repo-harness 0.19.4 → 0.19.5

package/README.es.md

@@ -702,8 +702,8 @@ repositorio adopte la misma política.
 
 ## Versión actual
 
-- Paquete npm: `repo-harness@0.19.4`
-- Sello de workflow generado: `repo-harness@0.19.4+template@0.19.4`
+- Paquete npm: `repo-harness@0.19.5`
+- Sello de workflow generado: `repo-harness@0.19.5+template@0.19.5`
 - Repositorio de GitHub: `Ancienttwo/repo-harness`
 - Notas de versión e historial: [`docs/CHANGELOG.md`](docs/CHANGELOG.md)
 

package/README.fr.md

@@ -697,8 +697,8 @@ adopte la même policy.
 
 ## Release actuelle
 
-- Package npm : `repo-harness@0.19.4`
-- Generated workflow stamp : `repo-harness@0.19.4+template@0.19.4`
+- Package npm : `repo-harness@0.19.5`
+- Generated workflow stamp : `repo-harness@0.19.5+template@0.19.5`
 - Dépôt GitHub : `Ancienttwo/repo-harness`
 - Notes et historique de release : [`docs/CHANGELOG.md`](docs/CHANGELOG.md)
 

package/README.ja.md

@@ -694,8 +694,8 @@ commit script や hooks に組み込まないでください。
 
 ## 現在の Release
 
-- npm package：`repo-harness@0.19.4`
-- Generated workflow stamp：`repo-harness@0.19.4+template@0.19.4`
+- npm package：`repo-harness@0.19.5`
+- Generated workflow stamp：`repo-harness@0.19.5+template@0.19.5`
 - GitHub repository：`Ancienttwo/repo-harness`
 - Release notes and history：[`docs/CHANGELOG.md`](docs/CHANGELOG.md)
 

package/README.md

@@ -665,8 +665,8 @@ repo-harness commit scripts or hooks unless that repo adopts the same policy.
 
 ## Current Release
 
-- npm package: `repo-harness@0.19.4`
-- Generated workflow stamp: `repo-harness@0.19.4+template@0.19.4`
+- npm package: `repo-harness@0.19.5`
+- Generated workflow stamp: `repo-harness@0.19.5+template@0.19.5`
 - GitHub repository: `Ancienttwo/repo-harness`
 - Release notes and history: [`docs/CHANGELOG.md`](docs/CHANGELOG.md)
 

package/README.zh-CN.md

@@ -630,8 +630,8 @@ commit script 或 hook，除非目标仓库采用同样的 policy。
 
 ## 当前 Release
 
-- npm package：`repo-harness@0.19.4`
-- Generated workflow stamp：`repo-harness@0.19.4+template@0.19.4`
+- npm package：`repo-harness@0.19.5`
+- Generated workflow stamp：`repo-harness@0.19.5+template@0.19.5`
 - GitHub repository：`Ancienttwo/repo-harness`
 - Release notes 和 history：[`docs/CHANGELOG.md`](docs/CHANGELOG.md)
 

package/agents/fleet/explorer.md

@@ -1,9 +1,9 @@
 ---
 name: explorer
-description: Read-only codebase explorer on Sonnet at high effort. Use to locate files, symbols, call paths, tests, uncertainties, and candidate affected surfaces before implementation or judgment. Returns `FINDINGS: COMPLETE/PARTIAL/BLOCKED` with file:line evidence; never edits, decides architecture, or judges acceptance — hand the map to fast-worker, deep-reasoner, or gatekeeper.
+description: Read-only codebase explorer on Sonnet at medium effort. Use to locate files, symbols, call paths, tests, uncertainties, and candidate affected surfaces before implementation or judgment. Returns `FINDINGS: COMPLETE/PARTIAL/BLOCKED` with file:line evidence; never edits, decides architecture, or judges acceptance — hand the map to fast-worker, deep-reasoner, or gatekeeper.
 tools: ["Read", "Grep", "Glob", "Bash"]
 model: sonnet
-effort: high
+effort: medium
 ---
 
 You are the read-only explorer. An orchestrator hands you a question or task surface; you map the concrete repository evidence it needs and return. You do not edit, decide architecture, or judge acceptance.

package/agents/fleet/fast-worker.md

@@ -1,8 +1,8 @@
 ---
 name: fast-worker
-description: Fast execution worker on Opus at medium effort. Use for well-scoped implementation, tests, refactoring, documentation, and mechanical changes; verifies with the project's real commands and returns `RESULT: DONE/PARTIAL/BLOCKED` with the evidence. Not for planning, architecture, or high-risk judgment — those go to deep-reasoner or stay with the orchestrator.
-model: opus
-effort: medium
+description: Fast execution worker on Sonnet at high effort. Use for well-scoped implementation, tests, refactoring, documentation, and mechanical changes; verifies with the project's real commands and returns `RESULT: DONE/PARTIAL/BLOCKED` with the evidence. Not for planning, architecture, or high-risk judgment — those go to deep-reasoner or stay with the orchestrator.
+model: sonnet
+effort: high
 ---
 
 You are a fast execution worker. An orchestrator hands you well-scoped tasks — implementation, tests, refactoring, documentation, mechanical changes — and you execute them directly and return. You do not plan, decide architecture, or ship.

package/agents/fleet/root-cause-prover.md

@@ -1,9 +1,9 @@
 ---
 name: root-cause-prover
-description: Bugfix diagnosis and pre-fix evidence specialist on Opus at high effort. Use to prove a concrete root cause, reproduce it, add a candidate regression guard, and capture the existing four-field Root Cause Evidence shape before implementation; returns `DIAGNOSIS: CONFIRMED|LIKELY|BLOCKED`. It never fixes production source or changes the gate.
+description: Bugfix diagnosis and pre-fix evidence specialist on Opus at xhigh effort. Use to prove a concrete root cause, reproduce it, add a candidate regression guard, and capture the existing four-field Root Cause Evidence shape before implementation; returns `DIAGNOSIS: CONFIRMED|LIKELY|BLOCKED`. It never fixes production source or changes the gate.
 tools: ["Read", "Grep", "Glob", "Bash"]
 model: opus
-effort: high
+effort: xhigh
 ---
 
 You are the bounded bugfix diagnosis and pre-fix evidence specialist. The orchestrator gives you an active bugfix contract in an isolated worktree; you prove or falsify the cause and prepare evidence for the existing gate. You never implement the production fix or reinterpret the gate.

package/assets/hooks/lib/workflow-state.sh

@@ -1862,7 +1862,15 @@ workflow_contract_allows_path() {
     esac
 
     if [[ "$section" == "allowed_paths" && "$trimmed" =~ ^-[[:space:]]*(.+)$ ]]; then
-      item="$(workflow_strip_quotes "${BASH_REMATCH[1]}")"
+      item="${BASH_REMATCH[1]}"
+      # Drop a YAML inline comment: `#` at the start or after whitespace, outside a leading quoted scalar.
+      case "$item" in
+        \"*\"*) item="\"$(printf '%s' "${item:1}" | cut -d'"' -f1)\"" ;;
+        \'*\'*) item="'$(printf '%s' "${item:1}" | cut -d"'" -f1)'" ;;
+        *) item="$(printf '%s' "$item" | sed -E 's/^#.*$//; s/[[:space:]]+#.*$//')" ;;
+      esac
+      item="$(workflow_strip_quotes "$item")"
+      [[ -n "$item" ]] || continue
       pattern="$item"
       if [[ "$pattern" == */ ]]; then
         [[ "$file_path" == "$pattern"* ]] && return 0

package/assets/reference-configs/external-tooling.md

@@ -517,7 +517,7 @@ Minimal manifest shape:
   "run_id": "20260629T023507Z-aibridge-screenshot",
   "provider": {
     "name": "aibridge",
-    "version": "1.5.0"
+    "version": "1.6.1"
   },
   "subject": {
     "task_type": "unity.ui",
@@ -609,7 +609,7 @@ diff -qr ~/.agents/skills/geju ~/.codex/skills/geju
 ### CodeGraph
 
 ```bash
-bun add -g @colbymchenry/codegraph@1.5.0 && codegraph sync . && codegraph status .
+bun add -g @colbymchenry/codegraph@1.6.1 && codegraph sync . && codegraph status .
 ```
 
 ## Agent Fleet
@@ -639,23 +639,24 @@ mapping.
 |---|---|---|---|
 | `opus` | `gpt-6-astra` | `low`, `medium`, `high`, `xhigh`, `max` | same string, unchanged |
 | `sonnet`, `haiku` | `gpt-6-luna` | `low`, `medium`, `high`, `xhigh`, `max` | same string, unchanged |
-| `fable` | `gpt-6-sol` | `low`, `medium`, `high`, `xhigh`, `max` | same string, unchanged |
+| `fable` | `gpt-6.1-sol` | `low`, `medium`, `high`, `xhigh`, `max` | same string, unchanged |
 
-Five per-agent target overrides are applied after tuple validation, on top of
+Seven per-agent target overrides are applied after tuple validation, on top of
 the family row above, and are the only model/effort remaps in the generator:
-`fast-worker` (`opus`/`medium`) targets `gpt-6-sol` at `medium` reasoning;
-`deep-worker` (`opus`/`high`) targets `gpt-6-sol` at `xhigh` reasoning;
+`explorer` (`sonnet`/`medium`) targets `gpt-6-luna` at `high` reasoning;
+`deep-reasoner` (`opus`/`xhigh`) targets `gpt-6-astra` at `high` reasoning;
+`fast-worker` (`sonnet`/`high`) targets `gpt-6.1-sol` at `medium` reasoning;
+`deep-worker` (`opus`/`high`) targets `gpt-6.1-sol` at `high` reasoning;
 `gatekeeper` (`opus`/`high`) targets `gpt-6-astra` at `medium` reasoning;
-`root-cause-prover` and `harness-evaluator` (`opus`/`high`) target `gpt-6-sol`
-at `high` reasoning.
-Every other agent's Codex model and effort follow the family row unchanged.
+`root-cause-prover` (`opus`/`xhigh`) targets `gpt-6-astra` at `high` reasoning;
+`harness-evaluator` (`opus`/`high`) targets `gpt-6-astra` at `medium` reasoning.
 
 `fast-worker`, `deep-worker`, `root-cause-prover`, and `harness-evaluator`
 receive `sandbox_mode = "workspace-write"`; every other role receives
 `sandbox_mode = "read-only"`. Current assignments are explorer
-(`sonnet/high`), deep-reasoner (`opus/xhigh`), fast-worker (`opus/medium`),
+(`sonnet/medium`), deep-reasoner (`opus/xhigh`), fast-worker (`sonnet/high`),
 deep-worker (`opus/high`), gatekeeper (`opus/high`), root-cause-prover
-(`opus/high`), and harness-evaluator (`opus/high`). Root-cause-prover's prompt further limits
+(`opus/xhigh`), and harness-evaluator (`opus/high`). Root-cause-prover's prompt further limits
 writes to bugfix evidence inside the active contract's allowed paths;
 harness-evaluator runs existing skill/adoption surfaces only when both repo and
 HOME pass the runner's disposable boundary: skills uses `--require-disposable`,

package/assets/skill-version.json

@@ -1,6 +1,6 @@
 {
-  "version": "0.19.4",
-  "templateVersion": "0.19.4",
+  "version": "0.19.5",
+  "templateVersion": "0.19.5",
   "skillName": "repo-harness",
   "contractId": "tasks-first-harness-v1",
   "compatibility": {

package/assets/templates/helpers/check-agent-tooling.sh

@@ -1071,7 +1071,7 @@ function readAgentFleetSource(agent) {
   return { status: "read", path: sourcePath, hash: source.hash };
 }
 
-// Read-only mirror of install-agent-fleet.sh's loadUserManagedReceipt(): this
+// Read-only mirror of install-profile.ts's readAgentFleetUserManagedReceipt(): this
 // checker never writes ~/.repo-harness/agent-fleet-user-managed.json, it only
 // consults it so an operator-accepted customized file is not misreported as
 // drift. Any malformation invalidates the whole receipt (fail-closed) rather

package/assets/templates/helpers/contract-run.ts

@@ -337,7 +337,14 @@ function parseList(block: string, key: string): string[] {
     if (!inList) continue;
     if (/^\S/.test(line) || /^\s+[a-zA-Z0-9_-]+:/.test(line)) break;
     const match = line.match(/^\s*-\s*(.+)$/);
-    if (match) values.push(match[1].trim().replace(/^["']|["']$/g, ""));
+    if (!match) continue;
+    let value = match[1].trim();
+    const quote = value[0];
+    const close = quote === '"' || quote === "'" ? value.indexOf(quote, 1) : -1;
+    // Drop a YAML inline comment: `#` at the start or after whitespace, outside a leading quoted scalar.
+    value = close > 0 ? value.slice(0, close + 1) : value.replace(/(^|\s+)#.*$/, "").trim();
+    value = value.replace(/^["']|["']$/g, "");
+    if (value.length > 0) values.push(value);
   }
   return values;
 }

package/assets/templates/helpers/ensure-task-workflow.sh

@@ -1016,8 +1016,8 @@ ARCHITECTURE_INDEX_EOF
     "provider": "archctx",
     "proposal_author": "local",
     "stages": {
-      "scan": { "provider_version": "0.5.13", "required_features": ["module-statistics-v1", "refactor-assessment-v1", "recommendation-v3"] },
-      "verify": { "provider_version": "0.5.13", "required_features": ["refactor-resolution-v1"] }
+      "scan": { "provider_version": "0.6.1", "required_features": ["module-statistics-v1", "refactor-assessment-v1", "recommendation-v3"] },
+      "verify": { "provider_version": "0.6.1", "required_features": ["refactor-resolution-v1"] }
     },
     "workflow_routing": {
       "module_refactor": "work_package",

package/assets/templates/helpers/install-agent-fleet.sh

@@ -111,11 +111,16 @@ const MANAGED_AGENTS = ["explorer", "deep-reasoner", "fast-worker", "deep-worker
 const WRITABLE_AGENTS = new Set(["fast-worker", "deep-worker", "root-cause-prover", "harness-evaluator"]);
 const CLAUDE_TARGET_DIR = path.join(HOME, ".claude", "agents");
 const CODEX_TARGET_DIR = path.join(HOME, ".codex", "agents");
-const USER_MANAGED_RECEIPT_PATH = path.join(HOME, ".repo-harness", "agent-fleet-user-managed.json");
 const SOURCE_DIR = process.env.REPO_HARNESS_AGENT_FLEET_SOURCE_DIR;
-const { readInstalledProfile, managedInstallSurfaceIsCurrent } = require(
+const {
+  readInstalledProfile,
+  managedInstallSurfaceIsCurrent,
+  agentFleetUserManagedReceiptPath,
+  readAgentFleetUserManagedReceipt,
+} = require(
   path.join(SOURCE_DIR, "../../src/cli/installer/install-profile.ts"),
 );
+const USER_MANAGED_RECEIPT_PATH = agentFleetUserManagedReceiptPath({ ...process.env, HOME });
 const installedProfile = readInstalledProfile();
 
 // A generated persona carries role identity only. The anti-extras execution
@@ -145,18 +150,20 @@ const MODEL_EFFORT_MAP = {
   opus: buildFamilyEffortMap("Opus", "gpt-6-astra", "GPT-6 Astra"),
   sonnet: buildFamilyEffortMap("Sonnet", "gpt-6-luna", "GPT-6 Luna"),
   haiku: buildFamilyEffortMap("Haiku", "gpt-6-luna", "GPT-6 Luna"),
-  fable: buildFamilyEffortMap("Fable", "gpt-6-sol", "GPT-6 Sol"),
+  fable: buildFamilyEffortMap("Fable", "gpt-6.1-sol", "GPT-6.1 Sol"),
 };
 
 // Per-agent Codex target overrides — the only model/effort remaps in the fleet.
-// Execution and diagnostic roles use Sol or Luna; the gatekeeper uses Astra.
-// Explorer and deep-reasoner follow the family default.
+// Every role carries an explicit target so Codex model/effort never drift with
+// the Claude-side family default.
 const AGENT_TARGET_OVERRIDES = {
-  "fast-worker": { model: "gpt-6-sol", effort: "medium", targetDescription: "GPT-6 Sol at medium reasoning" },
-  "deep-worker": { model: "gpt-6-sol", effort: "xhigh", targetDescription: "GPT-6 Sol at xhigh reasoning" },
+  explorer: { model: "gpt-6-luna", effort: "high", targetDescription: "GPT-6 Luna at high reasoning" },
+  "deep-reasoner": { model: "gpt-6-astra", effort: "high", targetDescription: "GPT-6 Astra at high reasoning" },
+  "fast-worker": { model: "gpt-6.1-sol", effort: "medium", targetDescription: "GPT-6.1 Sol at medium reasoning" },
+  "deep-worker": { model: "gpt-6.1-sol", effort: "high", targetDescription: "GPT-6.1 Sol at high reasoning" },
   gatekeeper: { model: "gpt-6-astra", effort: "medium", targetDescription: "GPT-6 Astra at medium reasoning" },
-  "root-cause-prover": { model: "gpt-6-sol", effort: "high", targetDescription: "GPT-6 Sol at high reasoning" },
-  "harness-evaluator": { model: "gpt-6-sol", effort: "high", targetDescription: "GPT-6 Sol at high reasoning" },
+  "root-cause-prover": { model: "gpt-6-astra", effort: "high", targetDescription: "GPT-6 Astra at high reasoning" },
+  "harness-evaluator": { model: "gpt-6-astra", effort: "medium", targetDescription: "GPT-6 Astra at medium reasoning" },
 };
 
 function readSource(agent) {
@@ -313,33 +320,6 @@ function validateUserManagedCodex(agent, content) {
   }
 }
 
-function loadUserManagedReceipt(allowedPaths) {
-  if (!fs.existsSync(USER_MANAGED_RECEIPT_PATH)) return { ok: true, hashes: new Map() };
-  try {
-    const parsed = JSON.parse(fs.readFileSync(USER_MANAGED_RECEIPT_PATH, "utf8"));
-    if (
-      parsed?.protocol !== 1
-      || parsed?.authority !== "user-managed-agent-fleet"
-      || !Array.isArray(parsed.files)
-    ) return { ok: false, hashes: new Map() };
-    const hashes = new Map();
-    for (const entry of parsed.files) {
-      if (
-        !entry
-        || typeof entry.path !== "string"
-        || !allowedPaths.has(entry.path)
-        || typeof entry.sha256 !== "string"
-        || !/^sha256:[a-f0-9]{64}$/.test(entry.sha256)
-        || hashes.has(entry.path)
-      ) return { ok: false, hashes: new Map() };
-      hashes.set(entry.path, entry.sha256);
-    }
-    return { ok: true, hashes };
-  } catch (_error) {
-    return { ok: false, hashes: new Map() };
-  }
-}
-
 function writeUserManagedReceipt(files) {
   fs.mkdirSync(path.dirname(USER_MANAGED_RECEIPT_PATH), { recursive: true });
   const receipt = {
@@ -434,8 +414,6 @@ const targets = prepared.flatMap(({ agent, source, parsed, mapped }) => {
     },
   ];
 });
-const allowedTargetPaths = new Set(targets.map((target) => target.path));
-
 if (acceptUserManaged) {
   const acceptedFiles = [];
   let invalid = false;
@@ -470,7 +448,7 @@ if (acceptUserManaged) {
 
 const receipt = force
   ? { ok: true, hashes: new Map() }
-  : loadUserManagedReceipt(allowedTargetPaths);
+  : readAgentFleetUserManagedReceipt({ ...process.env, HOME });
 if (!receipt.ok) {
   console.log("[fleet] user-managed receipt: invalid");
   process.exit(1);

package/assets/templates/helpers/verify-contract.sh

@@ -190,8 +190,18 @@ contract_allowed_paths() {
     in_paths && /^[[:space:]]*-[[:space:]]*/ {
       line = $0
       sub(/^[[:space:]]*-[[:space:]]*/, "", line)
+      # Drop a YAML inline comment: `#` at the start or after whitespace, outside a leading quoted scalar.
+      q = substr(line, 1, 1)
+      close_at = (q == "\"" || q == "'\''") ? index(substr(line, 2), q) : 0
+      if (close_at > 0) {
+        line = substr(line, 1, close_at + 1)
+      } else {
+        sub(/^#.*$/, "", line)
+        sub(/[[:space:]]+#.*$/, "", line)
+      }
       gsub(/^["'\''`]+|["'\''`]+$/, "", line)
-      print trim(line)
+      line = trim(line)
+      if (line != "") print line
     }
   '
 }

package/assets/templates/helpers/verify-sprint.sh

@@ -193,8 +193,18 @@ contract_allowed_paths() {
     in_paths && /^[[:space:]]*-[[:space:]]*/ {
       line = $0
       sub(/^[[:space:]]*-[[:space:]]*/, "", line)
+      # Drop a YAML inline comment: `#` at the start or after whitespace, outside a leading quoted scalar.
+      q = substr(line, 1, 1)
+      close_at = (q == "\"" || q == "'\''") ? index(substr(line, 2), q) : 0
+      if (close_at > 0) {
+        line = substr(line, 1, close_at + 1)
+      } else {
+        sub(/^#.*$/, "", line)
+        sub(/[[:space:]]+#.*$/, "", line)
+      }
       gsub(/^["'\''`]+|["'\''`]+$/, "", line)
-      print trim(line)
+      line = trim(line)
+      if (line != "") print line
     }
   '
 }