
Security News
White House Authorizes Private Companies to Conduct Offensive Cyber Operations
A new federal program will let vetted U.S. cybersecurity firms help investigate and disrupt foreign cybercrime groups under government direction.
@walwal-harness/cli
Advanced tools
Company-style AI agent harness for Claude and Codex. Installs commands, CXX agents, skills, HR-Resource hiring pool, and project-local .harness runtime state.
v7.1 — Company-mode AI agent harness for Claude Code and Codex.
One project = one company. The Owner speaks only to the CEO. The CEO speaks only to CXX agents. CXX agents hire specialist workers. No one skips a level.
Owner
└─ /goal · /submission · /hot-fix
└─ harness-ceo orchestrator — Owner's only contact
├─ harness-coo research, hypothesis, service direction
├─ harness-cdo branding, UI/UX, design review
├─ harness-cto architecture, API, platform, implementation
├─ harness-cqo quality gates, regression, archive, gotcha/convention
└─ harness-ops build monitoring, log analysis, service events
cto.md must exist before any worker is dispatched.npm i @walwal-harness/cli
Restart Claude Code after install.
To initialize a project:
npx walwal-harness init
What init installs:
| Path | Contents |
|---|---|
.claude/commands/goal.md | /goal Owner command |
.claude/commands/submission.md | /submission Owner command |
.claude/commands/hot-fix.md | /hot-fix Owner command |
.claude/skills/harness-{ceo,coo,cdo,cto,cqo,ops}/ | CXX agent skills |
.harness/shared/HR-Resource/ | Hireable worker skill pool |
.harness/events.jsonl | Structured append-only runtime event stream |
.harness/todos/state.json | Machine-readable CXX todo queues |
.harness/todos/events.jsonl | Structured todo transition history |
AGENTS.md + CLAUDE.md symlink | Project AI operating rules |
AGENTS.md is the source of truth for project AI operating rules. CLAUDE.md is normalized to a symlink that points at AGENTS.md.
Install and migrate preserve existing project instructions:
AGENTS.md is not replaced. The harness adds or updates a marked section between <!-- walwal-harness:agents:start --> and <!-- walwal-harness:agents:end -->.AGENTS.md gets a small walwal-harness enabled marker so agents know the harness section applies.CLAUDE.md file content is appended into AGENTS.md under a preserved-claude marked section, then CLAUDE.md is replaced with a symlink to AGENTS.md.init, init --force, or migrate is idempotent: marked sections are replaced, not duplicated..harness/archive/pre-harness-backup/ or the migration backup directory before modification.Owner /goal → CEO → [COO] → [CDO] → CTO → [dev workers] → CQO → [evaluator workers]
ceo.md, routes to relevant CXX.{cxx}.md, hires workers, collects evidence.mission-state.json with lifecycle and active.Owner /hot-fix → CEO → CTO → [dev workers] → CQO → [evaluator workers]
cto.md.cqo.md.Complete when: cto.md + cqo.md + at least one .harness/gotchas/ or .harness/conventions/ entry exist.
Owner /submission → CEO → [relevant CXX] → [workers] → [convention updates]
.harness/documents/goal-{index}-{name}/..harness/documents/goal-{index}-{name}/submission-{index}-{name}/..harness/conventions/ when the new requirement changes durable project rules.| # | Rule |
|---|---|
| 1 | No source edit without {mission}/cto.md — CTO scope sign-off required |
| 2 | No CXX impersonation — use installed harness skills in fresh sessions |
| 3 | No unnamed workers — all work routes through harness-hiring → harness-resource-manager |
| 4 | No archive without CQO verdict — {mission}/cqo.md with explicit PASS must exist |
| 5 | No gotcha skip — every hot-fix produces at least one gotcha or convention entry |
| 6 | CEO routes only to CXX — never directly to workers |
| 7 | No CXX self-execution — deliverables without matching worker records are rejected |
| 8 | No verdict without worker evidence — CQO self-inspection is not valid |
| 9 | Hierarchical worker ownership — worker reports live under .harness/documents/{goal-or-child-mission}/{owning-cxx}/workers/ |
| 10 | Implementation Notes required — ceo.md, every {cxx}.md, and every worker report must end with one English ## Implementation Notes section in the same file |
| 11 | Structured runtime state — queues, heartbeats, preemption/resume state, and harness-parsed evidence belong in JSON/JSONL, not free-form Markdown |
Every ceo.md, {cxx}.md, and worker report must end with:
## Implementation Notes
### Design Decisions
- How the role interpreted the Owner request
### Deviations
- Where the role intentionally diverged from the request
### Tradeoffs
- Alternatives considered and why they were rejected
### Open Questions
- What still needs Owner or CXX confirmation
Use None when a subsection has no entries. This section is mandatory even for small or emergency work. Do not create a separate sidecar notes file; the notes belong at the bottom of the same role or worker report that produced the decision/evidence. CEO must reject any CXX report that omits it. CTO and CQO must not accept worker output that omits it.
The harness ships with a real-time dashboard that reads .harness/ runtime state directly. The current dashboard is process-oriented: it highlights CXX todo readiness, active workers, incidents, mission flow, and structured runtime events alongside the organization view.
bash scripts/harness-dashboard-up.sh
Run on a different port:
bash scripts/harness-dashboard-up.sh --port 3002
Force-rebuild the shared dashboard install when an older dashboard is still shown:
bash scripts/harness-dashboard-up.sh --port 3002 --reinstall
Dashboard options:
| Option | Role |
|---|---|
--port <port> | Run Brick Office on a custom port, e.g. 3002 |
--reinstall | Discard and rebuild the shared dashboard install for this version |
The dashboard code is identical across all projects, so it is installed once per version under ~/.walwal-harness/dashboard/<version>/ and shared by every project — a single node_modules plus one production build (npm install + next build) the first time, then reused. Each project is served with its own HARNESS_ROOT and port via next start, so you can run many dashboards at once without duplicating dependencies (100 projects still cost ~640MB, not 100×). Override the base directory with WALWAL_HARNESS_HOME.
/goal, /submission, and /hot-fix mark the v7 company loop as running in .harness/progress.json:
company_state.state = "running"conductor.state = "running"current_agent = "ceo"next_agent = "ceo"Claude's Stop hook uses this state to prevent an unfinished CEO/CXX/worker loop from ending after a partial routing step such as hiring. Hookless executors such as Codex should drive the same state through an external runner or dashboard auto-mode process.
When the mission is genuinely complete, the common completion transition is:
bash scripts/harness-company-complete.sh . mission-complete
This sets company_state.state = "idle", conductor.state = "completed", next_agent = "none", and owner_prompt.status = "completed" so dashboards, runners, and hooks agree that auto-mode can stop.
It also closes structured work state:
.harness/todos/state.json become donemission-state.json files become {"lifecycle":"complete","active":false}.harness/activity/YYYY-MM-DD.jsonl and pruned after 7 daysExisting users should update and migrate from the target project:
npm i @walwal-harness/cli@latest
npx walwal-harness migrate
If command discovery or installed harness files look stale, refresh the install contract:
npx walwal-harness init --force
For an explicit project root:
npx walwal-harness migrate --project-root /path/to/project
npx walwal-harness init --force --project-root /path/to/project
Features:
mission-state.json; init, init --force, and migrate backfill missing lifecycle files for existing projects/goal, /submission, and /hot-fix append to .harness/events.jsonl and update .harness/todos/state.json; migrate backfills these files for existing projectshr-roster.json entries backed by .harness/shared/HR-Resource/{worker}/SKILL.md; running hired workers are highlighted under their owning CXXharness-cdo opens a dashboard iframe preview from .harness/documents/{mission}/cdo/preview.html; CDO completion requires this visual summary artifact.harness/gotchas/*.md knowledge base, click to read full markdownHourly autonomous wake:
--enable-wake or WALWAL_ENABLE_WAKE=1 when you want installation/migration to register it; otherwise run bash scripts/harness-wake-install.sh install . from the target project.HARNESS_WAKE_EXECUTOR=claude|codex selects claude -p or codex exec.HARNESS_WAKE_MODEL=<model> optionally pins the Claude model for wake ticks.npx @walwal-harness/cli migrate refreshes package-owned runtime scripts, so existing projects receive wake prompt updates without a full re-init..codex/skills/**/SKILL.md files are the runtime protocol. .codex/agents/ is not required; Codex should manually read the relevant skill if it is not auto-listed.migrate preserves files such as .harness/gotchas/i18n-locale-hotfix.md and links them from relevant CXX files like cto.md and cqo.md.support-support-mcp-registry-steward to inventory Claude/Codex MCP capabilities, registration risk, credentials, and maintenance notes before recommending MCP use.| Path | Role |
|---|---|
.harness/documents/goal-{index}-{name}/ | Goal-level CXX decisions and worker reports |
.harness/documents/goal-{index}-{name}/submission-{index}-{name}/ | Additional requirement under the active goal |
.harness/documents/goal-{index}-{name}/hotfix-{index}-{name}/ | Emergency fix under the active goal |
.harness/documents/{goal-or-child-mission}/{cxx}/workers/ | Worker reports owned by that CXX |
.harness/conventions/ | Durable rules and CXX lazy-loading indexes |
.harness/gotchas/ | Recurrence-prevention records and CXX lazy-loading indexes |
.harness/shared/HR-Resource/ | Hireable worker skill pool |
.harness/archive/ | CQO-approved completed missions (immutable) |
.harness/logs/YYYY-MM-DD/ | OPS exception logs |
Any CXX uses harness-hiring before assigning work to a specialist not yet on roster.
harness-resource-manager → find available worker
harness-hiring → register and onboard worker
{cxx} → hired worker → deliverable → {cxx} evidence manifest
| Version | Summary |
|---|---|
| 7.1.38 | CEO can approve reversible routine operations without Owner confirmation, including monitoring cadence, local scheduler activation, Telegram briefing formats with existing credentials, dashboard refresh, and consolidation/supersede cleanup |
| 7.1.37 | Project-local dashboard runtime under .harness/dashboard/, unfiltered all-mission heatmap, worker telemetry parsing, and opt-in hourly wake registration/status |
| 7.1.36 | Stop hook only validates worker evidence while chaining the active loop, scopes validation to the newest active mission, and makes the 24h heatmap visible at 10-minute resolution |
| 7.1.35 | Fix dashboard heatmap mission scoping, choose the newest active mission for activity recording, and normalize duplicate active child mission states during init/migrate |
| 7.1.34 | Fix dashboard 500 when company_state.workers is recorded as a keyed worker map instead of an array |
| 7.1.33 | Dashboard keeps recently written worker reports active even when docmeta is present, and CXX skills now record worker activity telemetry for live dashboard state |
| 7.1.31 | Persist dashboard heatmap activity to 7-day JSONL logs, load persisted samples in the dashboard, and backfill activity during migrate from existing mission docs/progress logs |
| 7.1.29 | Idempotent AGENTS/CLAUDE doc merge with marked harness sections, mission lifecycle backfill for init/migrate, completion closes todos and mission-state, and Layer Activity now lists CXX/worker rows sorted by remaining work |
| 7.1.28 | Dashboard APM rewrite: top header consolidation, Knowledge Base panel (gotchas/conventions), Layer Activity (CEO/CXX/Worker TODO·DONE·Remain via goal-scope inference), Recent Report list (worker mtime desc), Cadence strip with click-to-prompt tooltip in local timezone, heatmap click-tooltip with empty-cell guard, Document Viewer expand-to-50vw with docmeta hidden, Command Log bubble popover |
| 7.1.19 | migrate now carries OPS verification rules into existing installs: runtime.verification merge, HARNESS refresh, and AGENTS migration block |
| 7.1.18 | OPS watches CQO runnable verification and production incidents; Implementation Notes stay in the same role/worker report |
| 7.1.17 | Dashboard: fix /submission and /hot-fix missions displaying as /goal; runtime strip shows live owner command in mission flow tab |
| 7.1.16 | migrate now always fully replaces /goal, /submission, /hot-fix commands regardless of current state |
| 7.1.15 | Dashboard: reset embedded View Doc state when the selected mission or document target changes |
| 7.1.14 | Owner acceptance gate: Owner is final reviewer, not tester; dashboard org-node clicks initialize the detail pane |
| 7.1.13 | Dashboard: full-viewport split workspace, hidden pane scrollbars, and detail scroll reset on selection |
| 7.1.12 | Dashboard: split workspace panes now scroll independently |
| 7.1.11 | Dashboard: persistent 50/50 split workspace and CXX-owned worker grouping in the org tree |
| 7.1.10 | Adds /submission and nested goal/submission/hot-fix mission history |
| 7.1.9 | Dashboard is packaged with npm and auto-syncs isolated cache by package version; README documents dashboard port/reinstall and update/migrate commands |
| 7.1.8 | HR-Resource: replace China-platform-specific workers with global equivalents; refine cross-border/video/livestream skills |
| 7.1.7 | Implementation Notes mandatory in all CXX docs and worker reports; harness-worker-evidence-validate.sh |
| 7.1.6 | CXX hierarchy enforcement: CEO→CXX-only gate, CTO prerequisite gate, CQO worker-evidence mandate; dashboard gotchas tab, mission-specific history tab, worker file list in flow |
| 7.1.5 | Dashboard: mission flow timeline, markdown viewer, 50vw drawer |
| 7.1.4 | Dashboard: org-tree redesign with real .harness/documents/ data |
| 7.1.3 | Karpathy-style AGENTS.md rewrite, ko templates, hot-fix harness gate rules |
| 7.1.2 | v7 CEO routing migration, legacy command removal |
| 7.1.1 | CEO no-git hiring fix, gotcha/convention migration |
| 7.1.0 | v7.1 merge: OPS monitoring, CXX hiring enforcement |
MIT
FAQs
Company-style AI agent harness for Claude and Codex. Installs commands, CXX agents, skills, HR-Resource hiring pool, and project-local .harness runtime state.
The npm package @walwal-harness/cli receives a total of 194 weekly downloads. As such, @walwal-harness/cli popularity was classified as not popular.
We found that @walwal-harness/cli demonstrated a healthy version release cadence and project activity because the last version was released less than a year ago. It has 1 open source maintainer collaborating on the project.
Did you know?

Socket for GitHub automatically highlights issues in each pull request and monitors the health of all your open source dependencies. Discover the contents of your packages and block harmful activity before you install or update your dependencies.

Security News
A new federal program will let vetted U.S. cybersecurity firms help investigate and disrupt foreign cybercrime groups under government direction.

Research
/Security News
The campaign amassed more than 75,000 installs by targeting Russian-speaking users seeking access to blocked services.

Company News
Open source maintainers are under more pressure than ever. We're raising our open source program from the Team plan to the Business plan, free.