@damiangilgonzalez/harness 1.3.10 → 1.3.11

package/manifest.json

@@ -1,5 +1,5 @@
 {
-  "version": "1.3.10",
+  "version": "1.3.11",
   "counts": {
     "skills": 291,
     "agents": 33,

package/package.json

@@ -1,6 +1,6 @@
 {
   "name": "@damiangilgonzalez/harness",
-  "version": "1.3.10",
+  "version": "1.3.11",
   "description": "A guided harness builder that turns your goal into a minimal, verified AI-agent setup using strict best practices.",
   "type": "module",
   "bin": {

package/targets/claude.js

@@ -4,6 +4,9 @@ import { fileURLToPath } from 'node:url';
 import { linkOrCopy } from './index.js';
 
 const HERE = dirname(fileURLToPath(import.meta.url));
+// Shell tools the PreToolUse guards listen on. On Windows the primary shell is the PowerShell tool,
+// so a `Bash`-only matcher let `git push --force` or a commit without gitmoji through unasked.
+const SHELL_TOOLS = 'Bash|PowerShell';
 
 export function writeSkill(id, fromDir, toPath) {
   // Migrate away from the legacy nested layout (.claude/skills/rsc/<id>) that
@@ -142,7 +145,7 @@ export function wireHook(paths, sourceMd, policy = {}) {
   settings.hooks.PreToolUse = settings.hooks.PreToolUse.filter(
     (e) => !hookWiringOf(e).includes('.rsc/ship-guard.'),
   );
-  settings.hooks.PreToolUse.push({ matcher: 'Bash', hooks: [{ type: 'command', command: sgCmd }] });
+  settings.hooks.PreToolUse.push({ matcher: SHELL_TOOLS, hooks: [{ type: 'command', command: sgCmd }] });
 
   // Danger guard: a PreToolUse(Bash) hook that DENIES irreversible foot-gun commands
   // (rm -rf, git push --force, DROP/TRUNCATE, DELETE/UPDATE without WHERE, dd to /dev,
@@ -155,7 +158,7 @@ export function wireHook(paths, sourceMd, policy = {}) {
   settings.hooks.PreToolUse = settings.hooks.PreToolUse.filter(
     (e) => !hookWiringOf(e).includes('.rsc/danger-guard.'),
   );
-  settings.hooks.PreToolUse.push({ matcher: 'Bash', hooks: [{ type: 'command', command: dgCmd }] });
+  settings.hooks.PreToolUse.push({ matcher: SHELL_TOOLS, hooks: [{ type: 'command', command: dgCmd }] });
 
   // Gitmoji guard: a PreToolUse(Bash) hook that DENIES a `git commit` whose message
   // carries no gitmoji (gitmoji.dev) in front of the Conventional Commits header. The
@@ -170,7 +173,7 @@ export function wireHook(paths, sourceMd, policy = {}) {
   settings.hooks.PreToolUse = settings.hooks.PreToolUse.filter(
     (e) => !hookWiringOf(e).includes('.rsc/gitmoji-guard.'),
   );
-  settings.hooks.PreToolUse.push({ matcher: 'Bash', hooks: [{ type: 'command', command: gmCmd }] });
+  settings.hooks.PreToolUse.push({ matcher: SHELL_TOOLS, hooks: [{ type: 'command', command: gmCmd }] });
 
   // New-feature gate: a UserPromptSubmit hook that re-injects the SDD new-feature gate as
   // the most-recent instruction on every user turn. SessionStart injects the full gate (the

package/targets/danger-guard.mjs

@@ -1,5 +1,5 @@
 #!/usr/bin/env node
-// rsc Danger guard (claude). Wired by targets/claude.js onto PreToolUse (matcher Bash)
+// rsc Danger guard (claude). Wired by targets/claude.js onto PreToolUse (matcher Bash|PowerShell)
 // as `node ...` so it runs on every platform including Windows.
 //   argv[2] = absolute project root   stdin = PreToolUse hook JSON
 //
@@ -46,7 +46,7 @@ if (technicalLevel() === 'technical') allow();
 // Only Bash commands can be dangerous here.
 let input = {};
 try { input = JSON.parse(readFileSync(0, 'utf8') || '{}'); } catch { allow(); }
-if ((input.tool_name || input.toolName) !== 'Bash') allow();
+if (!['Bash', 'PowerShell'].includes(input.tool_name || input.toolName)) allow();
 const cmd = input.tool_input?.command || input.toolInput?.command || '';
 if (typeof cmd !== 'string' || !cmd) allow();
 

package/targets/gitmoji-guard.mjs

@@ -1,5 +1,5 @@
 #!/usr/bin/env node
-// rsc Gitmoji guard (claude). Wired by targets/claude.js onto PreToolUse (matcher Bash)
+// rsc Gitmoji guard (claude). Wired by targets/claude.js onto PreToolUse (matcher Bash|PowerShell)
 // as `node ...` so it runs on every platform including Windows.
 //   argv[2] = absolute project root   stdin = PreToolUse hook JSON
 //
@@ -230,7 +230,7 @@ if (process.argv[1] && import.meta.url === pathToFileURL(process.argv[1]).href)
 
   let input = {};
   try { input = JSON.parse(readFileSync(0, 'utf8') || '{}'); } catch { allow(); }
-  if ((input.tool_name || input.toolName) !== 'Bash') allow();
+  if (!['Bash', 'PowerShell'].includes(input.tool_name || input.toolName)) allow();
   const command = input.tool_input?.command || input.toolInput?.command || '';
   if (typeof command !== 'string' || !command) allow();
 

package/targets/session-start.mjs

@@ -8,6 +8,7 @@
 import { readFileSync, existsSync, readdirSync, mkdirSync, writeFileSync } from 'node:fs';
 import { join, resolve } from 'node:path';
 import { homedir } from 'node:os';
+import { spawnSync } from 'node:child_process';
 import { claimOnce, readHookInput } from './hook-once.mjs';
 
 const STALE_AUDIT_DAYS = 14; // periodic skill-audit cadence (kept in sync with scripts/audit.js)
@@ -27,6 +28,19 @@ const emitBody = hook.session_id
 
 const has = (...p) => existsSync(join(root, ...p));
 
+// The npm lookup (up to 1.5 s) starts now and runs while the local checks below do their work;
+// the update block at the end only awaits it.
+const latestVersion = process.env.RSC_NO_UPDATE_CHECK ? Promise.resolve(null)
+  : process.env.RSC_LATEST ? Promise.resolve(process.env.RSC_LATEST)
+  : (async () => {
+    const ctrl = new AbortController();
+    const timer = setTimeout(() => ctrl.abort(), 1500);
+    try {
+      const res = await fetch('https://registry.npmjs.org/@damiangilgonzalez%2fharness/latest', { signal: ctrl.signal });
+      return (await res.json()).version;
+    } catch { return null; } finally { clearTimeout(timer); }
+  })();
+
 // Is a Context7 MCP server configured for this project (.mcp.json → mcpServers.context7)?
 function hasContext7() {
   try {
@@ -221,10 +235,24 @@ if (has('.git')) {
     // off, so a second check could never fail and would only look like protection (P2). Test 36 holds
     // the behaviour end to end, through this hook.
     const W = await import('./worktree-reaper.mjs');
-    {
+    // Classifying spawns several git processes per worktree (1.2 s with a dozen of them, on every
+    // session start). A verdict only moves when a worktree HEAD, the trunk or the opt-out moves, so
+    // those make the fingerprint and an unchanged one reuses the last notice. Safe because `reap`
+    // re-classifies before it removes anything.
+    const trunk = W.resolveTrunk(root);
+    const tip = trunk ? spawnSync('git', ['-C', root, 'rev-parse', trunk], { encoding: 'utf8' }).stdout : '';
+    const list = spawnSync('git', ['-C', root, 'worktree', 'list', '--porcelain'], { encoding: 'utf8' }).stdout;
+    const fingerprint = `${W.isCleanupEnabled(root)}\n${trunk}\n${tip}\n${list}`;
+    const cacheFile = join(root, '.rsc', 'worktree-sweep.json');
+    let cached = null;
+    try { cached = JSON.parse(readFileSync(cacheFile, 'utf8')); } catch { /* first run */ }
+    if (cached && cached.fingerprint === fingerprint && typeof cached.text === 'string') {
+      process.stdout.write(cached.text);
+    } else {
+      let text = '';
       const candidates = W.classifyWorktrees(root).filter((c) => c.verdict !== 'skip');
       if (candidates.length) {
-        process.stdout.write(`
+        text = `
 ===== rsc worktree cleanup =====
 ${candidates.length} worktree(s) hold work that is already in the trunk:
 ${candidates.map((c) => W.summarize(c, root)).join('\n')}
@@ -234,8 +262,13 @@ ACTION: offer to retire them in ONE line and wait for a yes. On a yes run:
 A yes in bulk covers only the safe ones; anything marked \`ask\` is confirmed on its own.
 A no holds for this session. Permanent off: .rsc/.no-worktree-cleanup
 ================================
-`);
+`;
       }
+      process.stdout.write(text);
+      try {
+        mkdirSync(join(root, '.rsc'), { recursive: true });
+        writeFileSync(cacheFile, JSON.stringify({ fingerprint, text }) + '\n');
+      } catch { /* unwritable → scan again next session */ }
     }
   } catch { /* reaper missing or git unhappy → say nothing; this is never worth breaking startup for */ }
 }
@@ -257,14 +290,7 @@ function isNewer(a, b) {
 if (!process.env.RSC_NO_UPDATE_CHECK) {
   try {
     const installed = readFileSync(join(root, '.rsc', '.version'), 'utf8').trim();
-    let latest = process.env.RSC_LATEST;
-    if (!latest) {
-      const ctrl = new AbortController();
-      const timer = setTimeout(() => ctrl.abort(), 1500);
-      const res = await fetch('https://registry.npmjs.org/@damiangilgonzalez%2fharness/latest', { signal: ctrl.signal });
-      clearTimeout(timer);
-      latest = (await res.json()).version;
-    }
+    const latest = await latestVersion;
     if (installed && latest && isNewer(latest, installed)) {
       process.stdout.write(`
 ===== rsc update available =====

package/targets/ship-guard.mjs

@@ -1,5 +1,5 @@
 #!/usr/bin/env node
-// rsc Ship guard (claude). Wired by targets/claude.js onto PreToolUse (matcher Bash)
+// rsc Ship guard (claude). Wired by targets/claude.js onto PreToolUse (matcher Bash|PowerShell)
 // as `node ...` so it runs on every platform including Windows.
 //   argv[2] = absolute project root   stdin = PreToolUse hook JSON
 //
@@ -39,7 +39,7 @@ if (!existsSync(join(root, '.git'))) allow();
 // Read the tool call. Only Bash commands can move branches.
 let input = {};
 try { input = JSON.parse(readFileSync(0, 'utf8') || '{}'); } catch { allow(); }
-if ((input.tool_name || input.toolName) !== 'Bash') allow();
+if (!['Bash', 'PowerShell'].includes(input.tool_name || input.toolName)) allow();
 const command = input.tool_input?.command || input.toolInput?.command || '';
 if (typeof command !== 'string' || !command) allow();
 

package/targets/userprompt-gate.mjs

@@ -13,6 +13,7 @@
 // Fail-open (never blocks a turn). Opt out per project with .rsc/.no-feature-gate.
 import { existsSync } from 'node:fs';
 import { join } from 'node:path';
+import { homedir } from 'node:os';
 import { claimOnce, readHookInput, WORKFLOW_GATE_TEXT } from './hook-once.mjs';
 
 const root = process.argv[2] || process.cwd();
@@ -28,4 +29,8 @@ const hook = readHookInput();
 const turnKey = hook.prompt_id || (hook.prompt ? `p${hook.prompt.length}:${hook.prompt.slice(0, 64)}` : null);
 if (hook.session_id && turnKey && !claimOnce(`up:${hook.session_id}:${turnKey}`)) process.exit(0);
 
-process.stdout.write(WORKFLOW_GATE_TEXT);
+// The gate routes screen work through `flujo-interfaz`, but that skill is optional. Naming a skill
+// that is not installed sends the agent looking for something that does not exist, so the line only
+// ships when the skill is present in this project or in the user scope.
+const hasFlujo = [root, homedir()].some((r) => existsSync(join(r, '.claude', 'skills', 'flujo-interfaz', 'SKILL.md')));
+process.stdout.write(hasFlujo ? WORKFLOW_GATE_TEXT : WORKFLOW_GATE_TEXT.split('\n').filter((l) => !l.includes('flujo-interfaz')).join('\n'));