
Company News
Socket Joins New OpenJS Program to Fund Node.js Security Work
Socket is joining the OpenJS Security Stewardship Program to fund Node.js vulnerability research, maintainer remediation, and security releases.
@harness-forge/cli
Advanced tools
Harness Forge: modular agentic AI workspace installer, catalog, and workflow runtime.
Make AI coding agents actually useful in your repository.
One command to set up Codex, Claude Code, or both โ with the right context, skills, and workflows for your codebase.
๐ Get Started โข โจ What It Does โข โจ๏ธ Commands โข ๐ก Scenarios โข ๐ Updating โข ๐ฏ Targets โข โ FAQ
Harness Forge turns any repository into a well-equipped workspace for AI coding agents like Codex and Claude Code.
Think of it as a setup tool that:
| Without Harness Forge | With Harness Forge | |
|---|---|---|
| ๐ง Context | Agent guesses at project structure | Agent knows your languages, frameworks, boundaries |
| ๐ง Skills | Generic, one-size-fits-all | Tailored to your stack and workflow |
| ๐ Workflow | Ad hoc, inconsistent | Structured, repeatable, validated |
| ๐ Continuity | Starts from scratch each session | Persistent runtime state across sessions |
| ๐ฏ Targeting | Same behavior for all tools | Codex, Claude Code, Cursor tuned separately |
npx @harness-forge/cli
That's it. The CLI walks you through:
quick, recommended, or advanced)Tip: Already know what you want? Use the one-liner:
npx @harness-forge/cli init --root . --agent codex --setup-profile recommended --yes
hforge available everywherenpx @harness-forge/cli shell setup --yes
Now you can use hforge directly instead of npx @harness-forge/cli.
hforge doctor --root . --json
hforge recommend . --json # What setup makes sense for this repo?
hforge cartograph . --json # Map the repo structure
hforge scan . --json # Detect languages, frameworks, tools
Harness Forge scans your codebase and recommends the right targets, profiles, and skill packs โ with evidence for each recommendation.
After setup, your repo contains:
| What gets created | What it does |
|---|---|
AGENTS.md | Entry point that tells the AI agent how your workspace is organized |
.agents/skills/ | Skills the agent can discover and use (code review, testing, debugging, etc.) |
.hforge/ | Hidden runtime with knowledge packs, rules, templates, and workspace state |
.codex/ or .claude/ | Target-specific configuration for your chosen AI agent |
hforge status --root . --json # What is installed?
hforge refresh --root . --json # Regenerate runtime after changes
hforge review --root . --json # Health check and readiness review
hforge next --root . # What should I do next in this workspace?
| What you want to do | Command |
|---|---|
| Set up a new repo (guided) | npx @harness-forge/cli |
| Set up a new repo (one-liner) | hforge init --root . --agent codex --setup-profile recommended --yes |
| Auto-detect and bootstrap | hforge bootstrap --root . --yes |
| Preview without writing files | hforge init --root . --agent codex --dry-run |
Enable hforge on your PATH | hforge shell setup --yes |
| What you want to do | Command |
|---|---|
| What should I do next? | hforge next --root . |
| Check workspace health | hforge doctor --root . --json |
| Refresh the runtime | hforge refresh --root . --json |
| Review install state | hforge status --root . --json |
| Check flow status | hforge flow status --root . --json |
| Inspect target details | hforge target inspect codex --root . |
| Compare Codex vs Claude Code | hforge target compare codex claude-code |
| What you want to do | Command |
|---|---|
| Update Harness Forge in place | hforge update --root . --yes |
| Export runtime for handoff | hforge export --root . --json |
| Audit install integrity | hforge audit --root . --json |
| Check what drifted | hforge diff-install --root . --json |
| Validate locally before push | npm run validate:local |
| Validate for release | npm run validate:release |
| Dry-run a release | npm run release:dry-run |
cd my-project
npx @harness-forge/cli
# Follow the guided setup
# Your AI agent now has full context about this repo
hforge init --root . --agent codex --agent claude-code --setup-profile recommended --yes
Both agents share the same hidden runtime (.hforge/) but get their own configuration bridges. Run hforge target compare codex claude-code to see the differences.
hforge next --root .
# Harness Forge tells you the most useful action right now
# Usually: refresh the runtime, run a health check, or review stale artifacts
# Same command in every repo, same result
hforge init --root . --agent codex --setup-profile recommended --yes
hforge doctor --root . --json # Verify it's healthy
hforge export --root . --json # Share the runtime state
Use structured recursive analysis to break down complex investigations:
hforge recursive plan "investigate the billing retry flow" --task-id TASK-001 --json
hforge recursive capabilities --root . --json
For a full walkthrough, see ./docs/recursive-rlm-guide.md.
Or let your AI agent decide when to escalate:
/hforge-recursive-investigate investigate the billing retry flow across API and worker boundaries
hforge update --root . --yes
This downloads the latest published version and refreshes all managed surfaces while keeping your workspace state (task artifacts, decision records, recursive sessions, and observability data).
hforge update --root . --dry-run --yes
npm install -g @harness-forge/cli@latest
| Target | Support Level | Best for |
|---|---|---|
| Codex | Full | Default choice โ full install, maintenance, and runtime support |
| Claude Code | Full | When you need native hooks and plugin support |
| Cursor | Partial | Docs and manifests work; runtime features are limited |
| OpenCode | Partial | Docs and manifests work; runtime features are limited |
Both are first-class targets. The main difference is hook support:
| Codex | Claude Code | |
|---|---|---|
| Runtime | โ Full | โ Full |
| Maintenance | โ Full | โ Full |
| Hooks | ๐ Documentation-driven | โ Native |
| Plugins | ๐ Manual wiring | โ Native |
Shared .hforge/ | โ Yes | โ Yes |
Use both together when your team works with multiple tools. They share the same .hforge/ runtime.
hforge target compare codex claude-code # See all differences
hforge target compare codex claude-code --json # Machine-readable comparison
TypeScript, Python, Java, Go, Kotlin, Rust, C++, .NET, PHP, Perl, Swift, Shell, Lua, PowerShell
React, Next.js, Vite, Express, FastAPI, Django, ASP.NET Core, Spring Boot, Laravel, Symfony, Gin, Ktor
Language engineering, workflow orchestration, operational helpers, and specialized skills like incident triage, dependency upgrades, API contract review, database migration review, release readiness, and token-budget-optimizer for context-aware compaction.
Your Repo
|
|-- npx @harness-forge/cli
|
|-- Scans repo (languages, frameworks, targets)
|-- Recommends setup (targets, profile, packs)
|-- Installs runtime
| |
| |-- AGENTS.md (visible to AI agents)
| |-- .agents/skills/ (discoverable skills)
| |-- .codex/ or .claude/ (target config)
| |-- .hforge/ (hidden canonical runtime)
| |-- library/ (skills, rules, knowledge)
| |-- runtime/ (state, indexes, findings)
| |-- generated/ (command catalog, launchers)
| |-- templates/ (workflow templates)
|
|-- hforge next (what to do now?)
|-- hforge doctor (is everything healthy?)
|-- hforge refresh (regenerate after changes)
The key idea: visible bridges where AI agents need discovery, hidden canonical layer where runtime content should stay authoritative.
hforge next โ Your daily starting pointInstead of wondering which command to run, just ask:
hforge next --root .
It checks your workspace state and recommends the single most useful action โ with a reason and confidence level.
hforge next --root . --json # Machine-readable output
hforge next --root . --apply-safe-fixes # Auto-run if the action is safe
hforge next --root . --verbose # Show full reasoning
When a task is complex enough to need structured investigation:
hforge recursive plan "investigate billing retry behavior" --task-id TASK-001 --json
hforge recursive execute RS-123 --file bundle.json --json
hforge recursive score RS-123 --json
This creates a durable session with working memory, checkpoints, typed action bundles, and replay capability.
hforge recommend . --json # Evidence-backed setup recommendations
hforge cartograph . --json # Map repo structure and boundaries
hforge classify-boundaries . --json # Identify service boundaries
hforge synthesize-instructions . --target codex --json # Generate target-specific guidance
Do I need to install anything globally?
No. npx @harness-forge/cli works without any global install. Run hforge shell setup --yes if you want the shorter hforge command.
Does it modify my source code?
No. Harness Forge only creates its own managed files (AGENTS.md, .agents/, .hforge/, .codex/, .claude/). Your application code is never touched.
Can I use it in CI?
Yes. Use --yes and --json flags for non-interactive, machine-readable output:
hforge init --root . --agent codex --setup-profile recommended --yes
hforge doctor --root . --json
How do I remove it from a repo?
Delete the managed directories: .hforge/, .agents/, .codex/, .claude/, AGENTS.md.
Does it send telemetry?
No. All observability data stays local under .hforge/observability/. Nothing is sent anywhere.
What Node.js version do I need? Node.js 22 or newer.
See CONTRIBUTING.md for development setup and guidelines.
Harness Forge was inspired by github/spec-kit. Credit to the GitHub team for shaping cleaner workflow models.
GPL-3.0 โ see LICENSE.
Make your AI agents better at their job.
npx @harness-forge/cli
FAQs
Harness Forge: modular agentic AI workspace installer, catalog, and workflow runtime.
The npm package @harness-forge/cli receives a total of 36 weekly downloads. As such, @harness-forge/cli popularity was classified as not popular.
We found that @harness-forge/cli demonstrated a healthy version release cadence and project activity because the last version was released less than a year ago.ย It has 1 open source maintainer collaborating on the project.

Company News
Socket is joining the OpenJS Security Stewardship Program to fund Node.js vulnerability research, maintainer remediation, and security releases.

Security News
Two compromised GitHub Actions were re-enabled with malicious tags intact, exposing thousands of downstream repositories to Mini Shai-Hulud.

Research
/Security News
A malicious Firefox extension fetches its payload after installation to evade detection, steal Google session cookies, and automate account takeover.