publish-harness

Codex skill that runs the full smoke-test → witness-sign → npm publish pipeline for a generated harness.

What it does

1. Builds the harness with npm run build
2. Runs npm test to confirm green tests
3. Calls harness sign to produce a fresh witness manifest (requires WITNESS_SIGNING_KEY env)
4. Confirms harness verify accepts the freshly signed manifest
5. Either:
   • dry_run=true (default): runs npm publish --dry-run and reports tarball stats
   • dry_run=false: runs the real npm publish --provenance --access public

Usage from Codex