Harness Master

Audit AI harness configuration quality, usage posture, and ecosystem options, then apply approved config fixes in the same session.

NOT for: creating agents (agent-conventions), building MCP servers (mcp-creator), generic application telemetry (observability-advisor), or generic code review without harness/config focus (review).

Input: harness names, level, or natural language. Modes: Audit, Discover (gap + bounded research), Usage, Apply/Install, Journal. Run scripts/discovery/classify_intent.py --args "$ARGUMENTS" --json when mode is ambiguous.

Dispatch

Empty-Args Handler

If the user invokes /harness-master with no arguments:

1. Ask which harnesses to review or whether to use all.
2. Ask for project, global, or both.
3. Explain that the first pass is always dry-run only.

Input Normalization

• Supported harnesses: claude-code, claude-desktop, chatgpt, codex, cursor, cursor-cli, grok-build, opencode, perplexity-desktop, cherry-studio, lm-studio
• Supported levels: project, global, both
• Supported research categories: config, plugin, extension, mcp, skill, all
• Supported usage windows: positive day counts such as 7, 14, 30, or days=14; default to 14 when absent
• Harness aliases:

- claude, claude-code -> claude-code - claude-desktop -> claude-desktop - chatgpt, chatgpt-desktop, openai-chatgpt -> chatgpt - codex -> codex - cursor, cursor-editor, cursor-desktop, cursor-web, cursor-cloud, cursor-cloud-agent, cursor-background-agent -> cursor - cursor-cli, cursor-agent, cursor-agent-cli, agent-cli, agent -> cursor-cli - grok, grok-build, grok-cli -> grok-build - opencode, open-code -> opencode - perplexity, perplexity-desktop, perplexity-mac -> perplexity-desktop - cherry, cherrystudio, cherry-ai, cherry-studio -> cherry-studio - lm-studio, lmstudio, lms -> lm-studio

• Level aliases:

- project, repo, local -> project - global, user -> global - both, all-levels -> both

• Split multiple harnesses on commas and whitespace.
• If the user supplies both all and named harnesses, ask which form they want.
• Deterministic all order: claude-code, claude-desktop, chatgpt, codex, cursor, cursor-cli, grok-build, opencode, perplexity-desktop, cherry-studio, lm-studio
• Unknown tokens are never guessed. Ask one focused clarification question.

Grok Build (grok-build)

• Instruction entry: AGENTS.md -> instructions/grok-global.md -> instructions/global.md
• Policy template: config/grok-config.toml merged into ~/.grok/config.toml via repo Grok platform adapter sync
• Ownership: replace-owned (models, mcp_servers, plugins, compat, telemetry) vs blend-owned (ui, features, session, tools, toolset, subagents, memory)
• Repo skills: when normalized ~/.grok/config.toml [plugins].paths resolves to this valid repo root, the plugin is the preferred non-CLI owner. Do not emit Skills CLI, Claude alias, or ~/.grok/skills mirrors for its repo skill bodies.
• External skills: no native Skills CLI adapter; curated external install/sync retains the claude-code alias + mirror to ~/.grok/skills.
• Collisions: plugin-covered names in ~/.agents/skills, ~/.claude/skills, or ~/.grok/skills are cleanup candidates and block a collision-free activation claim.
• Saved workflows: repo .grok/workflows/*.rhai is source only. Project user projection and recognized legacy migration use scripts/grokworkflowprojection.py, an exact preview receipt, fresh canaries, and receipt-bound rollback.
• Plannotator: CLI + skills + hooks (no Grok npm plugin). Install: grok plannotator install (repo CLI). Policy: config/grok-plannotator-hooks.json -> ~/.grok/hooks/plannotator.json; home shim maps block -> deny. Curated in docs/src/authoring/skills/*.mdx. Contrast OpenCode @plannotator/opencode@latest.
• Env (not in TOML): GROKWEBFETCH, GROKMEMORY, GROKSUBAGENTS, GROKLSPTOOLS — document in config/grok-env.sh; verify with /grok-delegate preflight
• Cross-harness delegate: /grok-delegate — native headless grok -p / -r / worktrees / leader for Codex/OpenCode task graphs (not config sync)
• Isolated sync: repo stack sync with --platforms grok --targets home (skips other harness home merges; includes Plannotator hook refresh)

Cursor Agent CLI (cursor-cli)

• Binary: agent (also cursor-agent). Skills CLI adapter remains cursor (-a cursor).
• Instruction entry: AGENTS.md + CLAUDE.md + .cursor/rules + instructions/cursor-cli-global.md (thin .cursor/rules/cursor-cli.mdc pointer)
• Shared SSOT with editor: .cursor/hooks.json, .cursor/mcp.json, .cursor/skills, .cursor/agents, ~/.cursor/{hooks,mcp,skills,agents} — rendered once by the Cursor adapter (harness="cursor")
• CLI-only: project .cursor/cli.json permissions; user-owned ~/.cursor/cli-config.json (sync SHALL NOT write it). Doctor: repo CLI cursor-cli doctor
• Plugins: --plugin-dir and agent plugin marketplace (operator-opt-in; never sync-add)
• ACP / worktrees / worker: cite cursor-acp; agent --worktree; agent worker is out of repo sync
• Hooks: consume shared hooks.json + plugin hooks. Do not add cursor-cli to hook-registry render lists. Home-only Plannotator: CreatePlan / SwitchMode via config/cursor-global-hooks.json → ~/.cursor/hooks.json + plannotator-plan-hook.py. Install/sync: cursor-cli plannotator sync. Never project into git-tracked .cursor/hooks.json.

Classification Gate

1. Parse $ARGUMENTS into harnesses, level, all, install intent, apply intent, and unresolved tokens.
2. If unresolved tokens remain, ask a single clarification question before continuing.
3. If the request is discover ..., gap/missing/expand intent, or find-best-for-harness NL, run Discover (infer depth via classify_intent.py or discovery-pipeline.md).
4. If the request is usage ..., run Usage Review only.
5. If the request is install ..., run Install Guidance only.
6. If ad-hoc "find skill for X", redirect to skill-router search or npx skills find. If systematic skill/MCP expansion, stay in Discover. If create skill, redirect to skill-creator. If open-ended non-harness research, redirect to /research.
7. If the request is apply ... or an approval phrase, run Apply Approved only if the matching dry-run review already exists in this session. Otherwise rerun audit first.
8. If the request includes unsupported harnesses, refuse cleanly and list the supported set.
9. If harnesses are missing and all was not supplied (audit/usage), ask only for harnesses or all.
10. If the level is missing (audit/usage), ask only for project, global, or both.
11. Otherwise run Audit in dry-run mode.

Classification Logic

1. Route explicit mode tokens first: discover, usage, install, apply, resume, list.
2. Route gap/missing/expand/find-best NL to Discover depths (not Audit).
3. Route complete harness/level scopes to Audit when config tune/fix intent and no discover signal.
4. Route usage/cost/token NL to Usage Review.
5. Route approvals to Apply Approved only when the immediately preceding dry-run audit matches the requested scope.

Workflow

Mode A: Audit (default, dry-run first)

1. Gate 0 — Discover surfaces

- Run: ``bash uv run python scripts/discover_surfaces.py --repo-root . --level <level> --harness <canonical-harness> [--harness ...] ` - Parse the JSON output and classify each surface as present, missing, generated, merged, repo-observed, or blind-spot. - If the script cannot run, fall back to manual discovery with Glob, Read, and Grep`.

1. Gate 1 — Inspect project context before recommending fixes

- Read the repo's intent and operating model first: README.md, AGENTS.md, harness-facing project files, key manifests, CI/workflow signals, and repo-native orchestration logic when present. - In this repository, treat the repo-level harness sync script together with config/tooling-policy.json and config/sync-manifest.json as canonical context for managed/generated/merged harness surfaces.

1. Gate 2 — Refresh latest official guidance

- Read references/latest-doc-sources.md. - Use llms.txt first when available, then first-party docs, then canonical vendor repo docs, then web fallback only if needed. - If official docs are unavailable, enter degraded mode and lower confidence.

1. Gate 3 — Audit each selected harness independently

- Load references/harness-surfaces.md, references/harness-checklists.md, and references/evidence-boundaries.md selectively for the selected harnesses only. - For both, compare project/global precedence before recommending edits. - Mark generated surfaces explicitly. Prefer fixing the canonical source over directly editing generated output. - Treat missing native surfaces as evidence to assess, not automatic failure. - For grok-build both, if the selected repo owns .grok/workflows/rig-ecosystem-index.rhai and skills/rig-ecosystem-refresh/SKILL.md, verify config-path plugin ownership and the three duplicate skill roots. Resolve the downstream dotfiles root from current task context; never hard-code a user path. - Validate the canonical workflow with Grok's native workflow validator and validate the configured plugin source before treating the receipt as approval-eligible. Keep those results as separate evidence bound to the receipt's source hash. - Produce the workflow preview with: ``bash uv run python skills/harness-master/scripts/grokworkflowprojection.py preview \ --repo-root <agents-repo> \ --dotfiles-root <dotfiles-repo> \ --receipt-out <user-state-receipt.json> \ --format json ` The receipt path must be outside Grok skill/workflow discovery roots. A divergent destination, divergent legacy hash, invalid plugin owner, or duplicate skill exposure blocks the batch. Plugin ownership requires readable portable frontmatter whose non-empty name and description` match the skill directory. An existing transaction owner marker also blocks a fresh preview.

1. Gate 4 — Report dry-run findings

- Use the structure in references/output-format.md. - Every finding must include severity, affected surface, evidence tag, why it matters for this project, and the correct home for the fix. - Show concrete patch previews when the correct change is clear. - Stop after the dry-run report and wait for explicit user approval.

Mode B: Apply Approved

1. Apply only after an explicit approval gate.
2. Approval is valid only when the immediately preceding harness-master dry-run review in the same session already covered the same harness set and level.
3. If the reviewed scope is stale, missing, ambiguous, or contradicted by new evidence, rerun Audit before editing.
4. Restate the approved batch before making changes.
5. Apply the smallest approved batch only. Do not broaden scope silently.
6. If the approved remediation is an install step, use the exact npx skills add ... guidance from references/install-guidance.md.
7. After edits, rerun surface discovery and targeted dry-run checks for the touched harnesses, then summarize remaining gaps.
8. For an approved rig-ecosystem-index Grok receipt, do not use a broad

cross-harness skill-sync apply. Apply the exact receipt digest in phases: Reconfirm the native workflow/plugin validation evidence still covers the receipt's unchanged source hash before running: ``bash uv run python skills/harness-master/scripts/grokworkflowprojection.py apply \ --receipt <receipt.json> --receipt-sha256 <approved-sha256> --format json ` Start a fresh Grok process, verify one plugin-owned user-invocable skill, exact workflow bytes, non-mutating help, and workflow validation. Only after all canaries pass may the same approved receipt migrate recognized legacy bytes: `bash uv run python skills/harness-master/scripts/grokworkflowprojection.py migrate \ --receipt <receipt.json> --receipt-sha256 <approved-sha256> \ --canaries-passed --format json ` On failure, run only the same receipt's rollback command. Rollback first restores every verified legacy backup, then removes newly projected matching bytes last so a failed restore cannot leave Grok without a working workflow. Removal requires the active durable owner marker for that exact receipt digest and transaction. Before discarding the receipt-owned projected inode, rollback transitions that marker to a file-and-directory-synced transaction-specific rolled-back` tombstone outside workflow discovery. The tombstone remains permanently so a stale receipt cannot claim a later transaction's identical bytes. A missing, different, or tombstoned marker preserves any public projection. Legacy and projected removals use inode-bound, no-clobber quarantine so a same-hash replacement race fails closed.

Mode C: Discover

Read-only gap expansion and harness-bounded research. Load references/discovery-pipeline.md and references/discovery/coordinator-contract.md.

1. Classify depth (full, focused, candidate, compare, w0only, ideate, journal).
2. Run W0 scripts before any scouts when depth requires gaps.
3. Use sourceprobe.py and candidatescore.py inside W2/W2b — not as separate user-facing modes.
4. Block apply/install until user confirms; config fixes require Audit + apply approved.

Mode D: Usage Review

Use this mode for usage or natural-language requests to review token cost, quota, tool friction, MCP use, skill fit, plugin fit, context health, session attribution, or harness telemetry posture.

1. Treat the entire mode as read-only. Do not edit files, install packages, create jobs, export raw sessions, print raw prompts, print raw traces, or mutate harness configs.
2. Normalize harnesses, level, and usage window. Default missing window to 14 days.
3. Run surface discovery plus the safe usage probe:

``bash uv run python scripts/usage_probe.py --repo-root . --harness <canonical-harness> --level <level> --days <days> --json ``

1. Load references/usage-review.md, references/evidence-boundaries.md, and references/output-format.md.
2. Use runtime tools such as tokenstats, tokenhistory, tokenexport, insightscollect, agentattribution, quotastatus, gemini_quota, workspace-summary, and git-smart-status only when they match the requested harness and privacy class.
3. Normalize findings into usage signals and score source coverage, privacy safety, cost/token posture, tool efficiency, MCP hygiene, skill fit, plugin fit, context health, approval safety, and recommendation actionability.
4. Report recommendation lanes: keep, tune-config, tune-skill, tune-mcp, tune-plugin, tune-workflow, instrument, defer, or do-not-change.
5. If the user asks to apply a Usage Review recommendation, block the apply step and require a matching dry-run Audit plus explicit approval first.

Scaling Strategy

Latest-Doc Lookup Policy

Use the most current authoritative guidance available:

1. llms.txt or equivalent official index
2. First-party docs pages for config, instructions, rules, MCP, and permissions
3. Canonical vendor repo docs if first-party product docs are incomplete
4. Web fallback only when the above are unavailable

Never claim latest without evidence from a current source.

Per-Harness Review Contract

• Review each harness independently before writing any synthesis.
• Tag every finding as verified-file, verified-doc, repo-observed, or blind-spot.
• Surface the authoritative, secondary, generated, and merged config surfaces for the selected level.
• For both, report project/global conflicts before recommending changes.
• If a harness-specific native surface is not observable from the current session, mark it as a blind spot instead of inventing behavior.

Install Guidance Contract

• Load references/install-guidance.md only when the user asks how to install harness-master, or when missing skill availability is the actual root cause.
• Default surfaced form:

``bash npx skills add <source> --skill harness-master -y -g --agent claude-code --agent codex --agent crush --agent cursor --agent opencode ``

• Do not recommend install commands for native config problems.
• Do not suggest project-local install by default. Mention python scripts/install_skills.py --local --execute only if the user explicitly asks for project-local installation.

Validation Contract

After changing this skill, run:

python scripts/check.py
uv run python skills/skill-creator/scripts/audit.py skills/harness-master/
uv run python skills/skill-creator/scripts/package.py skills/harness-master/ --dry-run
uv run pytest tests/test_grok_workflow_projection.py tests/test_grok_doctor_json.py -q
uv run python scripts/usage_probe.py --repo-root . --harness opencode --level both --days 14 --json
uv run python scripts/discover_surfaces.py --repo-root . --level both --harness claude-code --harness claude-desktop --harness chatgpt --harness codex --harness cursor --harness cursor-cli --harness grok-build --harness opencode --harness perplexity-desktop --harness cherry-studio --harness lm-studio

Completion criteria:

• metadata and eval manifests validate
• packaging remains portable
• surface discovery smoke-check accepts every canonical harness
• dry-run/apply behavior still requires approval before edits
• Discover remains read-only and blocks apply until a matching audit is approved
• usage review remains read-only, redacts sensitive sources, and blocks apply until a matching audit is approved

Cross-Harness Synthesis Contract

After all per-harness reviews, synthesize:

• Shared issues across harnesses
• Conflicting conventions or precedence rules
• Duplicated instruction sources or MCP definitions
• Generated-vs-canonical drift patterns
• Highest-leverage cleanup order if the user wants a follow-up apply batch

Output Contract

Every per-harness report must include:

1. Harness
2. Level
3. Files Reviewed
4. Docs Checked
5. Project Context Summary
6. Blind Spots
7. Scorecard
8. Findings
9. Recommended Changes
10. Proposed Patch Preview
11. Confidence

Then add a cross-harness synthesis section when 2+ harnesses were reviewed.

Reference File Index

Read only the references needed for the active step. Do not preload all references.

Progressive Disclosure

Load reference files as indicated by the active mode. Do not load all references at once; use the dispatch table, source plan, and final output needs to choose the smallest relevant set.

Canonical Vocabulary

These terms are canonical for harness-master reports and should be used exactly.

Use these terms exactly throughout:

Critical Rules

1. Every new harness-master run starts in dry-run audit mode.
2. Never edit before explicit user approval.
3. Apply Approved is valid only after a matching dry-run review in the current session.
4. Ask only for missing inputs. Never re-ask resolved harnesses or levels.
5. Always inspect project context before recommending harness changes.
6. Always refresh latest official guidance before claiming a configuration is current or stale.
7. Mark blind spots explicitly. Do not guess hidden or UI-only settings.
8. Prefer edits to canonical sources over generated or merged outputs when this is clear from evidence.
9. Every finding must carry an evidence tag: verified-file, verified-doc, repo-observed, or blind-spot.
10. Show concrete patch previews whenever the correct edit is clear.
11. Use npx skills add ... only when installation is genuinely the right next step.
12. Unsupported harnesses must be refused cleanly with the supported set listed.
13. Ecosystem research is advisory and read-only. Never apply from a research report alone.
14. Credentialed APIs are optional enrichments. Missing credentials lower confidence but do not block baseline source planning.
15. GitHub GraphQL enriches known candidate repositories; use REST/search or code/file lookup for broad discovery.
16. Usage Review is advisory and read-only. Never apply config changes, install tools, export raw sessions, or print raw prompts/traces from usage findings alone.
17. Usage Review may use aggregate-safe and sanitized metadata sources, but secret files, credential values, raw transcripts, raw traces, and raw message-table bodies are out of scope.
18. A configured Grok plugin is the repo-skill owner only after normalized path,

valid manifest, and readable portable SKILL.md frontmatter with matching directory/name and non-empty description. Invalid ownership fails closed for dedicated activation without changing external-skill fallback behavior.

1. Saved-workflow projection, canary-gated legacy migration, and rollback must

all use the same exact receipt digest. Never overwrite a divergent workflow or keep a workflow backup under a discovery root. Validate the complete receipt path/rollback shape before deriving the mutation lock, and remove a projected workflow only with its exact active apply-owner marker. Publish and durably sync its transaction-specific rolled-back tombstone before discarding the receipt-owned workflow inode; never delete that tombstone.