repo-harness 0.2.1 → 0.2.2

package/README.md

@@ -34,8 +34,12 @@ This repository now dogfoods its own tasks-first contract. It is both:
   read a 1KB capability contract or query the index instead of spending thousands of
   tokens rediscovering structure.
 
-## What's New in 0.2.1
+## What's New in 0.2.2
 
+- **Safer global init defaults.** `repo-harness init` now streams setup progress
+  directly to the terminal and no longer installs the Superpowers Claude
+  marketplace plugin by default. Use `repo-harness init --with-superpowers` only
+  when you explicitly want that marketplace plugin.
 - **Global init command (`repo-harness init`).** One command bootstraps the global
   Claude environment: essential plugins, configurable policy hooks (worktree guard,
   atomic commit/pending), optional LSP plugins by project type, and four hook profiles
@@ -190,13 +194,14 @@ repository to install or refresh workflow files, hook assets, host adapters,
 skill aliases, and repo-local verification surfaces from the current npm package.
 
 The npm package release line is now `0.2.x`; generated workflow compatibility is
-tracked separately as the `5.x` model line. The `0.2.1` package splits first-run
+tracked separately as the `5.x` model line. The `0.2.2` package splits first-run
 global bootstrap (`repo-harness init`) from repo-local refresh
 (`repo-harness update`), keeps the global plugin/hook installer
 (`scripts/setup-plugins.sh`), the read-only config security sentinel
 (`repo-harness security scan`), the explicit Claude/Codex draft-plan lifecycle,
-and adds non-blocking CodeGraph index initialization for structural prompt
-routing. These sit on top of the renamed `repo-harness` CLI, user-level hook
+adds non-blocking CodeGraph index initialization for structural prompt routing,
+and keeps Superpowers behind the explicit `--with-superpowers` opt-in flag.
+These sit on top of the renamed `repo-harness` CLI, user-level hook
 adapter bootstrap, AI-native scaffold overlays, the typed prompt-guard decision
 engine, plan-stem task artifact naming, `REPO_HARNESS_*` runtime aliases, Waza
 runtime skill sync, and the maintainer release gate.
@@ -335,7 +340,7 @@ Most common guards:
 
 ## Current Release
 
-- npm package: `repo-harness@0.2.1`
+- npm package: `repo-harness@0.2.2`
 - Generated workflow compatibility: `5.2.3`
 - GitHub repository: `Ancienttwo/repo-harness`
 - Release history: [`docs/CHANGELOG.md`](docs/CHANGELOG.md)

package/README.zh-CN.md

@@ -23,8 +23,11 @@ repo-local workflow 的自托管样例。
   做渐进式上下文加载：一份小而稳定的 root context（约 12KB），加上只在改到对应文件时才加载的
   capability 块。agent 读一份 1KB 的 capability 合约或查索引，而不是花上千 token 重新摸清结构。
 
-## 0.2.1 新特性
+## 0.2.2 新特性
 
+- **更安全的全局初始化默认值。** `repo-harness init` 现在会把 setup 进度直接输出到终端，
+  不再默认安装 Superpowers Claude marketplace plugin。只有你明确需要它时，才使用
+  `repo-harness init --with-superpowers`。
 - **全局初始化命令（`repo-harness init`）。** 一条命令引导全局 Claude 环境：essential plugins、
   可配置 policy hooks（worktree guard、atomic commit/pending）、按项目类型可选的 LSP plugins，以及
   四档 hook profile（`standard`、`minimal`、`biome`、`biome-strict`）。运行
@@ -162,11 +165,11 @@ npx -y repo-harness update
 repo-local verification surfaces。
 
 npm package release line 现在是 `0.2.x`；生成的 workflow compatibility model line
-单独以 `5.x` 追踪。`repo-harness@0.2.1` 把首次全局引导（`repo-harness init`）
+单独以 `5.x` 追踪。`repo-harness@0.2.2` 把首次全局引导（`repo-harness init`）
 和 repo-local 刷新（`repo-harness update`）拆开，同时保留全局 plugin/hook 安装脚本
 （`scripts/setup-plugins.sh`）、只读配置安全哨兵（`repo-harness security scan`）、
-显式 Claude/Codex draft-plan 生命周期，并新增 prompt hook 的非阻塞 CodeGraph index 初始化。
-这些能力叠加在改名后的 CLI、user-level hook adapter bootstrap、AI-native scaffold overlays、
+显式 Claude/Codex draft-plan 生命周期，新增 prompt hook 的非阻塞 CodeGraph index 初始化，
+并把 Superpowers 放到显式 `--with-superpowers` opt-in 后面。这些能力叠加在改名后的 CLI、user-level hook adapter bootstrap、AI-native scaffold overlays、
 typed prompt-guard decision engine、plan-stem task artifact 命名、`REPO_HARNESS_*`
 runtime aliases、Waza runtime skill sync，以及 maintainer 发布 npm 前使用的 release gate 之上。
 
@@ -298,7 +301,7 @@ hook block 工作时，先看 terminal 里的结构化输出。核心字段是
 
 ## 当前 Release
 
-- npm package：`repo-harness@0.2.1`
+- npm package：`repo-harness@0.2.2`
 - Generated workflow compatibility：`5.2.3`
 - GitHub repository：`Ancienttwo/repo-harness`
 - Release history：[`docs/CHANGELOG.md`](docs/CHANGELOG.md)

package/package.json

@@ -1,6 +1,6 @@
 {
   "name": "repo-harness",
-  "version": "0.2.1",
+  "version": "0.2.2",
   "description": "Installs, migrates, audits, and repairs repo-local agentic development harnesses",
   "license": "MIT",
   "repository": {

package/scripts/setup-plugins.sh

@@ -392,7 +392,7 @@ install_superpowers_plugin() {
     local settings_file="$CLAUDE_DIR/settings.json"
     local configured=false
 
-    echo -e "${BLUE}Configuring Superpowers plugin (default)...${NC}"
+    echo -e "${BLUE}Configuring Superpowers plugin...${NC}"
 
     if command_exists claude; then
         if claude plugin marketplace add "$SUPERPOWERS_MARKETPLACE" >/dev/null 2>&1; then
@@ -722,6 +722,7 @@ print_summary() {
 main() {
     local install_optional=false
     local install_obsidian=false
+    local install_superpowers=false
     local hook_type="standard"
 
     # Parse arguments
@@ -735,6 +736,10 @@ main() {
                 install_obsidian=true
                 shift
                 ;;
+            --with-superpowers)
+                install_superpowers=true
+                shift
+                ;;
             --hooks)
                 hook_type="$2"
                 shift 2
@@ -754,7 +759,7 @@ main() {
             --help)
                 echo "Usage: setup-plugins.sh [options]"
                 echo ""
-                echo "Default behavior: installs essential plugins + enables $SUPERPOWERS_PLUGIN_ID"
+                echo "Default behavior: installs essential plugins and hook-profile support"
                 echo "Runtime defaults: Plan-only, Codex platform default sandbox with approval on failure,"
                 echo "  Claude default permissions, worktree-warning mutations (opt-in enforcement),"
                 echo "  atomic checkpoint commits after green checks."
@@ -762,6 +767,7 @@ main() {
                 echo "Options:"
                 echo "  --with-optional    Install optional plugins (commit-commands, pr-review-toolkit, ralph-loop, etc.)"
                 echo "  --with-obsidian    Install Obsidian skills"
+                echo "  --with-superpowers Install the Superpowers Claude marketplace plugin"
                 echo "  --hooks TYPE       Hook type: standard (default), minimal, biome, biome-strict, none"
                 echo "  --no-hooks         Skip hook configuration"
                 echo "  --lsp PLUGIN       Install specific LSP plugin (e.g., typescript-lsp, pyright-lsp, gopls-lsp)"
@@ -930,9 +936,11 @@ main() {
     echo ""
     add_permissions
 
-    # Configure Superpowers marketplace plugin (default)
-    echo ""
-    install_superpowers_plugin
+    # Configure Superpowers marketplace plugin only when explicitly requested.
+    if [ "$install_superpowers" = true ]; then
+        echo ""
+        install_superpowers_plugin
+    fi
 
     # Print summary
     print_summary

package/src/cli/commands/global-runtime.ts

@@ -1,4 +1,4 @@
-import { spawnSync } from 'child_process';
+import { spawnSync, type StdioOptions } from 'child_process';
 import { existsSync } from 'fs';
 import { dirname, join } from 'path';
 import { fileURLToPath } from 'url';
@@ -10,8 +10,10 @@ export interface GlobalRuntimeOptions {
   sourceRoot?: string;
   cwd?: string;
   env?: NodeJS.ProcessEnv;
+  stdio?: 'pipe' | 'inherit';
   withOptional?: boolean;
   withObsidian?: boolean;
+  withSuperpowers?: boolean;
   hooks?: string | false;
   lsp?: string;
   projectType?: string;
@@ -32,6 +34,7 @@ export function buildGlobalRuntimeArgs(opts: GlobalRuntimeOptions): string[] {
   const args: string[] = [];
   if (opts.withOptional === true) args.push('--with-optional');
   if (opts.withObsidian === true) args.push('--with-obsidian');
+  if (opts.withSuperpowers === true) args.push('--with-superpowers');
   if (opts.hooks === false) args.push('--no-hooks');
   else if (typeof opts.hooks === 'string') args.push('--hooks', opts.hooks);
   if (opts.lsp) args.push('--lsp', opts.lsp);
@@ -68,6 +71,7 @@ export function runGlobalRuntimeSetup(opts: GlobalRuntimeOptions): GlobalRuntime
     cwd: opts.cwd ?? process.cwd(),
     encoding: 'utf-8',
     env: { ...process.env, ...(opts.env ?? {}) },
+    stdio: (opts.stdio ?? 'pipe') as StdioOptions,
   });
 
   return {

package/src/cli/commands/status.ts

@@ -15,7 +15,7 @@ import { isManagedEntry, type HooksByEvent } from '../installer/managed-entries'
 import { readJsonOrEmpty } from '../installer/shared';
 import type { Location } from '../installer/types';
 
-export const CLI_VERSION = '0.2.1';
+export const CLI_VERSION = '0.2.2';
 
 const OPT_IN_MARKER = '.ai/harness/workflow-contract.json';
 

package/src/cli/index.ts

@@ -46,7 +46,7 @@ export function buildProgram(): Command {
   program
     .name('repo-harness')
     .description('Repo-local agentic development harness CLI')
-    .version('0.2.1')
+    .version('0.2.2')
     .exitOverride();
 
   program
@@ -54,6 +54,7 @@ export function buildProgram(): Command {
     .description('Bootstrap global Claude plugins and hook profiles from the npm package')
     .option('--with-optional', 'Install optional plugins')
     .option('--with-obsidian', 'Install Obsidian skills')
+    .option('--with-superpowers', 'Install the Superpowers Claude marketplace plugin')
     .option('--hooks <profile>', `Hook profile: ${HOOK_PROFILES.join('|')}`, 'standard')
     .option('--no-hooks', 'Skip hook configuration')
     .option('--lsp <plugin>', 'Install a specific LSP plugin')
@@ -61,6 +62,7 @@ export function buildProgram(): Command {
     .action((rawOpts: {
       withOptional?: boolean;
       withObsidian?: boolean;
+      withSuperpowers?: boolean;
       hooks?: string | false;
       lsp?: string;
       projectType?: string;
@@ -73,9 +75,11 @@ export function buildProgram(): Command {
       const result = runGlobalRuntimeSetup({
         withOptional: rawOpts.withOptional === true,
         withObsidian: rawOpts.withObsidian === true,
+        withSuperpowers: rawOpts.withSuperpowers === true,
         hooks: rawOpts.hooks,
         lsp: rawOpts.lsp,
         projectType: rawOpts.projectType,
+        stdio: 'inherit',
       });
       if (result.stdout) process.stdout.write(result.stdout);
       if (result.stderr) process.stderr.write(result.stderr);