tink-harness 1.1.1 → 1.2.0

package/.claude-plugin/plugin.json

@@ -1,8 +1,8 @@
-{
-  "name": "tink",
-  "description": "A small harness layer for Claude Code.",
-  "version": "1.1.1",
-  "author": {
-    "name": "dotori"
-  }
-}
+{
+  "name": "tink",
+  "description": "A small harness layer for Claude Code and Codex.",
+  "version": "1.2.0",
+  "author": {
+    "name": "dotori"
+  }
+}

package/CHANGELOG.md

@@ -1,12 +1,42 @@
-# Changelog
-
-All notable changes to Tink are tracked here.
-
+# Changelog
+
+All notable changes to Tink are tracked here.
+
 ## [Unreleased]
 
 No unreleased changes yet.
 
 
+## [1.2.0] - 2026-06-07
+
+### Added
+
+- Codex autocomplete aliases matching the Claude Code command surface: `$tink:cast`, `$tink:verify`, `$tink:list`, `$tink:frog`, `$tink:weave`, `$tink:setup`, and `$tink:update`.
+- Contract-first context artifacts for non-trivial runs: `context-pack.md`, `context-map.json`, and `excluded-context.md`.
+- Repo Signal fixtures and documentation so `/tink:cast` can select relevant tests, schemas, sync partners, and verification hints without adding a new `tink index` command.
+- Verify Runner schema and fixtures for `.tink/current/verification.json`, including pass, fail, blocked, skipped, final report, notes summary, and maintenance signal behavior.
+- MCP Safe Profile documentation and external-context profile schema support for sources such as Figma, GitHub, official docs, dashboards, API responses, screenshots, attachments, and runbooks.
+- Compatibility policy documenting that new Tink work must support Claude Code and Codex, plus macOS and Windows.
+- PR history draft for this release in `docs/pr/2026-06-07-v1.2.0.md`.
+
+### Changed
+
+- Codex documentation and installer next-step guidance now prefer `$tink:*` spelling while keeping legacy `$tink <action>` prompts compatible.
+- Project guidance now uses lower-case `templates/codex/skills/` and the actual `.claude/` / `.claude-plugin/` paths so Mac/Linux case-sensitive filesystems match the documented structure.
+- Codex skill display is focused on action aliases only; shared Codex rules now live in non-visible `tink-core/RULES.md`.
+- `/tink:cast` records included, excluded, and external context more explicitly, including sensitivity, confidence, source handles, and verification hints.
+- `/tink:verify` now uses one portable runner model for Claude Code `/tink:verify` and Codex `$tink:verify`.
+- README and Korean README now explain the 1.2.0 release highlights and point to compatibility, repo signal, and MCP Safe Profile docs.
+
+### Fixed
+
+- Existing Codex installs that still have the old visible `skills/tink/SKILL.md` directory are cleaned up during install/update when it is recognized as the legacy Tink skill.
+
+### Removed
+
+- Removed the old installable Codex `tink` skill surface so the picker no longer shows duplicate or awkward `Tink: Tink` entries.
+
+
 ## [1.1.1] - 2026-05-26
 
 ### Added
@@ -39,103 +69,103 @@ No unreleased changes yet.
 ### Planned
 
 - Layered scope model: merge `global` (`~/.tink/`) + `repo` (`.tink/`) + `local` (`.tink/local/` or `.tink/settings.local.json`) following the Claude Code settings pattern. Tracked separately.
-
-
-## [1.0.0] - 2026-05-25
-
-First stable release. All hardening gates passed.
-
-### Added
-
-- `pre-publish-multi-agent-verify` harness: 5-agent parallel verification harness for npm publish readiness. Agents cover install matrix, UX walkthrough, doc consistency, secret leak audit, and slash/contract coverage.
-
-### Fixed
-
-- `update` subcommand never propagated template changes to existing installs. Commands, skills, and maintenance files now always overwrite on update; harnesses, hooks, memory, and config are preserved when user-modified (respects `weave` customizations).
-- `VERSIONING.md` update command used `npx tink-harness@latest update` (npm registry form, fails before first publish). Changed to `npx github:dotoricode/tink-harness update` (GitHub form, always works).
-
-### Removed
-
-- Remaining phantom references to `context-habit-calibration` in `cast.md`, `list.md`, and `SKILL.md` (harness was merged into `harness-curation` in v0.1.5).
-
-
-## [0.1.5] - 2026-05-24
-
-### Added
-
-- `tink-feedback-apply` harness: classify user feedback about Tink into the correct layer (behavioral, UX, preference, harness procedure, or new harness) and apply the minimum viable change.
-- `/tink:list` output redesign: multi-line per harness, header field description, three categories (작업용 / 메타 / 이 저장소 전용), assessment section, and next-command suggestions.
-
-### Changed
-
-- Built-in harness `## Checks` sections replaced generic boilerplate with domain-specific checks:
-  - `research`: decision named, options compared, facts/guesses labeled, recommendation follows evidence.
-  - `review`: correctness/security/data/UX risk addressed, severity labeled, no speculative blockers.
-  - `ship`: CI checks pass or reason stated, rollback documented, artifacts listed, risks explicit.
-- `ship` Plan step 3: "Prepare notes for humans" → "Draft PR or release summary: what changed, what risks, what rollback."
-- `harness-curation` now includes context habit calibration (signals, 6 habit types, calibration procedure) as an inline section. No separate harness needed.
-- `index.json`: `harness-synthesis` and `harness-curation` classified as `kind: "meta"` to distinguish from work harnesses.
-
-### Removed
-
-- `context-habit-calibration` standalone harness. Its content is now part of `harness-curation`.
-
-
-## [0.1.4] - 2026-05-23
-
-### Added
-
-- `/tink:update` slash command: detects install source, diagnoses user-modified files, and shows the safe update command.
-- `npx tink-harness update` subcommand: data-preserving update that keeps user-modified files. Use `--force` to overwrite everything (data loss risk).
-- HARNESS.md harness catalog for fast human scanning.
-- Hard-gate behavior for `ship` harness (release/publish/deploy/PR) — runs the safety gate at initial approval, not just at the first risky step.
-
-### Changed
-
-- Default installer language now auto-detects from `LANG`/`LANGUAGE`/`LC_ALL`, falling back to English; previously hardcoded to Korean.
-- README Update section recommends `npx ... update` only. The `install --force` path is no longer documented as a user-facing option (the `--force` flag remains in the code for emergency use but is not advertised).
-- `/tink:cast` approval format uses plain language for the soft-gate review block; internal labels are kept in code/docs but not shown to the user.
-- `/tink:cast` UX overhauls: shorter prompts, fewer approval gates for trivial tasks, single consolidated approval for soft-gate cases.
-
-### Fixed
-
-- Restored the README hero image after the previous fix targeted the wrong surface.
-- Increased the installer TINK banner contrast for dark terminal themes.
-
-
-## [0.1.3]
-
-Skipped during pre-v1 sequencing.
-
-
-## [0.1.2] - 2026-05-22
-
-### Changed
-
-- Added a synthesis probe so `/tink:cast` can detect when a built-in harness is only a generic fit.
-- Made run-only draft harnesses the default path for generic-fit cases, with saving still requiring separate approval.
-- Clarified that `harness-synthesis` should handle both `no fit` and `generic fit` cases.
-
-## [0.1.1] - 2026-05-22
-
-### Added
-
-- Existing-user update instructions for Claude Code plugin installs.
-- Standalone compatibility installer refresh command using `--force`.
-- Maintenance evidence structure: approval ledger and weave queue templates.
-- Run record fields for selected, rejected, actually loaded, and maintenance evidence.
-
-### Changed
-
-- Bumped the Claude Code plugin version to make `/plugin update` detect the latest release.
-- Clarified `unknown` evidence handling for `/tink:list`.
-- Added evidence grades for `/tink:frog` and evidence handles for `/tink:weave`.
-
-## [0.1.0] - 2026-05-22
-
-### Added
-
-- Initial pre-v1 plugin shape for Tink.
-- Plugin-first `/tink:*` command surface.
-- Standalone compatibility installer.
-- Built-in harnesses, setup flow, optional hook recommendation, and visible `.tink/` state model.
+
+
+## [1.0.0] - 2026-05-25
+
+First stable release. All hardening gates passed.
+
+### Added
+
+- `pre-publish-multi-agent-verify` harness: 5-agent parallel verification harness for npm publish readiness. Agents cover install matrix, UX walkthrough, doc consistency, secret leak audit, and slash/contract coverage.
+
+### Fixed
+
+- `update` subcommand never propagated template changes to existing installs. Commands, skills, and maintenance files now always overwrite on update; harnesses, hooks, memory, and config are preserved when user-modified (respects `weave` customizations).
+- `VERSIONING.md` update command used `npx tink-harness@latest update` (npm registry form, fails before first publish). Changed to `npx github:dotoricode/tink-harness update` (GitHub form, always works).
+
+### Removed
+
+- Remaining phantom references to `context-habit-calibration` in `cast.md`, `list.md`, and `SKILL.md` (harness was merged into `harness-curation` in v0.1.5).
+
+
+## [0.1.5] - 2026-05-24
+
+### Added
+
+- `tink-feedback-apply` harness: classify user feedback about Tink into the correct layer (behavioral, UX, preference, harness procedure, or new harness) and apply the minimum viable change.
+- `/tink:list` output redesign: multi-line per harness, header field description, three categories (작업용 / 메타 / 이 저장소 전용), assessment section, and next-command suggestions.
+
+### Changed
+
+- Built-in harness `## Checks` sections replaced generic boilerplate with domain-specific checks:
+  - `research`: decision named, options compared, facts/guesses labeled, recommendation follows evidence.
+  - `review`: correctness/security/data/UX risk addressed, severity labeled, no speculative blockers.
+  - `ship`: CI checks pass or reason stated, rollback documented, artifacts listed, risks explicit.
+- `ship` Plan step 3: "Prepare notes for humans" → "Draft PR or release summary: what changed, what risks, what rollback."
+- `harness-curation` now includes context habit calibration (signals, 6 habit types, calibration procedure) as an inline section. No separate harness needed.
+- `index.json`: `harness-synthesis` and `harness-curation` classified as `kind: "meta"` to distinguish from work harnesses.
+
+### Removed
+
+- `context-habit-calibration` standalone harness. Its content is now part of `harness-curation`.
+
+
+## [0.1.4] - 2026-05-23
+
+### Added
+
+- `/tink:update` slash command: detects install source, diagnoses user-modified files, and shows the safe update command.
+- `npx tink-harness update` subcommand: data-preserving update that keeps user-modified files. Use `--force` to overwrite everything (data loss risk).
+- HARNESS.md harness catalog for fast human scanning.
+- Hard-gate behavior for `ship` harness (release/publish/deploy/PR) — runs the safety gate at initial approval, not just at the first risky step.
+
+### Changed
+
+- Default installer language now auto-detects from `LANG`/`LANGUAGE`/`LC_ALL`, falling back to English; previously hardcoded to Korean.
+- README Update section recommends `npx ... update` only. The `install --force` path is no longer documented as a user-facing option (the `--force` flag remains in the code for emergency use but is not advertised).
+- `/tink:cast` approval format uses plain language for the soft-gate review block; internal labels are kept in code/docs but not shown to the user.
+- `/tink:cast` UX overhauls: shorter prompts, fewer approval gates for trivial tasks, single consolidated approval for soft-gate cases.
+
+### Fixed
+
+- Restored the README hero image after the previous fix targeted the wrong surface.
+- Increased the installer TINK banner contrast for dark terminal themes.
+
+
+## [0.1.3]
+
+Skipped during pre-v1 sequencing.
+
+
+## [0.1.2] - 2026-05-22
+
+### Changed
+
+- Added a synthesis probe so `/tink:cast` can detect when a built-in harness is only a generic fit.
+- Made run-only draft harnesses the default path for generic-fit cases, with saving still requiring separate approval.
+- Clarified that `harness-synthesis` should handle both `no fit` and `generic fit` cases.
+
+## [0.1.1] - 2026-05-22
+
+### Added
+
+- Existing-user update instructions for Claude Code plugin installs.
+- Standalone compatibility installer refresh command using `--force`.
+- Maintenance evidence structure: approval ledger and weave queue templates.
+- Run record fields for selected, rejected, actually loaded, and maintenance evidence.
+
+### Changed
+
+- Bumped the Claude Code plugin version to make `/plugin update` detect the latest release.
+- Clarified `unknown` evidence handling for `/tink:list`.
+- Added evidence grades for `/tink:frog` and evidence handles for `/tink:weave`.
+
+## [0.1.0] - 2026-05-22
+
+### Added
+
+- Initial pre-v1 plugin shape for Tink.
+- Plugin-first `/tink:*` command surface.
+- Standalone compatibility installer.
+- Built-in harnesses, setup flow, optional hook recommendation, and visible `.tink/` state model.

package/LICENSE

@@ -1,21 +1,21 @@
-MIT License
-
-Copyright (c) 2026 dotori
-
-Permission is hereby granted, free of charge, to any person obtaining a copy
-of this software and associated documentation files (the "Software"), to deal
-in the Software without restriction, including without limitation the rights
-to use, copy, modify, merge, publish, distribute, sublicense, and/or sell
-copies of the Software, and to permit persons to whom the Software is
-furnished to do so, subject to the following conditions:
-
-The above copyright notice and this permission notice shall be included in all
-copies or substantial portions of the Software.
-
-THE SOFTWARE IS PROVIDED "AS IS", WITHOUT WARRANTY OF ANY KIND, EXPRESS OR
-IMPLIED, INCLUDING BUT NOT LIMITED TO THE WARRANTIES OF MERCHANTABILITY,
-FITNESS FOR A PARTICULAR PURPOSE AND NONINFRINGEMENT. IN NO EVENT SHALL THE
-AUTHORS OR COPYRIGHT HOLDERS BE LIABLE FOR ANY CLAIM, DAMAGES OR OTHER
-LIABILITY, WHETHER IN AN ACTION OF CONTRACT, TORT OR OTHERWISE, ARISING FROM,
-OUT OF OR IN CONNECTION WITH THE SOFTWARE OR THE USE OR OTHER DEALINGS IN THE
-SOFTWARE.
+MIT License
+
+Copyright (c) 2026 dotori
+
+Permission is hereby granted, free of charge, to any person obtaining a copy
+of this software and associated documentation files (the "Software"), to deal
+in the Software without restriction, including without limitation the rights
+to use, copy, modify, merge, publish, distribute, sublicense, and/or sell
+copies of the Software, and to permit persons to whom the Software is
+furnished to do so, subject to the following conditions:
+
+The above copyright notice and this permission notice shall be included in all
+copies or substantial portions of the Software.
+
+THE SOFTWARE IS PROVIDED "AS IS", WITHOUT WARRANTY OF ANY KIND, EXPRESS OR
+IMPLIED, INCLUDING BUT NOT LIMITED TO THE WARRANTIES OF MERCHANTABILITY,
+FITNESS FOR A PARTICULAR PURPOSE AND NONINFRINGEMENT. IN NO EVENT SHALL THE
+AUTHORS OR COPYRIGHT HOLDERS BE LIABLE FOR ANY CLAIM, DAMAGES OR OTHER
+LIABILITY, WHETHER IN AN ACTION OF CONTRACT, TORT OR OTHERWISE, ARISING FROM,
+OUT OF OR IN CONNECTION WITH THE SOFTWARE OR THE USE OR OTHER DEALINGS IN THE
+SOFTWARE.

package/README.ko.md

@@ -35,7 +35,7 @@ Standalone / Codex 호환 설치:
 npx tink-harness@latest install
 ```
 
-설치 중 `Claude Code`, `Codex`, 또는 둘 다를 선택할 수 있습니다. Codex에서는 `$tink cast <task>`로 시작합니다.
+설치 중 `Claude Code`, `Codex`, 또는 둘 다를 선택할 수 있습니다. Codex에서는 `$tink:cast <task>`로 시작합니다.
 
 ## 업데이트
 
@@ -53,35 +53,45 @@ Standalone / Codex:
 npx tink-harness@latest update
 ```
 
+## 1.2.0에서 달라진 점
+
+이번 릴리스는 Tink를 Claude Code와 Codex에서 같은 하네스 레이어로 쓰기 쉽게 정리합니다.
+
+- Codex에는 하나의 넓은 `tink` 스킬 대신 `$tink:cast`, `$tink:verify` 같은 action skill만 보이도록 설치됩니다.
+- 비단순 작업은 `context-pack.md`, `context-map.json`, `excluded-context.md`로 어떤 context를 썼고 뺐는지 남깁니다.
+- Repo Signal은 새 `tink index` 명령을 만들지 않고도 관련 테스트, 스키마, 동기화 파일, 검증 힌트를 고르는 데 쓰입니다.
+- `/tink:verify`와 `$tink:verify`는 같은 Verify Runner 모델을 쓰며 `.tink/current/verification.json`에 검증 증거를 남깁니다.
+- 외부 context는 MCP Safe Profile을 따릅니다. 가장 작은 source handle만 남기고, 신뢰도와 민감도를 표시하며, 위험하거나 너무 넓은 context는 `excluded-context.md`에 따로 기록합니다.
+
 ## 명령
 
-Claude Code에서는 `/tink:*`, Codex에서는 `$tink <action>`을 씁니다.
+Claude Code에서는 `/tink:*`, Codex에서는 `$tink:*`을 씁니다. 예전 `$tink cast` 형식도 호환되지만, 기본 안내와 자동완성 표면은 `$tink:*`입니다.
 
-### `/tink:cast`
+### `/tink:cast` / `$tink:cast`
 
 작업을 읽고, 필요한 하네스만 고르고, `.tink/current/` 실행 상태를 만든 뒤 첫 번째 안전한 단계를 시작합니다.
 
 Tink는 이제 비단순 작업에 대해 `.tink/current/contract.json`도 만듭니다. 이 파일에는 작업 종류, 위험, 성공 조건, 금지 사항, 검증 명령이 들어갑니다.
 
-### `/tink:verify`
+### `/tink:verify` / `$tink:verify`
 
 `contract.json`에 적힌 검증을 실제로 실행하고 증거를 남깁니다.
 
 릴리스, 배포, 공개 PR처럼 "된 것 같다"가 아니라 "확인했다"가 필요한 작업에서 씁니다.
 
-### `/tink:frog`
+### `/tink:frog` / `$tink:frog`
 
 거의 쓰지 않거나 겹치거나 너무 무거운 하네스를 정리 후보로 제안합니다. 사용자 승인 없이는 삭제하지 않습니다.
 
-### `/tink:weave`
+### `/tink:weave` / `$tink:weave`
 
 실제 실패, 반복 사용, 사용자 수정 내용을 바탕으로 하네스를 조금 더 정확하게 고칩니다. 필요한 경우 `.tink/rules/`의 rule graph나 opt-in hook guard 후보로 승격합니다.
 
 ### 기타
 
-- `/tink:setup`: 언어, 설치 범위, git 추적, hook 정책 설정
-- `/tink:list`: 사용 가능한 하네스와 사용 신호 확인
-- `/tink:update`: 설치 출처를 확인하고 안전한 업데이트 안내
+- `/tink:setup` / `$tink:setup`: 언어, 설치 범위, git 추적, hook 정책 설정
+- `/tink:list` / `$tink:list`: 사용 가능한 하네스와 사용 신호 확인
+- `/tink:update` / `$tink:update`: 설치 출처를 확인하고 안전한 업데이트 안내
 
 ## 작동 방식
 
@@ -97,6 +107,8 @@ Tink는 직접 볼 수 있는 파일을 씁니다.
 
 Rule graph는 작게 유지합니다. Tink는 먼저 필수 규칙을 고르고, 작업 사실이나 keyword에 맞는 선택 규칙만 가져오며, phase별로 이미 읽은 rule id를 기록해 같은 안내를 반복하지 않습니다.
 
+설계 메모는 `docs/`에 둡니다. 기본 호환성 기준은 `docs/compatibility-policy.md`에 있으며, 새 작업은 Claude Code와 Codex, macOS와 Windows를 함께 고려해야 합니다. Repo Signal 동작은 `docs/repo-signals.md`에 정리되어 있고, 외부 context 안전 기준은 `docs/mcp-safe-profile.md`에 정리되어 있습니다.
+
 중요한 원칙은 승인입니다. 현재 작업을 진행하는 승인과, 미래에도 재사용될 상태를 저장하는 승인은 별개입니다. 새 하네스, 메모리, rule graph, hook guard 저장은 항상 별도 승인이 필요합니다.
 
 ## Tink가 아닌 것