@fusengine/harness 0.1.32 → 0.1.34

package/dist/adapters/claude/index.mjs

@@ -1,2 +1,2 @@
-import { a as readClaudeInput, i as guard, n as denyResponse, o as toClaudeResponse, r as fileSizeGuard, t as contextResponse } from "../../claude-BWZcrZbS.mjs";
+import { a as readClaudeInput, i as guard, n as denyResponse, o as toClaudeResponse, r as fileSizeGuard, t as contextResponse } from "../../claude-3PqBGt_7.mjs";
 export { contextResponse, denyResponse, fileSizeGuard, guard, readClaudeInput, toClaudeResponse };

package/dist/adapters/cline/index.mjs

@@ -1,4 +1,4 @@
-import { t as evaluate } from "../../evaluate-9ch1K2kt.mjs";
+import { t as evaluate } from "../../evaluate-zyxeVZPB.mjs";
 import { t as formatPrompt } from "../../types-ernB1Dy3.mjs";
 //#region src/adapters/cline/index.ts
 /**

package/dist/adapters/codex/index.mjs

@@ -1,2 +1,2 @@
-import { a as readClaudeInput, i as guard, n as denyResponse, t as contextResponse } from "../../claude-BWZcrZbS.mjs";
+import { a as readClaudeInput, i as guard, n as denyResponse, t as contextResponse } from "../../claude-3PqBGt_7.mjs";
 export { contextResponse, denyResponse, guard, readClaudeInput as readCodexInput };

package/dist/adapters/cursor/index.mjs

@@ -1,4 +1,4 @@
-import { t as evaluate } from "../../evaluate-9ch1K2kt.mjs";
+import { t as evaluate } from "../../evaluate-zyxeVZPB.mjs";
 import { t as formatPrompt } from "../../types-ernB1Dy3.mjs";
 //#region src/adapters/cursor/index.ts
 /**

package/dist/adapters/gemini/index.mjs

@@ -1,4 +1,4 @@
-import { t as evaluate } from "../../evaluate-9ch1K2kt.mjs";
+import { t as evaluate } from "../../evaluate-zyxeVZPB.mjs";
 import { t as formatPrompt } from "../../types-ernB1Dy3.mjs";
 //#region src/adapters/gemini/index.ts
 /**

package/dist/claude-3PqBGt_7.mjs

@@ -0,0 +1,137 @@
+import { t as evaluate } from "./evaluate-zyxeVZPB.mjs";
+import { t as formatPrompt } from "./types-ernB1Dy3.mjs";
+import { dirname, join } from "node:path";
+import { existsSync, mkdirSync, readFileSync, readdirSync, writeFileSync } from "node:fs";
+import { spawnSync } from "node:child_process";
+//#region src/util/runtime-io.ts
+/**
+* Cross-runtime I/O helpers (Node + Bun). The published CLI ships a `node`
+* shebang and is invoked via `npx`/`npm`/`bunx`/`bun`; using only `node:*` APIs
+* here keeps the bundle runnable under EVERY runtime — replacing the Bun-only
+* `Bun.file/write/spawn/sleep/stdin` calls and the `bun` `Glob` import that made
+* the package crash with `Cannot find package 'bun'` under plain Node.
+*/
+/** Read a file as UTF-8 text (throws on missing/unreadable — callers catch). */
+function readText(path) {
+	return readFileSync(path, "utf8");
+}
+/** True when `path` exists. */
+function pathExists(path) {
+	return existsSync(path);
+}
+/** Write `data` to `path`, creating parent dirs (mirrors `Bun.write`). */
+function writeText(path, data) {
+	mkdirSync(dirname(path), { recursive: true });
+	writeFileSync(path, data, { encoding: "utf8" });
+}
+/** Resolve after `ms` milliseconds (`Bun.sleep` replacement). */
+function sleep(ms) {
+	return new Promise((resolve) => setTimeout(resolve, ms));
+}
+/** Run `cmd args` in `cwd` and capture stdout text ("" on failure/non-zero). */
+function spawnCapture(cmd, args, cwd) {
+	try {
+		const r = spawnSync(cmd, args, {
+			cwd,
+			encoding: "utf8"
+		});
+		return r.status === 0 ? r.stdout ?? "" : "";
+	} catch {
+		return "";
+	}
+}
+/** Read the full process stdin as UTF-8 text (works under Node and Bun). */
+async function readStdin() {
+	const chunks = [];
+	for await (const chunk of process.stdin) chunks.push(chunk);
+	return Buffer.concat(chunks).toString("utf8");
+}
+/**
+* Recursively collect files under `dir` whose extension is in `exts`, skipping
+* `node_modules` and dot-dirs, capped at `cap`. `Bun.Glob().scan()` replacement.
+* @param dir - Directory to walk.
+* @param exts - Allowed extensions including the dot (e.g. `.ts`).
+* @param out - Accumulator (mutated in place).
+* @param cap - Max files to collect.
+*/
+function collectFiles(dir, exts, out, cap) {
+	if (out.length >= cap) return;
+	let entries;
+	try {
+		entries = readdirSync(dir, { withFileTypes: true });
+	} catch {
+		return;
+	}
+	for (const e of entries) {
+		if (out.length >= cap) return;
+		if (e.name === "node_modules" || e.name.startsWith(".")) continue;
+		const full = join(dir, e.name);
+		if (e.isDirectory()) collectFiles(full, exts, out, cap);
+		else if (exts.has(e.name.slice(e.name.lastIndexOf(".")))) out.push(full);
+	}
+}
+//#endregion
+//#region src/adapters/claude/index.ts
+/**
+* Claude Code adapter — the thin Claude-only shim over the portable policy core.
+* Reads the hook stdin payload and emits hookSpecificOutput responses.
+*/
+/** Read & parse the Claude hook payload from stdin (empty object on bad input). */
+async function readClaudeInput() {
+	const text = await readStdin();
+	if (!text.trim()) return {};
+	try {
+		const parsed = JSON.parse(text);
+		return typeof parsed === "object" && parsed !== null ? parsed : {};
+	} catch {
+		return {};
+	}
+}
+/** A `deny` hook response for a given event. */
+function denyResponse(event, reason) {
+	return JSON.stringify({ hookSpecificOutput: {
+		hookEventName: event,
+		permissionDecision: "deny",
+		permissionDecisionReason: reason
+	} });
+}
+/** An `additionalContext` injection response. */
+function contextResponse(event, text) {
+	return JSON.stringify({ hookSpecificOutput: {
+		hookEventName: event,
+		additionalContext: text
+	} });
+}
+/**
+* Render a portable {@link Prompt} as a Claude Code hook response:
+* `block` → `permissionDecision: deny`, `ask` → `permissionDecision: ask`
+* (interactive confirm), `inform` → `additionalContext`.
+*/
+function toClaudeResponse(event, prompt) {
+	const reason = formatPrompt(prompt);
+	if (prompt.kind === "block") return denyResponse(event, reason);
+	if (prompt.kind === "ask") return JSON.stringify({ hookSpecificOutput: {
+		hookEventName: event,
+		permissionDecision: "ask",
+		permissionDecisionReason: reason
+	} });
+	return contextResponse(event, reason);
+}
+/**
+* Run the bundled policy over a Claude payload and return the native response
+* string (deny/ask/additionalContext), or null to allow.
+*/
+function guard(input) {
+	const result = evaluate({
+		tool: input.tool_name ?? "Write",
+		filePath: input.tool_input?.file_path,
+		content: input.tool_input?.content ?? input.tool_input?.new_string,
+		command: input.tool_input?.command
+	});
+	if (result.decision === "allow" || !result.prompt) return null;
+	return toClaudeResponse(input.hook_event_name ?? "PreToolUse", result.prompt);
+}
+/** @deprecated use {@link guard}. Kept for back-compat. */
+const fileSizeGuard = guard;
+//#endregion
+export { readClaudeInput as a, pathExists as c, spawnCapture as d, writeText as f, guard as i, readText as l, denyResponse as n, toClaudeResponse as o, fileSizeGuard as r, collectFiles as s, contextResponse as t, sleep as u };

package/dist/cli/bin.mjs

@@ -1,9 +1,9 @@
 #!/usr/bin/env node
 import { r as resolveTtlSec } from "../ttl-BG55s6HZ.mjs";
 import { t as detectHarness } from "../harness-C8Nxxyn_.mjs";
-import { n as stagedContent, r as stagedFiles, t as checkStaged } from "../run-CQbtlAKa.mjs";
-import { n as writeInitFile, t as initFor } from "../run-D91N4ul1.mjs";
-import { t as handleHook } from "../handle-DJqHZcml.mjs";
+import { n as stagedContent, r as stagedFiles, t as checkStaged } from "../run-CUL70W0k.mjs";
+import { n as writeInitFile, t as initFor } from "../run-Do2JltgU.mjs";
+import { t as handleHook } from "../handle-DMHjTY1E.mjs";
 //#region src/cli/bin.ts
 /**
 * harness — CLI for @fusengine/harness.

package/dist/cli/index.mjs

@@ -1,2 +1,2 @@
-import { n as stagedContent, r as stagedFiles, t as checkStaged } from "../run-CQbtlAKa.mjs";
+import { n as stagedContent, r as stagedFiles, t as checkStaged } from "../run-CUL70W0k.mjs";
 export { checkStaged, stagedContent, stagedFiles };

package/dist/{evaluate-9ch1K2kt.mjs → evaluate-zyxeVZPB.mjs}

@@ -192,24 +192,58 @@ function securityGuard(ctx) {
 }
 //#endregion
 //#region src/policy/guards/protected-path.ts
-/** Path fragments that mark a location as internal/generated state (off-limits to Write/Edit). */
+/** Path fragments that mark a location as internal/generated state. */
 const PROTECTED_FRAGMENTS = [
 	".claude/plugins/marketplaces",
 	".claude/plugins/cache",
 	".claude/logs/00-apex",
 	".claude/fusengine-cache",
-	".git/"
+	".git/",
+	".claude/apex/",
+	"/fuse-harness/",
+	".harness/track",
+	".harness/memory/state"
 ];
-/** Blocks direct edits to internal/generated state directories. */
+/** Standard block response for any protected-path violation. */
+const BLOCK = {
+	kind: "block",
+	title: "Protected path",
+	reason: "This is internal/generated enforcement state — do not edit it directly.",
+	actions: ["Edit the source, not the generated/cache/state copy"]
+};
+/** Returns true if `str` contains any protected fragment. */
+function containsProtected(str) {
+	return PROTECTED_FRAGMENTS.some((f) => str.includes(f));
+}
+/**
+* Returns true if `cmd` contains a recognisable shell write operation.
+*
+* Best-effort: matches `>` / `>>` redirections, `tee`, `cp`, `mv`, `dd`, `sed -i`.
+* Obfuscated shell (base64-decoded payloads, variable indirection, process
+* substitution) can still evade this check — residual risk, documented. The
+* real guarantee against a forged track is the transcript-grounded freshness
+* gate (see `freshness/agent-evidence`), not this guard.
+*/
+function bashHasWriteOp(cmd) {
+	return />/.test(cmd) || /\btee\b/.test(cmd) || /\bcp\b/.test(cmd) || /\bmv\b/.test(cmd) || /\bdd\b/.test(cmd) || /\bsed\s+-[a-zA-Z]*i/.test(cmd);
+}
+/**
+* Blocks direct edits to internal/generated state directories.
+*
+* Covers:
+*  - Write / Edit tool calls whose `filePath` targets a protected fragment.
+*  - Bash commands that both reference a protected fragment *and* contain a
+*    recognisable shell write operation (best-effort; see `bashHasWriteOp`).
+*
+* @param ctx - The guard context (tool, filePath, command).
+* @returns A blocking {@link Prompt}, or null to allow.
+*/
 function protectedPathGuard(ctx) {
 	if ((ctx.tool === "Write" || ctx.tool === "Edit") && ctx.filePath) {
-		const path = ctx.filePath;
-		if (PROTECTED_FRAGMENTS.some((fragment) => path.includes(fragment))) return {
-			kind: "block",
-			title: "Protected path",
-			reason: "This is internal/generated state — do not edit it directly.",
-			actions: ["Edit the source, not the generated/cache copy"]
-		};
+		if (containsProtected(ctx.filePath)) return BLOCK;
+	}
+	if (ctx.tool === "Bash" && ctx.command) {
+		if (containsProtected(ctx.command) && bashHasWriteOp(ctx.command)) return BLOCK;
 	}
 	return null;
 }

package/dist/freshness/index.mjs

@@ -1,3 +1,3 @@
 import { i as resolveSessions, n as formatDocSatisfactionStatus, r as isDocConsulted, t as formatDocDeny } from "../doc-helpers-Dd_x1-tZ.mjs";
-import { t as incrementTrivialEditCounter } from "../freshness-otdUpuvP.mjs";
+import { t as incrementTrivialEditCounter } from "../freshness-43gxYpiX.mjs";
 export { formatDocDeny, formatDocSatisfactionStatus, incrementTrivialEditCounter, isDocConsulted, resolveSessions };

package/dist/{freshness-otdUpuvP.mjs → freshness-43gxYpiX.mjs}

@@ -1,4 +1,4 @@
-import { i as writeJsonFile, n as ensureDir, r as readJsonFile } from "./json-io-CAn72gI4.mjs";
+import { a as writeJsonFile, i as readJsonFile, n as ensureDir } from "./json-io-CvSumjtz.mjs";
 import { dirname } from "node:path";
 //#region src/freshness/trivial-edit-counter.ts
 /**