5-dimension scorecard (0-100, grade A/B/C/F) for a scaffolded harness. Dimensions: Repo understanding (25%), Agent usefulness (25%), MCP safety (20%), Test coverage (15%), Publish readiness (15%). Emits a 6-field badges block (score + mcpRisk + 4 booleans) ready for the harness README. Exit 0 A/B, 1 C, 2 F.
The English summary is being prepared. Showing the original description.
See how to installReview the instructions the agent will receive before you install.
Codex skill: 5-dimension harness scorecard with README-ready badges (iter 111 → iter 114).
Every generated harness gets a single 0-100 score and a 6-field badge block. The user roadmap target: A grade (>=85) without manual edits.
| Dimension | Weight | Reads |
|---|---|---|
| Repo understanding | 25% | .harness/manifest.json (surface + kernel_version + host) |
| Agent usefulness | 25% | src/agents/*.ts + .claude/skills/* + .claude/commands/* counts |
| MCP safety | 20% | .harness/mcp-policy.json (default-deny + audit + perm gates) |
| Test coverage | 15% | __tests__/ + npm test + .github/workflows/ |
| Publish readiness | 15% | witness.json + sbom.json + package.json#bin |
Grade + exit code:
| Grade | Range | Exit |
|---|---|---|
| A | 85-100 | 0 — the user's target |
| B | 70-84 | 0 |
| C | 50-69 | 1 (needs work) |
| F | 0-49 | 2 (blocked) |
{
"score": 87,
"mcpRisk": "Low",
"releaseReady": true,
"testsDetected": true,
"sbom": true,
"witnessSigned": true
}
mcpRisk is one of None / Low / Medium / High. Drop this block
into the generated harness README as visible badges — see ADR-030 for the
propagation discipline.
/score-harness path=./my-harness
/score-harness path=./my-harness bundle=true
harness score ./my-harness # text + bars + dimension breakdown
harness score ./my-harness --json # 6-field badges JSON
harness score ./my-harness --bundle # ADR-031 schema-1 envelope
harness score ./my-harness --out badges.json
validate-harness (iter 22) — release-readiness umbrella that the
score subcommand inherits signals fromdiag-harness (iter 70) — kernel-version skew (one of the
Repo-understanding signals)threat-model (iter 114) — focused MCP threat artifactNo reviews yet. Tell others what you thought.
No login needed. Share how it worked for you, ask a question, or note where it did not run.
No comments yet. Be the first to write one.
Diff two scaffolded harnesses (ADR-031). Reports manifest meta drift + host list + per-file fingerprint changes (added/removed/changed). Exits 0 IDENTICAL, 1 DRIFT, 2 missing manifest. Use --bundle for the ADR-031 schema-1 JSON envelope.
The English summary is being prepared. Showing the original description.
Scaffold your own focused AI agent harness — pick host (Claude Code, Codex, pi.dev, Hermes), template, agents, skills, and ship a npm-publishable harness with its own npx CLI. Use when a user asks to "create my own agent harness", "scaffold a harness", "make a custom Claude Code plugin like ruflo", or "build a vertical AI assistant for X".
The English summary is being prepared. Showing the original description.
Kernel-version skew check (ADR-027). Reports manifest surface + manifest kernel + installed kernel + verdict (match/patch-diff/minor-diff/major-diff). Exits 1 on minor/major skew with a copy-pasteable `npm install @metaharness/kernel@X.Y.Z` next step. Exits 2 if no .harness/manifest.json at path.
The English summary is being prepared. Showing the original description.
Evolve this harness with Darwin Mode — frozen model, evolving harness (real, sandboxed, safety-gated).
The English summary is being prepared. Showing the original description.
Scaffold a ready-made AI agent harness in one command from the 19 published @metaharness/* example packages — 9 host integrations (Claude Code, Codex, Hermes, pi.dev, OpenClaw, RVM, Copilot, OpenCode, GitHub Actions) + 10 vertical pods (devops, research, trading, support, legal, coding, education, sales, gaming, repo-maintainer).
The English summary is being prepared. Showing the original description.
GCP Secret Manager integration: validate setup, fetch values, or confirm an NPM_TOKEN is non-revoked via `npm whoami`. Used for publish-time token rotation without long-lived keys in CI.
The English summary is being prepared. Showing the original description.