notth 0.18.0__tar.gz

notth-0.18.0/CHANGELOG.md

@@ -0,0 +1,412 @@
+# Changelog
+
+## Unreleased — PyPI package name
+
+- Publish the Python distribution as `notth`; align wheel/sdist metadata, manifest, release target and pip guides.
+- Retain `ai_harness`, `aih`, shared release version and legacy bundle-marker compatibility. Document uninstall-first migration and rollback for earlier source builds; PyPI publisher setup/publication remains external.
+
+## Unreleased — Engineering and technical-document depth
+
+- Deepen existing Core planning/debug/TDD/refactoring/review/verification without adding mandatory agents or a second lifecycle.
+- Product 1.9.0 adds risk-selected TechSpec details, technical-document review and optional host-executed DOCX/PDF/slides export with render QA.
+- Architecture 1.3.0 expands original compact arc42/MADR-informed coverage; Java/Spring 1.3.0, React/Next.js and React Native 1.5.0 add selectively loaded engineering rules/checks/evals.
+- Record pinned external references and license boundaries without copying upstream libraries or adding installer dependencies. Add structural/ownership/package tests; live host/format/device evaluation remains NOT_RUN.
+
+## Unreleased — Contextual UI design quality
+
+- UIUX 1.2.0 adds discoverable contextual design-direction and optional external-design handoff skills; retains existing Figma routes.
+- Read and selectively maintain one project-owned DESIGN.md or existing master; inspect actual previews, fix and recheck rather than treating build success as visual acceptance.
+- Pin reviewed UI UX Pro Max and Google Stitch source references with prerequisites, ownership, offline fallback and explicit non-bundling; no external code/runtime dependencies added.
+- Add install/update/ownership tests, behavioral scenarios and an unrun paired visual evaluation recipe. No measured aesthetic improvement or live MCP compliance claimed.
+
+## Unreleased — Simple task experience
+
+- Add opt-in human output for init/update/start/status/changes and read-only start --chat on every host; preserve JSON and existing terminal behavior.
+- Derive actionable local progress from tasks/checkpoints without claiming remote merge/deploy; separate compact entry_action from next_action.
+- Centralize Quick/Standard/Full depth, minimum relevant context, approval reuse and evidence-backed handoffs in Core.
+- UIUX 1.1.0 adds tool-neutral scoped design delivery; existing Figma routes remain supported.
+- Add newcomer scenarios, fixture recipes, unperformed host baseline, migration and multilingual daily-use guidance. No live-host success or token savings claimed.
+
+
+## Development notes included in the v0.17.0 source baseline
+
+The notes below were already present at tag v0.17.0 (11d662c9064cc989373e36b8c546cfb323a9b023).
+They retain their historical content; this tag audit does not certify registry publication or live-host behavior.
+The new change above remains unreleased. Versioned release history follows these notes.
+
+## Development note — Simple first session
+
+- Align README, translated host lists, getting-started, packaged quickstart and CLI install/update handoff around one selected host and harness-start in chat.
+- Keep terminal start as an optional intake path; explain npx versus aih and preserve existing configuration/command behavior.
+
+
+## Development note — Reusable project workflows
+
+- Add read-only status/changes, existing-proposal selection through start --change, and backed-up start --clear without archive/process side effects.
+- Add optional source-linked knowledge and a compact packaged quickstart; reuse project docs and existing source declarations.
+- Add host/stack-neutral grouped verification with owned process handling, incremental evidence/TechSpec and baseline-aware checkpoint recovery.
+- Support declared file references in command args through project/machine overrides; preserve legacy environment variables.
+- Advance Product to 1.8.0; keep distribution release-owned and record live-host evaluation as NOT_RUN.
+
+## Development note — Portable tool support
+
+- Support selecting one AI tool with init/update --host; install only its required bridge and retain installed bridges on later updates.
+- Claude host selection installs its import/wrappers; Copilot and Gemini receive managed blocks preserving surrounding user instructions.
+- Add OpenCode/Windsurf guides, shared-source and Windows pointer migration, and a packaged new-project setup guide.
+- Keep Kiro agent hooks path-independent, native settings/custom skills project-owned, and live-host loading unverified.
+
+## Development note — Notth rename
+
+- Rename the product to Notth, GitHub references to manh0303/notth and npm distribution to @manhd_d/notth.
+- Update metadata, release guards, translated onboarding and publisher/migration instructions.
+- Preserve aih, .harness, skill IDs, ownership markers, archives and the Python package name for compatibility; no automatic registry publication or deprecation.
+
+## Development note — Workflow contracts and npm-independent pip distribution
+
+- Add schema-1 spec-to-code/Product idea-to-prd JSON contracts, offline graph/role/gate validation and Markdown drift checks; clarify contract/driver/evidence ownership.
+- Add workflow validate, named readiness stages and opt-in recorded approvals; preserve legacy implement/review behavior and describe identity/semantic limitations.
+- Add a separate Claude headless conformance driver with per-case progress, optional deterministic assertions, independent judge and 3–5 trial pass rates; live hosts/human audit remain NOT_RUN until actually recorded.
+- Add zero-dependency Python launcher and PEP 517 wheel/sdist packaging from the npm shared allowlist; pip/offline install needs Node 22+ but no npm/npx.
+- Add offline wheel parity/install/update smoke, dynamic shared version checks and dual-channel release from the same reviewed tag; PyPI Trusted Publisher setup required before publication.
+- Unify six-host harness-start guidance and make README host-neutral.
+
+## Development note — Missing-only setup and scoped project decisions
+
+- Add setup --apply/--dry-run using the installed snapshot; preserve user answers, managed payload/lock and machine data, with validation before writes.
+- Add optional schema-1 project/module decisions, confirmed/proposed/superseded states and validated replacement history; expose decisions and reuse guidance without permanent approval claims.
+- Include shared decisions in same-project backup/freshness, omit them from transfer, and reject malformed environment config before installation writes.
+- Add compact start orientation, existing/new-project workflows, interruption/source-change scenarios and packaged clone checks. Keep one-command install → /harness-start; no new runtime dependency or distribution bump.
+- Publish a live-host validation protocol; actual Kiro activation/model behavior and token savings remain NOT_RUN until measured.
+
+## Development note — Session onboarding and knowledge freshness
+
+- Add Kiro init/update --host kiro, canonical native wrappers and locked SessionStart v1; first chat: /harness-start.
+- Keep Kiro questions in the current session, reuse saved facts/tasks and preserve partial setup.
+- Add structured local.md with legacy preservation, seed plan/record/check and separate source/context hashes.
+- Add skill requires diagnostics, role extensions/load order, missing-only external propose sidecars and MCP alias-only discovery.
+- Document first/later sessions, offline/upgrade and backup/transfer boundaries; live loading/token savings remain unmeasured. No distribution bump or provider calls.
+
+## Development note — End-user acceptance
+
+- Add Core end-user-testing skill/workflow and test-engineer/review routing to exercise real browser/device/CLI/API journeys.
+- Adaptive plans disclose surface/tool hints and missing context; preserve existing runners and actual host permissions.
+- Add optional schema-1 end-user targets/surface/journey and bounded binary attachments; mocks, unknown dependencies and wrong-interface evidence cannot verify full end-user AC.
+- Reject browser/mobile/CLI transport-only PASS; connect React/Next.js and React Native 1.4.0, evidence docs and unscored behavior cases.
+- No browser/LLM runner, installed dependency, model calls or distribution bump; actual execution remains in the authorized host.
+
+## Development note — Guided start and portable configuration
+
+- Add start: short terminal intake, saved task/source/output choices, read-only non-TTY plan and host handoff.
+- Add bounded configuration backup/restore, dry-run conflicts, explicit replacement and before-backup; transfer only module/model preferences with old repo autonomy removed.
+- Keep canonical user config paths, ignore local backups, preserve settings through update, and document config vs full-project recovery in all README entry points.
+- Validate archive/config/path safety before writes; add rollback/transfer/intake tests, package coverage and unscored host scenarios. No model/network calls or distribution bump.
+
+## Development note — Kiro and clearer tool setup
+
+- Add Kiro to all README languages and a documented IDE/CLI/Web setup guide with optional native skill pointers.
+- Separate AI tool installation from project Harness setup; use Core-first npx commands, explicit loading checks and client-specific instruction bridges for all six tools.
+- Preserve native settings; document unreleased Claude flags and Kiro ownership. Add guide/parity/package assertions. No installer, manifest/schema or runtime behavior change; no live-host compatibility claim.
+
+
+## Development note — Agent-first delivery and brownfield
+- Route scoped work through agent contracts/preferred skills and approved SA decisions; retire Java outbox/migration and Astro cloud/microfrontend recipes.
+- Add Analysis/Discovery canonical Product profiles, PM/template aliases, shared document contract and host-native/Claude model seeds without overwriting existing settings.
+- Add opt-in Claude import/native wrappers, bounded Maven modules, checkpoint/history/resume and local manual 18-run comparison.
+- Simplify progressive context and README; add Chinese/Spanish translations, migration and behavior/evidence tests. No model calls, merge or npm publish.
+
+
+## Development note
+
+### Added
+- Continuous development workflow: fresh baselines, proportional cross-role impact, selective living documentation and source-policy proposals, feedback triage and session handoff.
+- Seven Core behavioral scenarios plus a cross-capability scenario, installation/update preservation coverage and package checks.
+
+### Changed
+- Existing Core/Product/Architecture/Delivery skills and OpenSpec templates retain stable IDs and distinguish implementation, merge and release evidence.
+- Product 1.5.0, Architecture/Delivery 1.1.0; no new runtime, CLI commands or config schemas. Distribution version and release automation remain unchanged.
+
+## Development note — Adaptive verification and TechSpec
+- Add read-only adaptive discovery and digest/pointer-based requirement evidence validation; preserve advisory verify behavior.
+- Add Core verification and Product 1.4.0 selective TechSpec maintenance using existing artifact routes/policies.
+- Add cross-project fixtures, actual isolated HTTP role/state workflow and package coverage. Live host/model evaluation remains unscored.
+
+## Development note — Project artifact contracts
+- Add project-owned input/output/storage/canonical/source-write contracts and dynamic host connection declarations; seed/preserve and validate them before writes.
+- Add read-only artifacts reports/setup storage questions, local docs routing and explicit external template handoffs without network calls or fallback copies.
+- Connect idea/document/UI flows and spec-driven artifact-impact readiness/maintenance; Product 1.3.0 and UIUX 1.0.1.
+- Preserve legacy defaults when unconfigured; add path/policy/graph/preflight/rollback/routing tests, package smoke and unscored behavior scenarios.
+
+## Development note — README languages
+- Make the concise root README English, add a Vietnamese translation and a language selector on both pages.
+- Preserve English technical terms in the Vietnamese overview and keep commands/setup links aligned.
+- Document how to add real translations; localized README files ship through the existing docs/ allowlist.
+
+## Development note — README capabilities and coding tools
+- Explain Product/Architecture/Delivery/Dev/QA outcomes in a compact role-oriented table.
+- Add a coding-tool table with linked installation/setup recipes for Codex, Claude Code, Cursor, Copilot and Gemini CLI; retain one-command project installation.
+
+## Development note — Simpler onboarding
+- Consolidate first-use documentation into a one-command README and a copyable AI task; keep setup and model preferences optional.
+- Add docs/README.md for advanced guides and examples, preserving frontend/mobile onboarding and environment ownership from the latest main.
+- Verify documentation discovery through the index. No CLI, module or consumer schema changes.
+
+## Development note — Frontend/mobile coding and onboarding
+- Simplify init/host onboarding and surface current CLI flags in the command table.
+- Add focused React/Next.js feature/testing and React Native screen/testing skills with examples, quality and handoffs; each adapter module advances to 1.2.0.
+- Connect manifests, discovery, manual checks/unscored scenarios, skill matrix, stack examples and package/install/update tests. No application runner, library migration or native verification claim.
+
+
+## Development note — Agent preferences and release regression
+- Add provider-agnostic project-owned agents.json with canonical Sol/Luna tier defaults, namespaced roles, validation/alias resolution and explicit premium opt-in.
+- Add non-interactive init presets and read-only setup host plans; preserve custom config and legacy snapshots. No native config writes, agent runtime or usage claims.
+- Add orchestrator/documentation contracts, proportional routing/token guidance and official-source host recipes.
+- Repair release update tests to use source-relative versions rather than hardcoded 0.7.0; retain downgrade protection.
+
+## Development note — Product and solution delivery
+- Complete Product BA/PO with usable MVP/outcomes, synthetic examples, quality checklists and handoff contracts; module 1.2.0.
+- Add optional Architecture and Delivery 1.0.0 modules: source-linked context, NFR, architecture/pattern trade-offs, ADR, living map/review, value slices, risks and scope changes.
+- Connect proportional Core framing and OpenSpec design/tasks; add checks and unscored behavioral scenarios.
+- Add new-doc --capability while retaining Product default paths and enforcing locked declared templates.
+- Add official-source setup recipes for Codex, Claude Code, Cursor, Copilot and Gemini CLI, plus provenance/research and migration guidance. No native host or live-model compliance result is claimed.
+
+## Development note — Harness maintenance contract
+- Add one maintainer guide linking component ownership, impact matrix, change checklist and existing architecture/release contracts.
+- Add a maintainer-only impact template and GitHub PR checklist; require per-area done/pending/not-applicable evidence through repository AGENTS and contributing guidance.
+- Add CI tests for maintainer entry points, impact-area consistency and installed Core/adapter rule discovery.
+- Fix Kubernetes rule discovery exposed by the new test; module contract 1.0.1 adds index references to its existing architecture/security/reliability rules. No schema or executable runtime changes.
+
+## Development note — Project coding conventions
+- Add Core new/maintain/mixed scope, convention precedence, search-before-create and architecture-fit review.
+- Add Java/Spring, React/Next.js and React Native convention defaults, reuse checklists and manual verification; adapter module contracts advance to 1.1.0.
+- Connect generated AGENTS, setup, implementation/bugfix/review roles and design templates; preserve existing project-owned context.
+- Add eight behavioral scenarios and regression coverage for installed assets and update ownership. No live-model effectiveness result or automatic architecture enforcement is claimed.
+
+## Development note — Project setup, clarification and readiness
+- Add optional shared environment configuration and ignored machine path overrides, with redacted doctor diagnostics.
+- Add read-only setup suggestions, host-led A/B/C clarification and next-step guidance.
+- Scaffold decision/evidence sidecars and add structural implement/review readiness checks.
+- Add behavior scenarios and a real-task comparison protocol; live-model evaluation remains unperformed.
+
+## Development note — Simpler onboarding and release regression coverage
+- Start with npm install, minimal module selection and project context; clarify advisory commands and the two-step CLI/snapshot update.
+- Link progressive context rules from the generated AGENTS entry point; retain project ownership and runtime boundaries.
+- Exercise legacy migrations against both the current and next patch version; document recovery from a failed immutable release tag.
+
+## Development note — Release validation compatibility
+- Accept Release Please's linked version headings for version 0.6.1 in both validation commands while retaining strict matching of the current distribution version.
+
+## Development note — Release migration tests
+- Fix legacy upgrade tests to assert the current Harness source version rather than hardcoding 0.6.0, allowing Release Please version PRs to pass CI without weakening migration checks.
+
+## Development note — npm 12 pack metadata compatibility
+- Make package smoke tests support both npm 10/11 array-form and npm 12 package-keyed JSON output from `npm pack --json`.
+- Validate archive metadata before accessing `files`, with explicit diagnostics instead of an undefined-property crash.
+- Add parser regression tests and a Windows/Node 24/npm 12 CI smoke job; do not relax package safety checks.
+
+## Development note — npm public release setup
+- Align public npm package scope `@manhd_d/ai-harness` and lockfile while GitHub repository stays private under `manh0303`.
+- Add explicit GitHub Release-triggered npm OIDC publishing, tag/version checks, package tests and maintainer-controlled first publication.
+
+## Development note — Optional monetization capability
+- Add stack-independent `monetization` capability with five instruction skills (AdSense integration, safe ad placement, SEO growth, analytics/revenue, publisher compliance), two review-gated workflows, four project-owned Markdown templates, four advisory checks and four synthetic evaluation cases.
+- Document owner-approved ads.txt/publisher account information, EEA/UK/Swiss consent/CMP review, invalid traffic safeguards and evidence-labeled Page RPM scenarios; no guarantees of approval, clicks, ranking or earnings.
+- Support opt-in use with Astro, React/Next.js or other app adapters; only selected capabilities are vendored into consumer projects.
+- Update CLI help, examples, skill matrix and SDK-independent usage. Distribution remains 0.6.0 candidate pending separate release; no live AdSense/Analytics/Search Console integration or automatic publishing.
+
+
+## Development note — Astro lightweight web adapter
+- Add opt-in `astro` technology adapter with 6 namespaced skills for architecture, Islands/React integration, SEO, performance, Cloudflare and staged microfrontend migration.
+- Add static-first/privacy/deployment rules, advisory verification and evidence-based eval cases; Astro dependency detection suppresses spurious React/Next.js from `react-dom` islands unless `next` is also declared.
+- Update CLI help, adapter discovery docs, skill matrix, getting started, SDLC overview and Astro micro-tool walkthrough.
+- Add Astro detection, composition, locked-skill, update and documentation regression tests. Keep npm distribution version 0.6.0 candidate; no auto-deploy or publishing.
+
+
+## Development note — Documentation & Discovery (planned v0.7.0)
+- Support complementary Idea-driven and Document-driven Product workflows without duplicating enterprise BA sources or forcing all documents on small projects.
+- Add four Product skills (idea discovery, evidence-backed research, SRS, use cases) and five document templates (idea, research, PRD-lite, SRS, use cases); totals: 13 Product skills, 5 workflows, 16 templates.
+- Route new idea/research drafts safely to consumer `docs/discovery/`; keep Product documents under `docs/product/` with pinned templates and integrity checks.
+- Add Confluence read/export contract with explicit permissions, version/approval gates; no live remote API calls or automatic AI execution.
+- Add regression tests and documentation links; release version stays at 0.6.0 pending an independently reviewed release PR.
+
+
+## Development note — Foundation hardening
+- Document full SDLC and first-use flow, 38-skill mapping, role handoffs and four concrete stack walkthroughs; add drift test against skill manifests.
+- Align READMEs, CLI documentation and npm guide with unified evaluation scopes and source candidate version.
+- Add MIT License (2026 manh0303), align npm package metadata and include LICENSE in packed tarballs.
+- Add independently versioned module metadata and optional requires/recommends/conflicts/compatibility constraints with read-only `aih resolve`.
+- Fail closed before install/update on missing dependencies, incompatible selections and cycles; keep Product, UI/UX and DevOps composable.
+- Extend `aih verify/eval --scope all` to Core, capabilities and cross-module scenarios; preserve legacy adapter-only defaults.
+- Add lock-checked capability/core evaluations, review-only checks and composition regression tests.
+- Check release metadata consistency and establish single-release-PR version discipline; retain v0.6.0 until a dedicated release PR.
+
+
+## [0.18.0](https://github.com/manh0303/notth/compare/v0.17.0...v0.18.0) (2026-10-17)
+
+
+### Features
+
+* deepen engineering and technical documentation guidance ([2e96ce2](https://github.com/manh0303/notth/commit/2e96ce2a1c99c996ec56aaa0a0298ba78e754619))
+* simplify task onboarding, progress and design delivery ([3562302](https://github.com/manh0303/notth/commit/356230201220c7e54fe5356948745b22e2ebf831))
+* **uiux:** add contextual design quality and optional skill handoffs ([67230fa](https://github.com/manh0303/notth/commit/67230fa7789387a3cbe4fe684f0e2c99cc6a6b17))
+
+## [0.17.0](https://github.com/manh0303/notth/compare/v0.16.0...v0.17.0) (2026-10-15)
+
+
+### Features
+
+* support reusable project workflows across AI tools ([07cd549](https://github.com/manh0303/notth/commit/07cd5492daa99b94d98e9b05c7a6a5857406ffe6))
+
+
+### Bug Fixes
+
+* simplify first-session setup across AI tools ([9f56129](https://github.com/manh0303/notth/commit/9f56129316eef6a1be726be55ddf84a677f407b2))
+
+## [0.16.0](https://github.com/manh0303/notth/compare/v0.15.0...v0.16.0) (2026-10-15)
+
+
+### Features
+
+* rename distribution and product to Notth ([6a17f71](https://github.com/manh0303/notth/commit/6a17f71e1eb99ef249b97a9586329ba08867f676))
+
+## [0.15.0](https://github.com/manh0303/ai-harness/compare/v0.14.0...v0.15.0) (2026-10-14)
+
+
+### Features
+
+* add actual end-user acceptance and journey evidence ([ee99fd6](https://github.com/manh0303/ai-harness/commit/ee99fd6825d46efb20e80ccb36cdec9e7b214b05))
+* add in-session Kiro onboarding and knowledge freshness ([8f2e68b](https://github.com/manh0303/ai-harness/commit/8f2e68b0b2200437096cc69ce5e8acae5b85002b))
+* add workflow contracts and offline pip distribution ([6cde81a](https://github.com/manh0303/ai-harness/commit/6cde81a0cc1c41922cce82458fbe88cca7913edd))
+* scaffold missing setup and persist scoped project decisions ([38877c8](https://github.com/manh0303/ai-harness/commit/38877c896e94a35a6d5407d2ab662538088cfd7b))
+
+## [0.14.0](https://github.com/manh0303/ai-harness/compare/v0.13.0...v0.14.0) (2026-10-14)
+
+
+### Features
+
+* add guided start and portable user configuration ([2f18d23](https://github.com/manh0303/ai-harness/commit/2f18d23d92811858a3b722b349f423694bfcf3e2))
+
+## [0.13.0](https://github.com/manh0303/ai-harness/compare/v0.12.0...v0.13.0) (2026-10-13)
+
+
+### Features
+
+* make harness agent-first and portable across projects ([5286c66](https://github.com/manh0303/ai-harness/commit/5286c66cb0895c412da4ff9f0a1e05c4b54f3881))
+
+## [0.12.0](https://github.com/manh0303/ai-harness/compare/v0.11.0...v0.12.0) (2026-10-13)
+
+
+### Features
+
+* continuous development and living documentation ([e87f007](https://github.com/manh0303/ai-harness/commit/e87f007c31a4a0d99f98b47f75c00ff632d92023))
+
+## [0.11.0](https://github.com/manh0303/ai-harness/compare/v0.10.0...v0.11.0) (2026-10-13)
+
+
+### Features
+
+* add adaptive verification and selective TechSpec ([2049514](https://github.com/manh0303/ai-harness/commit/2049514a3f97aede8ed0d9cc1f2bb18da7f6dfe9))
+
+## [0.10.0](https://github.com/manh0303/ai-harness/compare/v0.9.0...v0.10.0) (2026-10-13)
+
+
+### Features
+
+* add project artifact and integration contracts ([fcc1728](https://github.com/manh0303/ai-harness/commit/fcc172860988692c0f8a9b2d3bb96b3214e35d5f))
+
+## [0.9.0](https://github.com/manh0303/ai-harness/compare/v0.8.0...v0.9.0) (2026-10-13)
+
+
+### Features
+
+* complete onboarding and web mobile coding skills ([4e26a1d](https://github.com/manh0303/ai-harness/commit/4e26a1de1d5c2c95a6b4a6c610ebc4d6ccad61f6))
+
+## [0.8.0](https://github.com/manh0303/ai-harness/compare/v0.7.0...v0.8.0) (2026-10-12)
+
+
+### Features
+
+* add project-aware coding conventions and reuse review ([ee1fad0](https://github.com/manh0303/ai-harness/commit/ee1fad0cc447ec6d41f07739a250b103d8df8845))
+* add project-owned agent configuration and host routing plans ([8786294](https://github.com/manh0303/ai-harness/commit/8786294a0542b92998169b1cdb6199c88e8f4a20))
+* add solution architecture and delivery workflows with host setup ([b75c00b](https://github.com/manh0303/ai-harness/commit/b75c00b43ab706768ad92ae2a280879eb7745489))
+
+
+### Bug Fixes
+
+* connect Harness maintenance impact and rule discovery checks ([bc79f56](https://github.com/manh0303/ai-harness/commit/bc79f56f6052917a0e28d895597547485d6bfb83))
+
+## [0.7.0](https://github.com/manh0303/ai-harness/compare/v0.6.2...v0.7.0) (2026-10-12)
+
+
+### Features
+
+* add project environment setup and clarification readiness ([384cf13](https://github.com/manh0303/ai-harness/commit/384cf13b8a96791c26f9e0769bd8e0ccb734c20b))
+
+## [0.6.2](https://github.com/manh0303/ai-harness/compare/v0.6.1...v0.6.2) (2026-10-11)
+
+
+### Bug Fixes
+
+* **release:** support linked Release Please changelog headings ([8084940](https://github.com/manh0303/ai-harness/commit/80849408a349305ef5cdfb0c0eb0206ea8242eb8))
+* simplify onboarding and guard release version migrations ([43efbb2](https://github.com/manh0303/ai-harness/commit/43efbb24e26d190b7a2b8dd2fbd5a9a5ee5368a1))
+* **test:** unblock Release Please version bump CI ([63ba179](https://github.com/manh0303/ai-harness/commit/63ba17974cafad40e6ff5b483c126afdfc49df44))
+
+## [0.6.1](https://github.com/manh0303/ai-harness/compare/v0.6.0...v0.6.1) (2026-10-11)
+
+
+### Bug Fixes
+
+* **release:** automate npm publishing with Release Please and OIDC ([d39f284](https://github.com/manh0303/ai-harness/commit/d39f2843bd2700d9be8f70981135b8502b691303))
+* **release:** automate npm releases with Release Please and OIDC ([0b293c5](https://github.com/manh0303/ai-harness/commit/0b293c520601cf2f21ed10d0dd3973f659647cc0))
+
+## 0.6.0 — DevOps capability and Kubernetes adapter candidate
+- Add `devops` capability with six namespaced CI/CD, Docker, deployment, infrastructure, observability and incident-response skills plus two review-gated workflows.
+- Add `kubernetes` adapter with Helm/workload/rollout skills, advisory verification checks and two safety evaluation scenarios.
+- Combine Product, UI/UX and DevOps with selected technology adapters using existing lock-safe installation and progressive skill discovery.
+- Preserve Core human authorization requirements; no live CI dispatch, production deployment, provider writes or automatic merge.
+- `aih verify` / `aih eval` remain adapter-only; capability workflow documents do not execute runtime tools.
+
+
+## 0.5.0 — Product documentation capability candidate
+- Add independent Product capability with 5 role contracts (BA, PM, PO, delivery PM, reviewer), 9 skills, 3 workflows, and 11 templates.
+- Generate evidence-backed BRD, PRD, epics, stories, testable AC, traceability and independent review instructions.
+- Add `aih new-doc <type>` for safe, non-overwriting project-owned drafts from drift-checked installed templates.
+- Extend capability schema-1 with optional validated `agents` and `templates` arrays; preserve existing UI/UX metadata.
+- Support `aih init --capabilities product,uiux` and a documented approved-requirements handoff to UI/UX/OpenSpec.
+- No connector execution, autonomous document population, stakeholder approval, npm release or automatic merge.
+
+
+## 0.4.0 — modular UI/UX capability candidate
+- Add explicit `uiux` capability, six review-gated skills and document/idea-to-Figma workflows.
+- Add `aih init --capabilities uiux` independent from technology adapters; update selection through project.json.
+- Add progressive skill disclosure with `aih skills` (metadata) and `aih skill <name>` (locked full skill).
+- Extend project/lock schema-1 compatibly with an optional capabilities field; preserve old 0.1–0.3 snapshots.
+- Package capability files and maintain fail-closed drift, collision and source integrity checks.
+- No live Confluence/Figma execution, npm registry publication or automatic Git merge.
+
+
+## 0.3.0 — adapter capabilities candidate
+- Add strict adapter.yaml schema 2 with technology rules, nine namespaced skills, advisory checks and eight evaluation scenarios.
+- Add list, evidence-based detect and opt-in init --detect; preserve explicit selection and core-only defaults.
+- Add verify plans and eval report generation/scoring tied to installed bundle and dataset hashes.
+- Expose only selected adapter skills alongside shared Core skills; preserve lock/conflict safety.
+- Migrate installed 0.1/0.2 snapshots while replacing old adapter metadata; no automatic model/build execution.
+
+
+## 0.2.0 — npm CLI candidate
+- Replace the Python installer with dependency-free Node.js 22+ and the `aih` npm executable.
+- Default target to cwd; support --help, --version, global and local package installation.
+- Preserve schema-1 Python 0.1 locks, safety checks, project-owned content and pinned templates.
+- Add real legacy migration fixtures, tarball/global/local smoke tests and Node/OS CI matrix.
+- Remove Python invocation entry points; see docs/versioning.md before updating CI scripts.
+- Package scope is proposed; no npm publication is implied by this change.
+
+
+## 0.1.0 — unreleased
+- Portable core rules, permission/security contracts, five skills and five agent roles.
+- Java/Spring, React/Next.js, React Native and AI/Python adapters.
+- OpenSpec draft templates and local change scaffolding.
+- Dependency-free Python init/update/check/doctor/new-change CLI.
+- Managed block preservation, hash lock, conflict refusal, bounded install ownership and rollback tests.
+- GitHub CI, GitLab/MCP integration templates and behavioral evaluation rubric.
+
+Initial installation requires Python 3.10+ and a trusted local checkout. No prior version migration.

notth-0.18.0/CONTRIBUTING.md

@@ -0,0 +1,26 @@
+# Contributing
+
+Start with [Harness maintenance](docs/harness-maintenance.md): map the impact of each change and
+trace affected declarations through installation, AI discovery, workflow, verification and docs.
+Use its impact template and the PR checklist; explain not-applicable areas and keep pending work visible.
+
+Create a feature branch and an OpenSpec change for meaningful behavior or policy changes.
+Keep executable behavior tests alongside CLI changes. Document adapter expectations without pinning
+consumer application versions arbitrarily. Do not run a model evaluation with secrets or production data.
+
+Use Node.js 22+ and npm. Run `npm test`, `npm run validate`, and `npm run test:package` from the root.
+The package smoke test installs the actual tarball globally and locally using a temporary offline npm cache.
+Update CHANGELOG and the version/migration guidance when releasing. Have a human inspect the install
+diff, not only generated hashes. Open a PR; do not merge automatically or enable auto-merge.
+
+Use original instructions or properly licensed attributed content. Do not copy proprietary workspace
+details or third-party skill source into this repository. This repository is released under the MIT License; see LICENSE. Only contribute material you own or are authorized to distribute under compatible terms.
+
+## README translations
+
+README.md is the English source; translations live in docs/i18n/README.<language-code>.md.
+Keep sections, capabilities, commands and setup links aligned with the source. Preserve technical
+terms such as Requirements, Code, Test, Review, docs, spec, workflow, agent and skill.
+Add a native-language link to every README selector only when its translation exists.
+For example, use es for Español, fr for Français, zh-CN for 简体中文 or ja for 日本語.
+Translation changes do not translate the linked guides automatically.

notth-0.18.0/LICENSE

@@ -0,0 +1,21 @@
+MIT License
+
+Copyright (c) 2026 manh0303
+
+Permission is hereby granted, free of charge, to any person obtaining a copy
+of this software and associated documentation files (the "Software"), to deal
+in the Software without restriction, including without limitation the rights
+to use, copy, modify, merge, publish, distribute, sublicense, and/or sell
+copies of the Software, and to permit persons to whom the Software is
+furnished to do so, subject to the following conditions:
+
+The above copyright notice and this permission notice shall be included in all
+copies or substantial portions of the Software.
+
+THE SOFTWARE IS PROVIDED "AS IS", WITHOUT WARRANTY OF ANY KIND, EXPRESS OR
+IMPLIED, INCLUDING BUT NOT LIMITED TO THE WARRANTIES OF MERCHANTABILITY,
+FITNESS FOR A PARTICULAR PURPOSE AND NONINFRINGEMENT. IN NO EVENT SHALL THE
+AUTHORS OR COPYRIGHT HOLDERS BE LIABLE FOR ANY CLAIM, DAMAGES OR OTHER
+LIABILITY, WHETHER IN AN ACTION OF CONTRACT, TORT OR OTHERWISE, ARISING FROM,
+OUT OF OR IN CONNECTION WITH THE SOFTWARE OR THE USE OR OTHER DEALINGS IN THE
+SOFTWARE.

notth-0.18.0/PKG-INFO

@@ -0,0 +1,79 @@
+Metadata-Version: 2.4
+Name: notth
+Version: 0.18.0
+Summary: Notth shared workflows and Node.js CLI, installable without npm
+Requires-Python: >=3.9
+License-Expression: MIT
+License-File: LICENSE
+Project-URL: Repository, https://github.com/manh0303/notth
+Description-Content-Type: text/markdown
+
+# Notth
+
+**English** · [Tiếng Việt](docs/i18n/README.vi.md) · [简体中文](docs/i18n/README.zh-CN.md) · [Español](docs/i18n/README.es.md)
+
+Reusable agent workflows for software development: **Requirements → Design → Code → Test → Review.**
+
+Give an idea, existing docs or a change request to your AI coding tool. Harness helps it inspect the project, clarify open decisions, implement accepted scope and maintain relevant specs/docs. Use only the roles and skills the task needs.
+
+Works with any project through Core workflows. Optional stack support: Spring Boot, React/Next.js, React Native, Python, Astro and Kubernetes. Stack selection does not choose infrastructure or architecture.
+
+Previously **AI Harness**. [Existing installation → Notth](docs/notth-migration.md).
+Registry commands require a published package containing the selected host support.
+If npm returns E404, use the [reviewed source/offline path](docs/getting-started.md#cài-từ-source-khi-registry-chưa-có-package).
+
+## Quick start
+
+Requires **Node.js 22+** and your AI coding tool. Run in your **project root**:
+
+```bash
+npx --yes @manhd_d/notth init --host codex
+```
+
+Set `--host` to `codex`, `claude-code`, `cursor`, `copilot`, `gemini-cli`, `kiro`, `opencode` or `windsurf`.
+Choose the one tool you use; Notth installs only its required bridge.
+[Shared setup and migration](docs/tool-portability.md).
+In your first AI session, invoke **harness-start** if the host exposes it, or send:
+
+> Read .agents/skills/harness-start/SKILL.md and follow it for this project. My task: [task].
+
+The agent inspects the project, asks only missing questions, saves context and continues your task.
+Review its changes and test results. In later sessions, describe the next task directly or ask to resume saved work.
+No terminal interview, model configuration or manual skill sequence is required. Kiro exposes
+`/harness-start`; native discovery varies by client. [Host guides](docs/tool-setup/README.md).
+`npx` does not create a global command; use `npx --yes @manhd_d/notth check` to check integrity.
+
+## Daily use
+
+After the first-session entry point is loaded, describe the outcome:
+
+- “Fix this bug and show the regression check.”
+- “Add filtered export; preserve current permissions and prepare a PR.”
+- “Continue the saved task and tell me what remains.”
+
+The agent chooses the necessary depth, reuses confirmed decisions and reports completed work,
+blockers and the next action. You do not need to select roles or gates.
+
+[Short prompts & troubleshooting](docs/simple-use.md) · [pip/offline](docs/python-installation.md) · [Settings & backup](docs/configuration-backup.md).
+[UI design, previews & optional design skills](docs/ui-design.md).
+[Coding & technical documentation](docs/engineering-quality.md).
+Python installation still requires Node.js 22+; it does not call npm. Registry availability must be verified.
+
+## Where it runs
+
+| AI tool | Environment | Install the tool | Harness setup |
+| --- | --- | --- | --- |
+| **Codex** | CLI, IDE or connected cloud workspace | [Install](https://developers.openai.com/codex/quickstart/) | [Guide](docs/tool-setup/codex.md) |
+| **Claude Code** | Project terminal | [Install](https://code.claude.com/docs/en/setup) | [Guide](docs/tool-setup/claude-code.md) |
+| **Cursor** | IDE Agent | [Install](https://cursor.com/docs) | [Guide](docs/tool-setup/cursor.md) |
+| **GitHub Copilot** | IDE Agent or CLI | [Install](https://docs.github.com/en/copilot) | [Guide](docs/tool-setup/copilot.md) |
+| **Gemini CLI** | Project terminal | [Install](https://geminicli.com/docs/) | [Guide](docs/tool-setup/gemini-cli.md) |
+| **OpenCode** | Terminal / IDE | [Install](https://opencode.ai/docs/) | [Guide](docs/tool-setup/opencode.md) |
+| **Windsurf** | IDE Cascade | [Install](https://docs.windsurf.com/) | [Guide](docs/tool-setup/windsurf.md) |
+| **Kiro** | IDE, CLI or connected Web workspace | [Install](https://kiro.dev/docs/getting-started/installation/) | [Guide](docs/tool-setup/kiro.md) |
+
+Local/cloud execution and external inputs depend on the host's actual access. MCP/connector/API connections can supply docs, designs, tickets and evidence under project source policies.
+
+[Daily use & recovery](docs/reusable-workflows.md) · [Getting started](docs/getting-started.md) · [Docs & examples](docs/README.md) · [Input/output](docs/artifact-contract.md) · [Agent configuration](docs/agent-configuration.md) · [Continuous development](docs/continuous-development.md)
+
+[Contributing](CONTRIBUTING.md) · [Harness maintenance](docs/harness-maintenance.md) · [MIT](LICENSE)

notth-0.18.0/README.md

@@ -0,0 +1,69 @@
+# Notth
+
+**English** · [Tiếng Việt](docs/i18n/README.vi.md) · [简体中文](docs/i18n/README.zh-CN.md) · [Español](docs/i18n/README.es.md)
+
+Reusable agent workflows for software development: **Requirements → Design → Code → Test → Review.**
+
+Give an idea, existing docs or a change request to your AI coding tool. Harness helps it inspect the project, clarify open decisions, implement accepted scope and maintain relevant specs/docs. Use only the roles and skills the task needs.
+
+Works with any project through Core workflows. Optional stack support: Spring Boot, React/Next.js, React Native, Python, Astro and Kubernetes. Stack selection does not choose infrastructure or architecture.
+
+Previously **AI Harness**. [Existing installation → Notth](docs/notth-migration.md).
+Registry commands require a published package containing the selected host support.
+If npm returns E404, use the [reviewed source/offline path](docs/getting-started.md#cài-từ-source-khi-registry-chưa-có-package).
+
+## Quick start
+
+Requires **Node.js 22+** and your AI coding tool. Run in your **project root**:
+
+```bash
+npx --yes @manhd_d/notth init --host codex
+```
+
+Set `--host` to `codex`, `claude-code`, `cursor`, `copilot`, `gemini-cli`, `kiro`, `opencode` or `windsurf`.
+Choose the one tool you use; Notth installs only its required bridge.
+[Shared setup and migration](docs/tool-portability.md).
+In your first AI session, invoke **harness-start** if the host exposes it, or send:
+
+> Read .agents/skills/harness-start/SKILL.md and follow it for this project. My task: [task].
+
+The agent inspects the project, asks only missing questions, saves context and continues your task.
+Review its changes and test results. In later sessions, describe the next task directly or ask to resume saved work.
+No terminal interview, model configuration or manual skill sequence is required. Kiro exposes
+`/harness-start`; native discovery varies by client. [Host guides](docs/tool-setup/README.md).
+`npx` does not create a global command; use `npx --yes @manhd_d/notth check` to check integrity.
+
+## Daily use
+
+After the first-session entry point is loaded, describe the outcome:
+
+- “Fix this bug and show the regression check.”
+- “Add filtered export; preserve current permissions and prepare a PR.”
+- “Continue the saved task and tell me what remains.”
+
+The agent chooses the necessary depth, reuses confirmed decisions and reports completed work,
+blockers and the next action. You do not need to select roles or gates.
+
+[Short prompts & troubleshooting](docs/simple-use.md) · [pip/offline](docs/python-installation.md) · [Settings & backup](docs/configuration-backup.md).
+[UI design, previews & optional design skills](docs/ui-design.md).
+[Coding & technical documentation](docs/engineering-quality.md).
+Python installation still requires Node.js 22+; it does not call npm. Registry availability must be verified.
+
+## Where it runs
+
+| AI tool | Environment | Install the tool | Harness setup |
+| --- | --- | --- | --- |
+| **Codex** | CLI, IDE or connected cloud workspace | [Install](https://developers.openai.com/codex/quickstart/) | [Guide](docs/tool-setup/codex.md) |
+| **Claude Code** | Project terminal | [Install](https://code.claude.com/docs/en/setup) | [Guide](docs/tool-setup/claude-code.md) |
+| **Cursor** | IDE Agent | [Install](https://cursor.com/docs) | [Guide](docs/tool-setup/cursor.md) |
+| **GitHub Copilot** | IDE Agent or CLI | [Install](https://docs.github.com/en/copilot) | [Guide](docs/tool-setup/copilot.md) |
+| **Gemini CLI** | Project terminal | [Install](https://geminicli.com/docs/) | [Guide](docs/tool-setup/gemini-cli.md) |
+| **OpenCode** | Terminal / IDE | [Install](https://opencode.ai/docs/) | [Guide](docs/tool-setup/opencode.md) |
+| **Windsurf** | IDE Cascade | [Install](https://docs.windsurf.com/) | [Guide](docs/tool-setup/windsurf.md) |
+| **Kiro** | IDE, CLI or connected Web workspace | [Install](https://kiro.dev/docs/getting-started/installation/) | [Guide](docs/tool-setup/kiro.md) |
+
+Local/cloud execution and external inputs depend on the host's actual access. MCP/connector/API connections can supply docs, designs, tickets and evidence under project source policies.
+
+[Daily use & recovery](docs/reusable-workflows.md) · [Getting started](docs/getting-started.md) · [Docs & examples](docs/README.md) · [Input/output](docs/artifact-contract.md) · [Agent configuration](docs/agent-configuration.md) · [Continuous development](docs/continuous-development.md)
+
+[Contributing](CONTRIBUTING.md) · [Harness maintenance](docs/harness-maintenance.md) · [MIT](LICENSE)

notth-0.18.0/SECURITY.md

@@ -0,0 +1,10 @@
+# Security reports
+
+Contact the repository owner privately through an agreed channel. Do not put live credentials,
+production personal data or exploitable private infrastructure details in issues or PRs.
+For a report, provide affected version, minimal synthetic reproduction, impact and suggested containment.
+
+The installer trusts the source checkout and a non-hostile local filesystem. It protects against ordinary
+path traversal, symlinks, accidental overwrite and configuration drift. It does not authenticate source
+releases, sandbox agents, enforce access controls or guarantee recovery from process/power loss.
+Review source provenance and use Git history for recovery. Run in an isolated working copy.