hooks.json`
@@ -225,7 +225,7 @@ repo-harness install
225
225
  ```
226
226
 
227
227
  `repo-harness install` sert au bootstrap global, `repo-harness update` au
228
- rafraîchissement user-level, et `repo-harness adopt` au rafraîchissement
228
+ rafraîchissement user-level, et `repo-harness init` au rafraîchissement
229
229
  repo-local. `repo-harness install` configure le CLI, les hook adapters de niveau
230
230
  utilisateur, Waza, Mermaid, le brain root et CodeGraph MCP ; l'ancien chemin
231
231
  Claude plugin `scripts/setup-plugins.sh` est retiré.
@@ -233,26 +233,26 @@ Claude plugin `scripts/setup-plugins.sh` est retiré.
233
233
  ### 3. Prévisualiser le contrat repo-local
234
234
 
235
235
  ```bash
236
- repo-harness adopt --dry-run
236
+ repo-harness init --dry-run
237
237
  ```
238
238
 
239
239
  Lancez le dry-run depuis le repo root. Il rapporte les specs, l'état des tasks,
240
240
  le helper runtime, la cible des hook adapters et les fichiers de vérification qui
241
241
  seraient créés ou rafraîchis. Il ne doit pas créer de stack applicatif : un dépôt
242
- existant utilise `repo-harness adopt`, un nouveau projet ou module utilise le
242
+ existant utilise `repo-harness init`, un nouveau projet ou module utilise le
243
243
  mode scaffold de `repo-harness-setup`.
244
244
 
245
245
  ### 4. Appliquer, puis prouver le workflow
246
246
 
247
247
  ```bash
248
- repo-harness adopt
248
+ repo-harness init
249
249
  bash scripts/check-task-workflow.sh --strict
250
250
  bun test
251
251
  ```
252
252
 
253
253
  Après application, le dépôt doit avoir un contract file-backed auditable plutôt
254
254
  qu'une configuration de chat propre à un outil. Pour un nouveau projet ou module,
255
- utilisez le mode scaffold de `repo-harness-setup` au lieu de `adopt`. Les maintainers éditant le
255
+ utilisez le mode scaffold de `repo-harness-setup` au lieu de `init`. Les maintainers éditant le
256
256
  package lui-même ont besoin d'un source checkout — voir
257
257
  [Maintainer Reference](#maintainer-reference).
258
258
 
@@ -414,8 +414,8 @@ Guards courants :
414
414
 
415
415
  ## Release actuelle
416
416
 
417
- - npm package : `repo-harness@0.11.2`
418
- - Generated workflow stamp : `repo-harness@0.11.2+template@0.11.2`
417
+ - npm package : `repo-harness@0.12.0`
418
+ - Generated workflow stamp : `repo-harness@0.12.0+template@0.12.0`
419
419
  - GitHub repository : `Ancienttwo/repo-harness`
420
420
  - Release history : [`docs/CHANGELOG.md`](docs/CHANGELOG.md)
421
421
 
@@ -456,7 +456,7 @@ appartient au CLI et aux hooks :
456
456
 
457
457
  - Router : `repo-harness` (Skill racine, synchronisé sans condition sur chaque
458
458
  profile)
459
- - Couche setup : `repo-harness-setup` (modes adopt/init, migrate, upgrade,
459
+ - Couche setup : `repo-harness-setup` (modes init, migrate, upgrade,
460
460
  repair, scaffold, et capability-configuration ; router-only, jamais
461
461
  découvert automatiquement par un profile)
462
462
  - Planning : `repo-harness-plan` (crée un plan decision-complete, ou revoit un
@@ -496,7 +496,7 @@ Codex/Claude et garde le PRD/Sprint comme source of truth. Si ce document
496
496
  manque, le mode Goal doit le demander avant de lancer une implémentation depuis
497
497
  le chat.
498
498
 
499
- `repo-harness adopt` sert aux dépôts existants ; le mode scaffold de
499
+ `repo-harness init` sert aux dépôts existants ; le mode scaffold de
500
500
  `repo-harness-setup` sert à créer un nouveau projet ou module. `hooks-init`,
501
501
  `docs-init` et `create-project-dirs` sont des étapes internes, pas des
502
502
  commands publiques.
@@ -558,7 +558,7 @@ bun test
558
558
  bash scripts/check-task-sync.sh
559
559
  bash scripts/check-task-workflow.sh --strict
560
560
  bun scripts/inspect-project-state.ts --repo . --format text
561
- bun src/cli/index.ts adopt --repo . --dry-run
561
+ bun src/cli/index.ts init --repo . --dry-run
562
562
  bash scripts/check-agent-tooling.sh --host both --check-updates
563
563
  bun run benchmark:skills --eval route-workflow-check
564
564
  ```
@@ -633,7 +633,7 @@ bash scripts/check-architecture-sync.sh
633
633
  bash scripts/check-task-sync.sh
634
634
  bash scripts/check-task-workflow.sh --strict
635
635
  bun scripts/inspect-project-state.ts --repo . --format text
636
- bun src/cli/index.ts adopt --repo . --dry-run
636
+ bun src/cli/index.ts init --repo . --dry-run
637
637
  bash scripts/check-agent-tooling.sh --host both --check-updates
638
638
  bun run benchmark:skills --eval route-workflow-check
639
639
  ```
package/README.ja.md CHANGED
@@ -71,7 +71,7 @@ review、checks、handoff と食い違う場合は、source artifacts を優先
71
71
  ## What's New
72
72
 
73
73
  リリースノートは [`docs/CHANGELOG.md`](docs/CHANGELOG.md) にあります。現在の
74
- ラインは `0.11.2` です。
74
+ ラインは `0.12.0` です。
75
75
 
76
76
  ## 仕組み
77
77
 
@@ -79,7 +79,7 @@ review、checks、handoff と食い違う場合は、source artifacts を優先
79
79
 
80
80
  1. **ソースパッケージ層**:本リポジトリが CLI、CLI-backed command facades、templates、hook assets、
81
81
  workflow contract、tests、release gate を所有します。
82
- 2. **対象リポジトリ contract 層**:`repo-harness adopt` または migration が、`docs/spec.md`、
82
+ 2. **対象リポジトリ contract 層**:`repo-harness init` または migration が、`docs/spec.md`、
83
83
  `plans/`、`tasks/`、`.ai/context/`、`.ai/harness/`、helper scripts を書き込みます。
84
84
  `.ai/hooks/lib/workflow-state.sh` は operator helper projection だけです。
85
85
  3. **Host adapter 層**:user-level の `~/.claude/settings.json` と `~/.codex/hooks.json` が
@@ -203,7 +203,7 @@ repo-harness install
203
203
  ```
204
204
 
205
205
  `repo-harness install` は global bootstrap、`repo-harness update` は
206
- user-level refresh、`repo-harness adopt` は repo-local refresh です。`repo-harness install` は CLI、user-level hook adapters、Waza、Mermaid、
206
+ user-level refresh、`repo-harness init` は repo-local refresh です。`repo-harness install` は CLI、user-level hook adapters、Waza、Mermaid、
207
207
  brain root、CodeGraph MCP を設定し、退役した `scripts/setup-plugins.sh` の Claude plugin path は使いません。
208
208
 
209
209
  package 本体を編集する maintainer はソースの checkout が必要です
@@ -214,17 +214,17 @@ package 本体を編集する maintainer はソースの checkout が必要で
214
214
  既存リポジトリでは repo root から実行します。
215
215
 
216
216
  ```bash
217
- repo-harness adopt --dry-run
217
+ repo-harness init --dry-run
218
218
  ```
219
219
 
220
220
  dry-run のレポートが正しいことを確認してから適用します。
221
221
 
222
222
  ```bash
223
- repo-harness adopt
223
+ repo-harness init
224
224
  ```
225
225
 
226
226
  新しいプロジェクトやモジュールには `repo-harness-setup` の scaffold mode を使います。既存リポジトリには
227
- `repo-harness adopt` を使います。これは harness をインストールまたはリフレッシュするもので、アプリケーション
227
+ `repo-harness init` を使います。これは harness をインストールまたはリフレッシュするもので、アプリケーション
228
228
  スタックは作成しません。
229
229
 
230
230
  ### 成功した状態
@@ -389,8 +389,8 @@ hook がブロックしたときは、まず terminal の構造化された出
389
389
 
390
390
  ## 現在の Release
391
391
 
392
- - npm package:`repo-harness@0.11.2`
393
- - Generated workflow stamp:`repo-harness@0.11.2+template@0.11.2`
392
+ - npm package:`repo-harness@0.12.0`
393
+ - Generated workflow stamp:`repo-harness@0.12.0+template@0.12.0`
394
394
  - GitHub repository:`Ancienttwo/repo-harness`
395
395
  - Release history:[`docs/CHANGELOG.md`](docs/CHANGELOG.md)
396
396
 
@@ -427,7 +427,7 @@ package)と `assets/skill-commands/`(その場で進化する survivor)に
427
427
  host skill discovery の範囲を保ちつつ、実行は CLI と hooks が担います。
428
428
 
429
429
  - Router:`repo-harness`(root Skill。すべての profile に無条件で同期される)
430
- - Setup layer:`repo-harness-setup`(adopt/init、migrate、upgrade、repair、
430
+ - Setup layer:`repo-harness-setup`(init、migrate、upgrade、repair、
431
431
  scaffold、capability-configuration の各 mode。router-only で、どの profile
432
432
  からも自動発見されない)
433
433
  - Planning:`repo-harness-plan`(decision-complete plan を作成、または既存
@@ -465,7 +465,7 @@ artifact がある場合だけ使い、Codex/Claude 向けの bounded `/goal` pr
465
465
  備し、PRD/Sprint を source of truth として維持します。その文書がない場合、
466
466
  Goal mode はチャット文脈から実装を始めず、先に文書を要求しなければなりません。
467
467
 
468
- `repo-harness adopt` は既存リポジトリ向け、`repo-harness-setup` の scaffold
468
+ `repo-harness init` は既存リポジトリ向け、`repo-harness-setup` の scaffold
469
469
  mode は新しいプロジェクトやモジュールを作成します。
470
470
  `hooks-init`、`docs-init`、`create-project-dirs` は内部ステップであり、公開 commands ではありません。
471
471
 
@@ -525,7 +525,7 @@ bun test
525
525
  bash scripts/check-task-sync.sh
526
526
  bash scripts/check-task-workflow.sh --strict
527
527
  bun scripts/inspect-project-state.ts --repo . --format text
528
- bun src/cli/index.ts adopt --repo . --dry-run
528
+ bun src/cli/index.ts init --repo . --dry-run
529
529
  bash scripts/check-agent-tooling.sh --host both --check-updates
530
530
  bun run benchmark:skills --eval route-workflow-check
531
531
  ```
@@ -600,7 +600,7 @@ bash scripts/check-architecture-sync.sh
600
600
  bash scripts/check-task-sync.sh
601
601
  bash scripts/check-task-workflow.sh --strict
602
602
  bun scripts/inspect-project-state.ts --repo . --format text
603
- bun src/cli/index.ts adopt --repo . --dry-run
603
+ bun src/cli/index.ts init --repo . --dry-run
604
604
  bash scripts/check-agent-tooling.sh --host both --check-updates
605
605
  bun run benchmark:skills --eval route-workflow-check
606
606
  ```
package/README.md CHANGED
@@ -88,7 +88,7 @@ active plan, contract, review, checks, or handoff, the source artifacts win.
88
88
  ## What's New
89
89
 
90
90
  Release notes live in [`docs/CHANGELOG.md`](docs/CHANGELOG.md). The current line
91
- is `0.11.2`.
91
+ is `0.12.0`.
92
92
 
93
93
  ## How It Works
94
94
 
@@ -97,7 +97,7 @@ The design has three layers:
97
97
  1. **Source package**: this repository owns the CLI, CLI-backed command facades,
98
98
  templates, typed hook handlers, the operator-helper asset, workflow contract,
99
99
  tests, and release gate.
100
- 2. **Target repo contract**: `repo-harness adopt` or migration writes repo-local
100
+ 2. **Target repo contract**: `repo-harness init` or migration writes repo-local
101
101
  files such as `docs/spec.md`, `plans/`, `tasks/`, `.ai/context/`,
102
102
  `.ai/harness/`, helper scripts, and `.ai/hooks/`.
103
103
  3. **Host adapters**: user-level `~/.claude/settings.json` and
@@ -301,7 +301,7 @@ It does not apply repo-local workflow files to the current directory.
301
301
  For an Agent-owned, read-only bootstrap audit, run `repo-harness setup check
302
302
  --json` or add `--check-updates` for version and adopted-repo refresh
303
303
  advisories. `setup check` is not a runtime hook: it does not write user-level
304
- files, install updates, run `adopt`, or register adapters. It emits
304
+ files, install updates, run `init`, or register adapters. It emits
305
305
  `agent_actions` with the reason, risk, target files, optional command, and
306
306
  verification surface for the Agent to execute deliberately.
307
307
  `repo-harness init-hook` remains a compatibility alias.
@@ -322,7 +322,7 @@ repo-harness install --target both --location global
322
322
  repo-harness update --check
323
323
 
324
324
  # Refresh repo-local workflow files in an adopted repository.
325
- repo-harness adopt --repo /path/to/repo
325
+ repo-harness init --repo /path/to/repo
326
326
  ```
327
327
 
328
328
  `repo-harness install --target codex|both --location global` also resolves and
@@ -343,19 +343,19 @@ it never writes a silent default.
343
343
  ### 3. Preview the repo-local contract
344
344
 
345
345
  ```bash
346
- repo-harness adopt --dry-run
346
+ repo-harness init --dry-run
347
347
  ```
348
348
 
349
349
  Run the dry run from the target repository root. It reports the specs, task
350
350
  state, helper runtime, hook adapter target, and verification files that would be
351
351
  created or refreshed. It should not create an application stack; existing repos
352
- use `repo-harness adopt`, while new projects or modules use
352
+ use `repo-harness init`, while new projects or modules use
353
353
  `repo-harness-setup`'s scaffold mode.
354
354
 
355
355
  ### 4. Apply, then prove the workflow
356
356
 
357
357
  ```bash
358
- repo-harness adopt
358
+ repo-harness init
359
359
  bash scripts/check-task-workflow.sh --strict
360
360
  bun test
361
361
  ```
@@ -366,7 +366,7 @@ tool-specific chat setup. Agents should be able to find the stable intent in
366
366
  `.ai/harness/handoff/`.
367
367
 
368
368
  For a new project or module, use `repo-harness-setup`'s scaffold mode instead
369
- of `adopt`; it installs or refreshes the harness without creating an
369
+ of `init`; it installs or refreshes the harness without creating an
370
370
  application stack. Maintainers editing the package itself need a source checkout
371
371
  — see [Maintainer Reference](#maintainer-reference).
372
372
 
@@ -470,7 +470,7 @@ Sprint.
470
470
 
471
471
  The ChatGPT Connector registers one endpoint URL, not one repository per URL.
472
472
  Adopted repos are discovered from `~/.repo-harness/registered-repos.json`, which
473
- is updated by `repo-harness adopt`, `repo-harness init`, and user-scope ChatGPT
473
+ is updated by `repo-harness init` and user-scope ChatGPT
474
474
  setup. Stale registry entries are ignored unless the live repo still has
475
475
  repo-harness adoption markers.
476
476
 
@@ -638,8 +638,8 @@ Most common guards:
638
638
 
639
639
  ## Current Release
640
640
 
641
- - npm package: `repo-harness@0.11.2`
642
- - Generated workflow stamp: `repo-harness@0.11.2+template@0.11.2`
641
+ - npm package: `repo-harness@0.12.0`
642
+ - Generated workflow stamp: `repo-harness@0.12.0+template@0.12.0`
643
643
  - GitHub repository: `Ancienttwo/repo-harness`
644
644
  - Release history: [`docs/CHANGELOG.md`](docs/CHANGELOG.md)
645
645
 
@@ -681,7 +681,7 @@ place). They keep host skill discovery bounded while the CLI and hooks own
681
681
  execution:
682
682
 
683
683
  - Router: `repo-harness` (root Skill, synced unconditionally to every profile)
684
- - Setup layer: `repo-harness-setup` (adopt/init, migrate, upgrade, repair,
684
+ - Setup layer: `repo-harness-setup` (init, migrate, upgrade, repair,
685
685
  scaffold, and capability-configuration modes; router-only, never
686
686
  auto-discovered by a profile)
687
687
  - Planning: `repo-harness-plan` (create a decision-complete plan, or review an
@@ -722,7 +722,7 @@ bounded Codex/Claude `/goal` prompt and keeps the PRD/Sprint as the source of
722
722
  truth. If that document is missing, Goal mode must ask for it instead of
723
723
  starting implementation from chat context.
724
724
 
725
- `repo-harness adopt` is for an existing repo; `repo-harness-setup`'s scaffold
725
+ `repo-harness init` is for an existing repo; `repo-harness-setup`'s scaffold
726
726
  mode creates a new project or module scaffold as a side mode. `hooks-init`,
727
727
  `docs-init`, and `create-project-dirs` are internal steps, not public
728
728
  commands.
@@ -866,7 +866,7 @@ bash scripts/check-architecture-sync.sh
866
866
  bash scripts/check-task-sync.sh
867
867
  bash scripts/check-task-workflow.sh --strict
868
868
  bun scripts/inspect-project-state.ts --repo . --format text
869
- bun src/cli/index.ts adopt --repo . --dry-run
869
+ bun src/cli/index.ts init --repo . --dry-run
870
870
  bash scripts/check-agent-tooling.sh --host both --check-updates
871
871
  bun run benchmark:skills --eval route-workflow-check
872
872
  ```
package/README.zh-CN.md CHANGED
@@ -71,7 +71,7 @@ review、checks 或 handoff 冲突,以 source artifacts 为准。
71
71
 
72
72
  ## What's New
73
73
 
74
- Release notes 见 [`docs/CHANGELOG.md`](docs/CHANGELOG.md),当前版本线是 `0.11.2`。
74
+ Release notes 见 [`docs/CHANGELOG.md`](docs/CHANGELOG.md),当前版本线是 `0.12.0`。
75
75
 
76
76
  ## 工作原理
77
77
 
@@ -79,7 +79,7 @@ Release notes 见 [`docs/CHANGELOG.md`](docs/CHANGELOG.md),当前版本线是
79
79
 
80
80
  1. **源码包层**:本仓库维护 CLI、CLI-backed command facades、templates、hook assets、
81
81
  workflow contract、tests 和 release gate。
82
- 2. **目标仓库合约层**:`repo-harness adopt` 或 migration 会写入 `docs/spec.md`、
82
+ 2. **目标仓库合约层**:`repo-harness init` 或 migration 会写入 `docs/spec.md`、
83
83
  `plans/`、`tasks/`、`.ai/context/`、`.ai/harness/` 和 helper scripts;
84
84
  `.ai/hooks/lib/workflow-state.sh` 只作为 operator helper projection。
85
85
  3. **Host adapter 层**:user-level `~/.claude/settings.json` 和 `~/.codex/hooks.json`
@@ -242,11 +242,10 @@ skill aliases,安装 user-level hook adapters,配置 Waza runtime skills,
242
242
  root 持久化到 `~/.repo-harness/config.json`,并配置 CodeGraph MCP。这个命令是
243
243
  幂等的:如果 CLI 已经来自 Bun global package source,它会跳过 CLI 重装,但仍继续
244
244
  刷新 host runtime pieces。它不会把当前目录默认迁移成 repo-local workflow。
245
- `repo-harness init` 保留为兼容 alias,给已有脚本用。
246
245
 
247
246
  如果要让 Agent 做只读 bootstrap audit,运行 `repo-harness setup check
248
247
  --json`;需要版本和已接入仓库刷新提示时加 `--check-updates`。`setup check`
249
- 不是 runtime hook:它不会写 user-level files、安装更新、执行 `adopt` 或注册
248
+ 不是 runtime hook:它不会写 user-level files、安装更新、执行 `init` 或注册
250
249
  adapters,只输出带 reason、risk、targets、可选 command 和 verification 的
251
250
  `agent_actions`,由 Agent 再显式执行。
252
251
  `repo-harness init-hook` 保留为兼容 alias。
@@ -267,23 +266,23 @@ repo-harness install --target both --location global
267
266
  repo-harness update --check
268
267
 
269
268
  # 刷新已接入仓库里的 repo-local workflow 文件。
270
- repo-harness adopt --repo /path/to/repo
269
+ repo-harness init --repo /path/to/repo
271
270
  ```
272
271
 
273
272
  ### 3. 预览 repo-local contract
274
273
 
275
274
  ```bash
276
- repo-harness adopt --dry-run
275
+ repo-harness init --dry-run
277
276
  ```
278
277
 
279
278
  在目标仓库根目录运行 dry-run。它会报告将要创建或刷新的 spec、task state、
280
279
  helper runtime、hook adapter target 和 verification files。它不会创建应用技术栈;
281
- 已有仓库走 `repo-harness adopt`,新项目或新模块走 `repo-harness-setup` 的 scaffold mode。
280
+ 已有仓库走 `repo-harness init`,新项目或新模块走 `repo-harness-setup` 的 scaffold mode。
282
281
 
283
282
  ### 4. 应用后验证 workflow
284
283
 
285
284
  ```bash
286
- repo-harness adopt
285
+ repo-harness init
287
286
  bash scripts/check-task-workflow.sh --strict
288
287
  bun test
289
288
  ```
@@ -292,7 +291,7 @@ bun test
292
291
  聊天配置。agent 应该能在 `docs/spec.md` 找到稳定意图,在 `plans/` 和 `tasks/`
293
292
  找到执行状态,在 `.ai/harness/handoff/` 找到可恢复状态。
294
293
 
295
- 新项目或新模块用 `repo-harness-setup` 的 scaffold mode 代替 `adopt`;它会安装或
294
+ 新项目或新模块用 `repo-harness-setup` 的 scaffold mode 代替 `init`;它会安装或
296
295
  刷新 harness,不会创建应用技术栈。维护者编辑 package 源码需要 source checkout
297
296
  —— 见 [Maintainer Reference](#maintainer-reference)。
298
297
 
@@ -449,8 +448,8 @@ hook block 工作时,先看 terminal 里的结构化输出。核心字段是
449
448
 
450
449
  ## 当前 Release
451
450
 
452
- - npm package:`repo-harness@0.11.2`
453
- - Generated workflow stamp:`repo-harness@0.11.2+template@0.11.2`
451
+ - npm package:`repo-harness@0.12.0`
452
+ - Generated workflow stamp:`repo-harness@0.12.0+template@0.12.0`
454
453
  - GitHub repository:`Ancienttwo/repo-harness`
455
454
  - Release history:[`docs/CHANGELOG.md`](docs/CHANGELOG.md)
456
455
 
@@ -488,7 +487,7 @@ canonical rule-owner package 分布在 `assets/skills/`(已激活的 canonical
488
487
  的边界,真正执行由 CLI 和 hooks 负责:
489
488
 
490
489
  - Router:`repo-harness`(root Skill,无条件同步到每个 profile)
491
- - Setup layer:`repo-harness-setup`(adopt/init、migrate、upgrade、repair、
490
+ - Setup layer:`repo-harness-setup`(init、migrate、upgrade、repair、
492
491
  scaffold、capability-configuration 各 mode;仅 router-only,不被任何 profile
493
492
  自动发现)
494
493
  - Planning:`repo-harness-plan`(创建 decision-complete plan,或 review 已有 plan)
@@ -521,7 +520,7 @@ Sprint artifact 后使用,用它生成有边界的 Codex/Claude `/goal` prompt
521
520
  PRD/Sprint 保持为 source of truth。缺少这份文档时,Goal mode 必须先要求补文档,
522
521
  而不是从聊天上下文直接开工。
523
522
 
524
- `repo-harness adopt` 用于已有仓库;`repo-harness-setup` 的 scaffold mode 创建新
523
+ `repo-harness init` 用于已有仓库;`repo-harness-setup` 的 scaffold mode 创建新
525
524
  项目或模块。`hooks-init`、`docs-init` 和 `create-project-dirs` 是内部步骤,不是
526
525
  公共 commands。
527
526
 
@@ -590,7 +589,7 @@ bash scripts/check-architecture-sync.sh
590
589
  bash scripts/check-task-sync.sh
591
590
  bash scripts/check-task-workflow.sh --strict
592
591
  bun scripts/inspect-project-state.ts --repo . --format text
593
- bun src/cli/index.ts adopt --repo . --dry-run
592
+ bun src/cli/index.ts init --repo . --dry-run
594
593
  bash scripts/check-agent-tooling.sh --host both --check-updates
595
594
  bun run benchmark:skills --eval route-workflow-check
596
595
  ```
@@ -665,7 +664,7 @@ bash scripts/check-architecture-sync.sh
665
664
  bash scripts/check-task-sync.sh
666
665
  bash scripts/check-task-workflow.sh --strict
667
666
  bun scripts/inspect-project-state.ts --repo . --format text
668
- bun src/cli/index.ts adopt --repo . --dry-run
667
+ bun src/cli/index.ts init --repo . --dry-run
669
668
  bash scripts/check-agent-tooling.sh --host both --check-updates
670
669
  bun run benchmark:skills --eval route-workflow-check
671
670
  ```
package/SKILL.md CHANGED
@@ -18,7 +18,7 @@ Treat that JSON as the state authority; read Plan, Contract, checks, handoff, or
18
18
 
19
19
  ## Actions
20
20
 
21
- 1. **setup** — install, adopt, migrate, repair, or scaffold the harness. Use `repo-harness-setup`; inspect first with `repo-harness adopt --repo . --dry-run`, or run `repo-harness docs show harness-overview` when detail is needed.
21
+ 1. **setup** — install, init, migrate, repair, or scaffold the harness. Use `repo-harness-setup`; inspect first with `repo-harness init --repo . --dry-run`, or run `repo-harness docs show harness-overview` when detail is needed.
22
22
  2. **plan** — create or capture a decision-complete plan. Use `repo-harness-plan`; run `repo-harness docs show agentic-development-flow` for promotion boundaries.
23
23
  3. **execute** — continue the active task via its resolved profile and allowed paths: Lite (brief → edit → test), Standard (plan → edit → verify → one review), Strict (Contract/worktree/checks/external-acceptance).
24
24
  4. **verify** — run targeted tests and the profile-required gates. Use `repo-harness-check`; never infer provider-owned evidence.
@@ -0,0 +1,14 @@
1
+ ---
2
+ name: deep-worker
3
+ description: Heavy execution worker on Opus at high effort. Use for hard, well-scoped execution — cross-module refactors, tricky concurrency or state fixes, changes that must land right in one pass; verifies with the project's real commands and returns `RESULT: DONE/PARTIAL/BLOCKED` with the evidence. Not for planning, architecture, or acceptance judgment — those go to deep-reasoner or gatekeeper; routine execution goes to fast-worker.
4
+ model: opus
5
+ effort: high
6
+ ---
7
+
8
+ You are a heavy execution worker. An orchestrator hands you the harder well-scoped tasks — cross-module refactors, tricky concurrency or state fixes, changes that must land right in one pass — and you execute them directly and return. You do not plan, decide architecture, or ship.
9
+
10
+ - **Result first.** When you finish a dispatched task, your final message opens with exactly one of `RESULT: DONE`, `RESULT: PARTIAL`, `RESULT: BLOCKED` — the orchestrator machine-reads this line. DONE = the task is complete and its verification ran clean this turn; PARTIAL = you delivered part but a gate failed or scope remained; BLOCKED = a precondition stopped you (ambiguity, a missing dependency, or a call above your role).
11
+ - **Stay in scope; hand back judgment.** Execute immediately — do not re-plan, widen scope, or spawn subagents, and edit only the files the task names or clearly implies. If it turns out ambiguous, architectural, or higher-risk than stated, stop and return `RESULT: BLOCKED` with what you found instead of deciding yourself.
12
+ - **Prove it ran.** Verify changes with the project's real commands (typecheck, tests, build) and paste the actual output. A success claim counts only if its command ran this turn with output in the transcript; otherwise label it `[inferred]` or `[unverified]`. Never report `RESULT: DONE` without verification output.
13
+ - **Boundaries.** By default you do not commit, push, open or merge PRs, install global dependencies, or touch code outside the task's surface — those are the orchestrator's or the gate's calls unless a dispatch explicitly orders one.
14
+ - **Sign-off.** Lead with the `RESULT:` line, then list files changed with `file:line` references, the verification command → its outcome, and anything you deliberately left out of scope. Keep it compact — no process narration.
@@ -1,8 +1,8 @@
1
1
  ---
2
2
  name: fast-worker
3
- description: Fast execution worker on Sonnet at max effort. Use for well-scoped implementation, tests, refactoring, documentation, and mechanical changes; verifies with the project's real commands and returns `RESULT: DONE/PARTIAL/BLOCKED` with the evidence. Not for planning, architecture, or high-risk judgment — those go to deep-reasoner or stay with the orchestrator.
4
- model: sonnet
5
- effort: max
3
+ description: Fast execution worker on Opus at medium effort. Use for well-scoped implementation, tests, refactoring, documentation, and mechanical changes; verifies with the project's real commands and returns `RESULT: DONE/PARTIAL/BLOCKED` with the evidence. Not for planning, architecture, or high-risk judgment — those go to deep-reasoner or stay with the orchestrator.
4
+ model: opus
5
+ effort: medium
6
6
  ---
7
7
 
8
8
  You are a fast execution worker. An orchestrator hands you well-scoped tasks — implementation, tests, refactoring, documentation, mechanical changes — and you execute them directly and return. You do not plan, decide architecture, or ship.
@@ -10,5 +10,5 @@ You are a fast execution worker. An orchestrator hands you well-scoped tasks —
10
10
  - **Result first.** When you finish a dispatched task, your final message opens with exactly one of `RESULT: DONE`, `RESULT: PARTIAL`, `RESULT: BLOCKED` — the orchestrator machine-reads this line. DONE = the task is complete and its verification ran clean this turn; PARTIAL = you delivered part but a gate failed or scope remained; BLOCKED = a precondition stopped you (ambiguity, a missing dependency, or a call above your role).
11
11
  - **Stay in scope; hand back judgment.** Execute immediately — do not re-plan, widen scope, or spawn subagents, and edit only the files the task names or clearly implies. If it turns out ambiguous, architectural, or higher-risk than stated, stop and return `RESULT: BLOCKED` with what you found instead of deciding yourself.
12
12
  - **Prove it ran.** Verify changes with the project's real commands (typecheck, tests, build) and paste the actual output. A success claim counts only if its command ran this turn with output in the transcript; otherwise label it `[inferred]` or `[unverified]`. Never report `RESULT: DONE` without verification output.
13
- - **Boundaries.** By default you do not commit, push, open or merge PRs, install global dependencies, or touch code outside the task's surface — those are the orchestrator's calls unless a dispatch explicitly orders one.
13
+ - **Boundaries.** By default you do not commit, push, open or merge PRs, install global dependencies, or touch code outside the task's surface — those are the orchestrator's or the gate's calls unless a dispatch explicitly orders one.
14
14
  - **Sign-off.** Lead with the `RESULT:` line, then list files changed with `file:line` references, the verification command → its outcome, and anything you deliberately left out of scope. Keep it compact — no process narration.
@@ -9,7 +9,7 @@ effort: high
9
9
  You are the disposable-state evaluator of existing repo-harness behavior. The orchestrator gives you a subject revision, baseline, profile, and complete disposable repo/HOME; you invoke existing evaluation surfaces there and report. You never create a new evaluator, grading method, dataset, truth source, or product gate.
10
10
 
11
11
  - **Verdict first.** Open with exactly one of `EVAL: PASS`, `EVAL: REGRESSION`, `EVAL: INCONCLUSIVE`, or `EVAL: BLOCKED`. PASS requires the named cases and both subject/baseline evidence when comparison is requested. REGRESSION requires a concrete behavioral delta. INCONCLUSIVE names missing or ambiguous evidence. BLOCKED names the environment, permission, or profile boundary that prevented execution.
12
- - **Choose one declared profile.** `skills` uses the existing skill-eval manifest, runner, graders, and tests. A full benchmark must use a disposable clone/worktree and invoke `bun scripts/run-skill-evals.ts --require-disposable --repo <disposable-repo> --home <disposable-home> ...`; guarded mode places its workspace under the disposable repo even though the ordinary benchmark default is a sibling directory. `adoption` must invoke `bun scripts/run-skill-evals.ts --run-adoption-profile --repo <disposable-repo> --home <disposable-home>`; that single guarded command injects the validated repo/HOME into the existing project-state inspector and `adopt --dry-run --json`. Both modes scrub inherited repo-harness source/helper overrides before spawning commands. Existing migration/audit fixtures may be cited as read-only context but are not separately executed with writable authority. The repo and HOME must be sibling directories under one disposable parent. Never omit the profile's guard or run against the source checkout. Migration auditing is this profile, not another identity.
12
+ - **Choose one declared profile.** `skills` uses the existing skill-eval manifest, runner, graders, and tests. A full benchmark must use a disposable clone/worktree and invoke `bun scripts/run-skill-evals.ts --require-disposable --repo <disposable-repo> --home <disposable-home> ...`; guarded mode places its workspace under the disposable repo even though the ordinary benchmark default is a sibling directory. `adoption` must invoke `bun scripts/run-skill-evals.ts --run-adoption-profile --repo <disposable-repo> --home <disposable-home>`; that single guarded command injects the validated repo/HOME into the existing project-state inspector and `init --dry-run --json`. Both modes scrub inherited repo-harness source/helper overrides before spawning commands. Existing migration/audit fixtures may be cited as read-only context but are not separately executed with writable authority. The repo and HOME must be sibling directories under one disposable parent. Never omit the profile's guard or run against the source checkout. Migration auditing is this profile, not another identity.
13
13
  - **Workspace-write is disposable-only.** Before any write-producing command, verify that both the working repository and HOME are the orchestrator-provided disposable locations and that the dispatch names them explicitly. Supplying only a temporary workspace directory is insufficient when a runner writes elsewhere in its repository. If the complete disposable repo/HOME is absent, ambiguous, or resolves to the source checkout or real HOME, return BLOCKED.
14
14
  - **BDD2 is forbidden authority.** Never read, invoke, modify, score, or cite `evals/bdd2/**` or `scripts/run-bdd2-evals.ts`. If a contract requests either path, fail closed and return it to the parent; that sealed system has its own runner, truth, and review authority.
15
15
  - **Remain a judge.** Inside disposable state, allow only writes produced by the existing evaluator/adoption commands. Do not hand-edit source, fixtures, manifests, graders, reports, policy, agent definitions, or benchmark methodology. Do not commit, push, open or merge PRs, mutate real HOME, publish, apply adoption, or repair findings. The orchestrator prepares disposable state and assigns fixes.