open-harness/CHANGELOG.md

Changelog

All notable changes to this project are documented here.

Format follows Keep a Changelog; versions use CalVer (YYYY.M.D with -N suffix for same-day releases) and match git tags.

Update policy and release automation live in .claude/rules/git.md § Changelog.

[Unreleased]

Removed

• BREAKING: @openharness/sandbox CLI removed; docker compose is the canonical substrate. Deleted the packages/sandbox/ workspace package (CLI binary + harness/onboard/lib/tools source + tests), the entry from pnpm-workspace.yaml, the link:cli script from root package.json, the now-stale .github/workflows/ci.yml (sandbox-only CI), and the duplicate .github/workflows/build.yml (which had been pushing a drifted ghcr.io/ryaneggz/open-harness image alongside the canonical ghcr.io/ryaneggz/openharness produced by release.yml). The CLI build/symlink block in .devcontainer/entrypoint.sh that wired /usr/local/bin/openharness and /usr/local/bin/oh is gone. release.yml is now the sole image producer. Per SPEC v0.7 §"oh CLI". (#210)
• BREAKING: heartbeat daemon removed. Deleted packages/sandbox/src/lib/heartbeat/ (~1,752 LOC), packages/sandbox/src/cli/heartbeat-daemon.ts, packages/sandbox/src/cli/actions/heartbeat.ts, packages/sandbox/src/tools/heartbeat.ts, the oh heartbeat {start,stop,status} command group, the heartbeat-daemon package bin, the seven heartbeat-*.test.ts suites, and .claude/skills/heartbeat/. Heartbeat env vars (HEARTBEAT_ACTIVE_START/_END/_AGENT) stripped from .devcontainer/docker-compose.yml; the legacy daemon-startup blocks in install/entrypoint.sh and the /usr/local/bin/heartbeat-daemon symlink in .devcontainer/entrypoint.sh are gone; install/banner.sh no longer advertises heartbeat-daemon status. The croner runtime (scripts/cron-runtime.ts, US-002/US-003/US-004) is the canonical replacement per SPEC v0.7 §"Croner runtime". (#210)
• BREAKING: @mariozechner/pi-coding-agent is no longer a dependency. The pi agent CLI and Mom Slack bot have been extracted to a separate harness pack at ryaneggz/mifune (npm: @ryaneggz/mifune). Install with oh harness add @ryaneggz/mifune. (#208)

Added

• Seeded the two SPEC-reserved crons: crons/heartbeat.md (hourly pulse, 0 * * * *) and crons/cleanup-tasks.md (Sunday 23:00, 0 23 * * 0). Bodies follow SPEC v0.7 §"Croner runtime" + §"Weekly cleanup cron"; substrate stays empty otherwise so users add their own. (#210)
• .devcontainer/entrypoint.sh now starts scripts/cron-runtime.ts in a system-cron tmux session on container boot, replacing the legacy heartbeat-daemon watchdog block. Idempotent (tmux has-session guard); restart policy is per-container-start per SPEC v0.7 §"Croner runtime". (#210)
• scripts/cron-runtime.ts — minimal croner-backed runtime (≤120 LOC) that reads crons/*.md frontmatter, schedules per-cron tasks, runs the body as a prompt to claude -p (or $CRON_AGENT_BIN), logs to crons/cron-runtime.log, and uses a PID-lock at crons/.pid to prevent double-firing. Replaces the 1,900-LOC heartbeat daemon per SPEC v0.7. (#210)
• SPEC v0.7 amendments at .claude/specs/structure-spec-v0.7.md — additive-only revision resolving seven v0.6 conflicts (canonical image name, docs path, oh CLI deprecation, croner runtime contract, hook execution mechanism, memory directory format, tasks vs .ralph paths) and adding sections for harness packs, orchestrator-vs-workspace skill scope, and shrunk prose on Docusaurus config / eval flakiness / wiki-sync rubric / blog authorship / weekly cleanup. (#210)
• README "Docker only (no installer)" section — concise compose-based deploy path for hosts that have only Docker + git.
• Per-page OpenGraph + canonical link tags via theme.config.tsx head function (#140).
• Blog post draft: Worktree-per-agent — stages for Wed publish (#145).
• Blog section at /blog and About page nav entry (#143).
• Blog post: BYOH — stop installing agent CLIs on your laptop (#144).
• Root CHANGELOG.md and Keep-a-Changelog workflow documented in .claude/rules/git.md; /release now promotes [Unreleased] to the new version section at tag time.
• Generate sitemap.xml and robots.txt during docs build via next-sitemap (#141).
• Launch runbook consolidating manual cutover steps (DNS, GH settings, OG validation, GSC, promotion).
• Docusaurus v3 docs site at apps/docs deployed to oh.mifune.dev (#164).

Changed

• install.sh curl-pipe target renamed ~/.openharness → ~/openharness so the cloned project no longer collides with the in-repo .openharness/ config dir (~/.openharness/.openharness/ was visually and semantically confusing). One-time migration: existing ~/.openharness clones are mv'd to ~/openharness automatically when the new path is absent. In-container paths (/home/sandbox/.openharness) are unchanged. (#200)
• Reverted the sandbox/orchestrator vocabulary realignment (#170, #172). The in-container Linux user is sandbox again (UID/GID 1000 preserved); the ORCHESTRATOR_USER/ORCHESTRATOR_HOME constants are removed. The package name @openharness/sandbox, compose service, container default, SANDBOX_NAME env var, POSTGRES_USER, and sandbox_* Pi tool prefix were never changed. install/banner.sh carries an inverted migration guard for users coming back from a renamed image. (#198)
• Consolidate documentation: /docs/ is now the single source of truth, served by Docusaurus from apps/docs/ via path: '../../docs'. Enabled blog at /blog/. Removed the duplicate apps/docs/docs/ tree. (#178)
• Installer auto-detects Node 20+; new --cli / --docker-only / --install-node flags; --with-cli deprecated. (#176).
• README and installation docs now use the short https://oh.mifune.dev/install.sh URL (302 redirect to the raw GitHub install script on main) instead of the long raw.githubusercontent.com URL.
• /release now executes the [Unreleased] → [$VERSION] promotion (was prose-only) and release.yml sources the GitHub Release body from the promoted CHANGELOG section via body_path instead of generate_release_notes, so the GitHub Release notes match the changelog byte-for-byte.
• Revert prior secondary product name; "Open Harness" is the sole brand across README, docs, and onboarding (#157).
• Cloudflare onboarding step now requires an explicit public hostname (no default domain) (#157).
• Slim README to ~110 lines, lead with oh CLI flow (#139).
• Wiki promoted from workspace/wiki/ to docs/wiki/ — same structure (pages/, sources/, index.md, log.md), now top-level alongside human-curated docs.
• 26 docs pages converted from Nextra MDX to plain markdown rendered by GitHub.

Fixed

• install.sh now auto-disables the *-host.yml overlays in .openharness/config.json when host UID ≠ 1000 (was: a multi-line warning telling the user to do it by hand). Mode-0600 credential files in ~/.claude / ~/.codex / ~/.pi can't be read across UIDs, and mode-0700 dirs (e.g. ~/.pi/agent/sessions/) reject writes from non-owner UIDs — the sandbox user (UID 1000) would EACCES on oh / claude / codex / pi. The new logic uses jq to filter claude-host.yml, codex-host.yml, pi-host.yml out of composeOverrides so the base named volumes take over. The original warning is retained as a jq-missing fallback. (#202)
• Host auth (~/.claude, ~/.codex, ~/.pi) is shared into the sandbox again. install.sh now pre-creates the three auth dirs and ~/.claude.json (empty if missing) before sandbox bring-up so docker can't auto-create them root-owned, and claude-host.yml / codex-host.yml / pi-host.yml are restored to default composeOverrides. UID-mismatch hosts (UID ≠ 1000) get a loud install-time warning telling them to drop the overlays from .openharness/config.json (mode-0600 credential files can't be read across UIDs). Together this restores the convenience that was lost in #194 / #195 without re-introducing the EACCES failure mode that motivated those PRs. (#196)
• oh / claude / codex no longer fail with EACCES (or silent re-auth) on fresh install.sh installs. Removed docker-compose.claude-host.yml, docker-compose.codex-host.yml, and docker-compose.pi-host.yml from the default composeOverrides in .openharness/config.json. Each overlay's own header documents that it requires host UID 1000 + the source dir to pre-exist; shipping them as defaults broke any host where either condition wasn't met (docker auto-creates missing source dirs as root → sandbox user (UID 1000) can't write). The base compose's claude-auth / codex-auth / pi-auth named volumes now take effect by default; entrypoint.sh chowns them to UID 1000 on first boot. Single-laptop developers wanting cross-sandbox auth sharing can opt back in by appending the relevant overlay(s) to .openharness/config.json. (#194)
• oh sandbox no longer fails on fresh install.sh installs with a Caddyfile bind-mount error. Removed docker-compose.gateway.yml and docker-compose.cloudflared.yml from the default composeOverrides in .openharness/config.json; both are additive overlays now loaded only when needed (oh expose re-adds the gateway via SandboxConfig.addOverride()). (#192)
• install.sh next-steps now leads with a numbered "source your shell rc" step that detects $SHELL (bash → ~/.bashrc, zsh → ~/.zshrc, fish → ~/.config/fish/config.fish) so users don't have to exit + reopen their shell to pick up oh / node / pnpm. Curl-piped install runs in a child bash whose exports cannot reach the parent shell — the source step is now Step 1 of next-steps (was a buried "Reminder").
• install.sh bootstraps PNPM_HOME before pnpm link --global so the CLI install no longer dies with ERR_PNPM_NO_GLOBAL_BIN_DIR on fresh nvm-installed Node. Runs pnpm setup (writes PNPM_HOME export to ~/.bashrc + ~/.zshrc) and also exports PNPM_HOME/PATH inline so the link step succeeds in the current shell regardless of rc state.
• install.sh no longer silently exits when sourcing a pre-existing ~/.nvm/nvm.sh under set -euo pipefail. nvm + corepack calls are bracketed with relaxed strict mode and explicit $? checks, an ERR trap surfaces unexpected failures with the failing command and line, and pnpm is pinned to 10.33.0 (matches package.json#packageManager) instead of resolving pnpm@latest over the network on every install.
• Slack bot no longer drops oversized agent replies with cascading msg_too_long errors. Main message is capped at 2,900 chars with a _message truncated — full response in thread_ footer; full content spills to thread replies; setWorking(false) always clears the working indicator. (#135)

Removed

• Removed legacy /docs/{plans,wiki,launch-runbook,blog}/ and apps/docs/docs/ tree (consolidated into /docs/). (#178)
• Nextra docs site and the .github/workflows/docs.yml deployment — documentation is now plain markdown in docs/, read in the GitHub UI.
• Reference Next.js application at workspace/projects/next-app/, along with its CI jobs (workspace/projects/next-app paths in ci.yml / release.yml) and the release pre-flight gate referencing it.
• Root package.json scripts: dev, docs:dev, docs:build, docs:preview.

Deprecated

Security

---

Release history prior to this file: see git tags and GitHub Releases. Most recent pre-changelog tag: 2026.4.22.