@fusengine/harness 0.1.34 → 0.1.35

package/dist/cli/bin.mjs

@@ -3,13 +3,85 @@ import { r as resolveTtlSec } from "../ttl-BG55s6HZ.mjs";
 import { t as detectHarness } from "../harness-C8Nxxyn_.mjs";
 import { n as stagedContent, r as stagedFiles, t as checkStaged } from "../run-CUL70W0k.mjs";
 import { n as writeInitFile, t as initFor } from "../run-Do2JltgU.mjs";
-import { t as handleHook } from "../handle-DMHjTY1E.mjs";
+import { Et as claudeHome, Tt as todayUtc, t as handleHook } from "../handle-CYlA6TeF.mjs";
+import { join } from "node:path";
+import { existsSync, mkdirSync, readFileSync, writeFileSync } from "node:fs";
+import { homedir } from "node:os";
+//#region src/changelog/fetch.ts
+/**
+* Changelog scanner — ports the changelog-watcher plugin's `fetch-changelog`
+* into the harness (exposed as the `harness changelog` CLI verb). Fetches the
+* official Claude Code changelog, detects how many versions are new since the
+* last check, persists per-day state, and returns a JSON summary. Dual-runtime:
+* global `fetch` + `node:fs` (works under Node 20+ and Bun, no imports needed).
+*/
+const CHANGELOG_URL = "https://code.claude.com/docs/en/changelog.md";
+/**
+* Parse up to 10 semver versions from the changelog, newest first. Matches the
+* current docs format (`<Update label="X.Y.Z" …>` MDX blocks) AND the legacy
+* markdown headers (`## vX.Y.Z` / `## X.Y.Z`) so it survives a format rollback.
+*/
+function parseVersions(md) {
+	return [...md.matchAll(/<Update\s+label="v?(\d+\.\d+\.\d+)"|^##\s+v?(\d+\.\d+\.\d+)/gm)].map((m) => m[1] ?? m[2] ?? "").filter(Boolean).slice(0, 10);
+}
+/** Count versions newer than `lastKnown` (stops at the first match). */
+function countNew(versions, lastKnown) {
+	if (!lastKnown) return 0;
+	let n = 0;
+	for (const v of versions) {
+		if (v === lastKnown) break;
+		n++;
+	}
+	return n;
+}
+/** Read the saved `last_version` for today's state file ("" when absent/corrupt). */
+function lastKnownVersion(stateFile) {
+	if (!existsSync(stateFile)) return "";
+	try {
+		return JSON.parse(readFileSync(stateFile, "utf8")).last_version ?? "";
+	} catch {
+		return "";
+	}
+}
+/**
+* Fetch + parse the changelog, diff against the saved state, persist, and return
+* the scan summary. Throws on network failure (the CLI maps it to exit 1).
+* @param now - Clock (ms).
+* @param home - Home dir.
+*/
+async function scanChangelog(now = Date.now(), home = homedir()) {
+	const res = await fetch(CHANGELOG_URL, { signal: AbortSignal.timeout(1e4) });
+	if (!res.ok) throw new Error(`changelog fetch failed: ${res.status}`);
+	const versions = parseVersions(await res.text());
+	const latest = versions[0] ?? "";
+	const dir = join(claudeHome(home), "logs", "00-changelog");
+	const today = todayUtc(now);
+	const stateFile = join(dir, `${today}-state.json`);
+	const lastKnown = lastKnownVersion(stateFile);
+	const newCount = countNew(versions, lastKnown);
+	try {
+		mkdirSync(dir, { recursive: true });
+		writeFileSync(stateFile, JSON.stringify({
+			last_version: latest,
+			previous: lastKnown,
+			new_versions: newCount,
+			checked: today
+		}, null, 2));
+	} catch {}
+	return {
+		latest,
+		new_since_last_check: newCount,
+		recent_versions: versions
+	};
+}
+//#endregion
 //#region src/cli/bin.ts
 /**
 * harness — CLI for @fusengine/harness.
 *   harness check          cli-mode: check staged files (pre-commit), exit non-zero on a violation
 *   harness init [id]      write the wiring file for a harness (defaults to the detected one)
 *   harness hook <id>      runtime: read a hook payload on stdin, route to the adapter, print the response
+*   harness changelog      fetch + diff the Claude Code changelog, print a JSON summary (changelog-watcher)
 */
 async function readStdin() {
 	const chunks = [];
@@ -56,7 +128,17 @@ if (cmd === "hook") {
 	const written = files.map((f) => writeInitFile(process.cwd(), f));
 	process.stdout.write(`harness: wired ${id} -> ${written.join(", ")}\n`);
 	process.exit(0);
-} else {
+} else if (cmd === "changelog") try {
+	process.stdout.write(JSON.stringify(await scanChangelog()) + "\n");
+	process.exit(0);
+} catch (e) {
+	process.stdout.write(JSON.stringify({
+		status: "error",
+		message: e instanceof Error ? e.message : "changelog fetch failed"
+	}) + "\n");
+	process.exit(1);
+}
+else {
 	const files = stagedFiles();
 	if (files.length === 0) process.exit(0);
 	const violations = checkStaged(files, stagedContent);

package/dist/{handle-DMHjTY1E.mjs → handle-CYlA6TeF.mjs}

@@ -16,6 +16,88 @@ import { homedir } from "node:os";
 import { createHash } from "node:crypto";
 import { mkdir, rmdir } from "node:fs/promises";
 import { execFileSync } from "node:child_process";
+//#region src/runtime/home-state.ts
+/** Home `~/.claude` dir (single source for every home-based hook path). */
+function claudeHome(home = homedir()) {
+	return join(home, ".claude");
+}
+/** `~/.claude/fusengine-cache` base dir for legacy session/cache state. */
+function fusengineCache(home = homedir()) {
+	return join(claudeHome(home), "fusengine-cache");
+}
+/** `~/.claude/fusengine-cache/sessions` — per-session JSON state dir. */
+function sessionsDir(home = homedir()) {
+	return join(fusengineCache(home), "sessions");
+}
+const SID_RE = /^[a-zA-Z0-9_-]{1,128}$/;
+/** Validate a session id (1-128 url-safe chars); null when invalid. */
+function sanitizeSessionId(sid) {
+	const s = String(sid ?? "").trim();
+	return SID_RE.test(s) ? s : null;
+}
+/** Unified per-session state file path: `sessions/session-<sid>.json`. */
+function sessionStatePath(sid, home = homedir()) {
+	return join(sessionsDir(home), `session-${sid}.json`);
+}
+/** Load a session-state dict, or `{}` when missing/corrupt (mirrors Python). */
+function loadSessionState(sid, home = homedir()) {
+	const path = sessionStatePath(sid, home);
+	try {
+		if (!existsSync(path)) return {};
+		const data = JSON.parse(readFileSync(path, "utf-8"));
+		return typeof data === "object" && data !== null && !Array.isArray(data) ? data : {};
+	} catch {
+		return {};
+	}
+}
+/** Atomically persist a session-state dict (0o600 via atomicWrite, indent 2). */
+function saveSessionState(sid, state, home = homedir()) {
+	mkdirSync(sessionsDir(home), {
+		recursive: true,
+		mode: 448
+	});
+	atomicWrite(sessionStatePath(sid, home), JSON.stringify(state, null, 2));
+}
+//#endregion
+//#region src/runtime/lifecycle/security/skill-state.ts
+/**
+* Shared security-tracker state: per-UTC-day JSON under
+* `~/.claude/logs/00-security`. Ports the state helpers of
+* `check-security-skill.py` / `track-skill-read.py` / `track-mcp-research.py`.
+*/
+/** `~/.claude/logs/00-security` state directory. */
+function securityStateDir(home = homedir()) {
+	return join(claudeHome(home), "logs", "00-security");
+}
+/** Current UTC date as `YYYY-MM-DD`. */
+function todayUtc(now = Date.now()) {
+	return new Date(now).toISOString().slice(0, 10);
+}
+/** Current UTC instant as `YYYY-MM-DDTHH:MM:SSZ` (seconds, no millis). */
+function isoUtc(now = Date.now()) {
+	return new Date(now).toISOString().replace(/\.\d{3}Z$/, "Z");
+}
+/** Today's security-state file path. */
+function securityStatePath(now = Date.now(), home = homedir()) {
+	return join(securityStateDir(home), `${todayUtc(now)}-state.json`);
+}
+/** Load today's security state, or `{}` when missing/corrupt. */
+function loadSecurityState(now = Date.now(), home = homedir()) {
+	const path = securityStatePath(now, home);
+	try {
+		if (!existsSync(path)) return {};
+		const data = JSON.parse(readFileSync(path, "utf-8"));
+		return typeof data === "object" && data !== null && !Array.isArray(data) ? data : {};
+	} catch {
+		return {};
+	}
+}
+/** Persist today's security state (indent 2, no trailing newline). */
+function saveSecurityState(state, now = Date.now(), home = homedir()) {
+	mkdirSync(securityStateDir(home), { recursive: true });
+	writeFileSync(securityStatePath(now, home), JSON.stringify(state, null, 2), "utf-8");
+}
+//#endregion
 //#region src/runtime/activity.ts
 /** Min response length (chars) for a lead agent call to count as `sufficient`. */
 const AGENT_QUALITY_MIN = 500;
@@ -671,49 +753,6 @@ function taskContext(cwd) {
 	return ctx ? contextResponse("PreToolUse", ctx) : "";
 }
 //#endregion
-//#region src/runtime/home-state.ts
-/** Home `~/.claude` dir (single source for every home-based hook path). */
-function claudeHome(home = homedir()) {
-	return join(home, ".claude");
-}
-/** `~/.claude/fusengine-cache` base dir for legacy session/cache state. */
-function fusengineCache(home = homedir()) {
-	return join(claudeHome(home), "fusengine-cache");
-}
-/** `~/.claude/fusengine-cache/sessions` — per-session JSON state dir. */
-function sessionsDir(home = homedir()) {
-	return join(fusengineCache(home), "sessions");
-}
-const SID_RE = /^[a-zA-Z0-9_-]{1,128}$/;
-/** Validate a session id (1-128 url-safe chars); null when invalid. */
-function sanitizeSessionId(sid) {
-	const s = String(sid ?? "").trim();
-	return SID_RE.test(s) ? s : null;
-}
-/** Unified per-session state file path: `sessions/session-<sid>.json`. */
-function sessionStatePath(sid, home = homedir()) {
-	return join(sessionsDir(home), `session-${sid}.json`);
-}
-/** Load a session-state dict, or `{}` when missing/corrupt (mirrors Python). */
-function loadSessionState(sid, home = homedir()) {
-	const path = sessionStatePath(sid, home);
-	try {
-		if (!existsSync(path)) return {};
-		const data = JSON.parse(readFileSync(path, "utf-8"));
-		return typeof data === "object" && data !== null && !Array.isArray(data) ? data : {};
-	} catch {
-		return {};
-	}
-}
-/** Atomically persist a session-state dict (0o600 via atomicWrite, indent 2). */
-function saveSessionState(sid, state, home = homedir()) {
-	mkdirSync(sessionsDir(home), {
-		recursive: true,
-		mode: 448
-	});
-	atomicWrite(sessionStatePath(sid, home), JSON.stringify(state, null, 2));
-}
-//#endregion
 //#region src/runtime/dev-context.ts
 /** Run a git subcommand in `cwd`, returning trimmed stdout or "" on error. */
 function git(cwd, args) {
@@ -3017,45 +3056,6 @@ function trackEnrichment(filePath) {
 	} catch {}
 }
 //#endregion
-//#region src/runtime/lifecycle/security/skill-state.ts
-/**
-* Shared security-tracker state: per-UTC-day JSON under
-* `~/.claude/logs/00-security`. Ports the state helpers of
-* `check-security-skill.py` / `track-skill-read.py` / `track-mcp-research.py`.
-*/
-/** `~/.claude/logs/00-security` state directory. */
-function securityStateDir(home = homedir()) {
-	return join(claudeHome(home), "logs", "00-security");
-}
-/** Current UTC date as `YYYY-MM-DD`. */
-function todayUtc(now = Date.now()) {
-	return new Date(now).toISOString().slice(0, 10);
-}
-/** Current UTC instant as `YYYY-MM-DDTHH:MM:SSZ` (seconds, no millis). */
-function isoUtc(now = Date.now()) {
-	return new Date(now).toISOString().replace(/\.\d{3}Z$/, "Z");
-}
-/** Today's security-state file path. */
-function securityStatePath(now = Date.now(), home = homedir()) {
-	return join(securityStateDir(home), `${todayUtc(now)}-state.json`);
-}
-/** Load today's security state, or `{}` when missing/corrupt. */
-function loadSecurityState(now = Date.now(), home = homedir()) {
-	const path = securityStatePath(now, home);
-	try {
-		if (!existsSync(path)) return {};
-		const data = JSON.parse(readFileSync(path, "utf-8"));
-		return typeof data === "object" && data !== null && !Array.isArray(data) ? data : {};
-	} catch {
-		return {};
-	}
-}
-/** Persist today's security state (indent 2, no trailing newline). */
-function saveSecurityState(state, now = Date.now(), home = homedir()) {
-	mkdirSync(securityStateDir(home), { recursive: true });
-	writeFileSync(securityStatePath(now, home), JSON.stringify(state, null, 2), "utf-8");
-}
-//#endregion
 //#region src/runtime/lifecycle/security/track-skill-read.ts
 /**
 * Security skill-read tracker (PostToolUse Read). Ports `track-skill-read.py`:
@@ -3903,4 +3903,4 @@ async function handleHook(id, payload, opts) {
 	});
 }
 //#endregion
-export { detectSolidProfile as $, dispatchLessons as A, mcpPreIntercept as At, mergeLines as B, securityStateDir as C, defaultStateDir as Ct, dispatchLifecycle as D, MCP_TTL_MS as Dt, trackEnrichment as E, normalizeEvent as Et, writePluginMap as F, trackSessionChanges as G, getFileDesc as H, generateProjectMap as I, saveApexState as J, validateRulesLoaded as K, isProject as L, lessonsStateFileFor as M, activityFor as Mt, cartoSessionStart as N, aipilotPostToolUse as O, isMcpTool as Ot, generateEcosystemMap as P, subagentCacheContext as Q, writeTree as R, saveSecurityState as S, recordActivity as St, todayUtc as T, trackFile as Tt, listChildren as U, countFiles as V, postEditTypescript as W, validateTeammateOutput as X, logToolFailure as Y, trackAgentMemory as Z, trackWatchResearch as _, sessionStatePath as _t, TRIVIAL_BUDGET as a, pruneEmptyDirs as at, isoUtc as b, taskContext as bt, detectDuplication as c, trimLogFile as ct, lifecycleStdout as d, projectContext as dt, solidDetectStart as et, postEditContext as f, claudeHome as ft, postTrackingSideEffects as g, saveSessionState as gt, securityAdvisory as h, sanitizeSessionId as ht, REQUIRED_AGENTS as i, sessionStartCore as it, lessonsFileFor as j, queryOf as jt, dispatchAipilot as k, mcpPostStore as kt, dryGate as l, devContext as lt, seoPostToolUseResponse as m, loadSessionState as mt, handlePre as n, readRules as nt, gate as o, purgeTtlTree as ot, seoPostToolUse as p, fusengineCache as pt, cleanupSession as q, DEFAULT_WINDOW_MS as r, runSessionStartCleanups as rt, preCommitGate as s, removeOldFiles as st, handleHook as t, injectRules as tt, extractSymbols as u, gitContext as ut, trackMcpResearch as v, sessionsDir as vt, securityStatePath as w, projectHash$1 as wt, loadSecurityState as x, respond as xt, trackSkillRead as y, promptSubmitContext as yt, loadEnriched as z };
+export { pruneEmptyDirs as $, generateProjectMap as A, saveSessionState as At, validateRulesLoaded as B, dispatchAipilot as C, securityStateDir as Ct, cartoSessionStart as D, fusengineCache as Dt, lessonsStateFileFor as E, claudeHome as Et, countFiles as F, trackAgentMemory as G, saveApexState as H, getFileDesc as I, solidDetectStart as J, subagentCacheContext as K, listChildren as L, writeTree as M, sessionsDir as Mt, loadEnriched as N, generateEcosystemMap as O, loadSessionState as Ot, mergeLines as P, sessionStartCore as Q, postEditTypescript as R, aipilotPostToolUse as S, saveSecurityState as St, lessonsFileFor as T, todayUtc as Tt, logToolFailure as U, cleanupSession as V, validateTeammateOutput as W, readRules as X, injectRules as Y, runSessionStartCleanups as Z, trackWatchResearch as _, mcpPreIntercept as _t, TRIVIAL_BUDGET as a, projectContext as at, trackEnrichment as b, isoUtc as bt, detectDuplication as c, respond as ct, lifecycleStdout as d, projectHash$1 as dt, purgeTtlTree as et, postEditContext as f, trackFile as ft, postTrackingSideEffects as g, mcpPostStore as gt, securityAdvisory as h, isMcpTool as ht, REQUIRED_AGENTS as i, gitContext as it, isProject as j, sessionStatePath as jt, writePluginMap as k, sanitizeSessionId as kt, dryGate as l, recordActivity as lt, seoPostToolUseResponse as m, MCP_TTL_MS as mt, handlePre as n, trimLogFile as nt, gate as o, promptSubmitContext as ot, seoPostToolUse as p, normalizeEvent as pt, detectSolidProfile as q, DEFAULT_WINDOW_MS as r, devContext as rt, preCommitGate as s, taskContext as st, handleHook as t, removeOldFiles as tt, extractSymbols as u, defaultStateDir as ut, trackMcpResearch as v, queryOf as vt, dispatchLessons as w, securityStatePath as wt, dispatchLifecycle as x, loadSecurityState as xt, trackSkillRead as y, activityFor as yt, trackSessionChanges as z };

package/dist/runtime/index.mjs

@@ -1,5 +1,5 @@
 import { r as projectLayout } from "../layout-C0jaaCQC.mjs";
-import { $ as detectSolidProfile, A as dispatchLessons, At as mcpPreIntercept, B as mergeLines, C as securityStateDir, Ct as defaultStateDir, D as dispatchLifecycle, Dt as MCP_TTL_MS, E as trackEnrichment, Et as normalizeEvent, F as writePluginMap, G as trackSessionChanges, H as getFileDesc, I as generateProjectMap, J as saveApexState, K as validateRulesLoaded, L as isProject, M as lessonsStateFileFor, Mt as activityFor, N as cartoSessionStart, O as aipilotPostToolUse, Ot as isMcpTool, P as generateEcosystemMap, Q as subagentCacheContext, R as writeTree, S as saveSecurityState, St as recordActivity, T as todayUtc, Tt as trackFile, U as listChildren, V as countFiles, W as postEditTypescript, X as validateTeammateOutput, Y as logToolFailure, Z as trackAgentMemory, _ as trackWatchResearch, _t as sessionStatePath, a as TRIVIAL_BUDGET, at as pruneEmptyDirs, b as isoUtc, bt as taskContext, c as detectDuplication, ct as trimLogFile, d as lifecycleStdout, dt as projectContext, et as solidDetectStart, f as postEditContext, ft as claudeHome, g as postTrackingSideEffects, gt as saveSessionState, h as securityAdvisory, ht as sanitizeSessionId, i as REQUIRED_AGENTS, it as sessionStartCore, j as lessonsFileFor, jt as queryOf, k as dispatchAipilot, kt as mcpPostStore, l as dryGate, lt as devContext, m as seoPostToolUseResponse, mt as loadSessionState, n as handlePre, nt as readRules, o as gate, ot as purgeTtlTree, p as seoPostToolUse, pt as fusengineCache, q as cleanupSession, r as DEFAULT_WINDOW_MS, rt as runSessionStartCleanups, s as preCommitGate, st as removeOldFiles, t as handleHook, tt as injectRules, u as extractSymbols, ut as gitContext, v as trackMcpResearch, vt as sessionsDir, w as securityStatePath, wt as projectHash, x as loadSecurityState, xt as respond, y as trackSkillRead, yt as promptSubmitContext, z as loadEnriched } from "../handle-DMHjTY1E.mjs";
+import { $ as pruneEmptyDirs, A as generateProjectMap, At as saveSessionState, B as validateRulesLoaded, C as dispatchAipilot, Ct as securityStateDir, D as cartoSessionStart, Dt as fusengineCache, E as lessonsStateFileFor, Et as claudeHome, F as countFiles, G as trackAgentMemory, H as saveApexState, I as getFileDesc, J as solidDetectStart, K as subagentCacheContext, L as listChildren, M as writeTree, Mt as sessionsDir, N as loadEnriched, O as generateEcosystemMap, Ot as loadSessionState, P as mergeLines, Q as sessionStartCore, R as postEditTypescript, S as aipilotPostToolUse, St as saveSecurityState, T as lessonsFileFor, Tt as todayUtc, U as logToolFailure, V as cleanupSession, W as validateTeammateOutput, X as readRules, Y as injectRules, Z as runSessionStartCleanups, _ as trackWatchResearch, _t as mcpPreIntercept, a as TRIVIAL_BUDGET, at as projectContext, b as trackEnrichment, bt as isoUtc, c as detectDuplication, ct as respond, d as lifecycleStdout, dt as projectHash, et as purgeTtlTree, f as postEditContext, ft as trackFile, g as postTrackingSideEffects, gt as mcpPostStore, h as securityAdvisory, ht as isMcpTool, i as REQUIRED_AGENTS, it as gitContext, j as isProject, jt as sessionStatePath, k as writePluginMap, kt as sanitizeSessionId, l as dryGate, lt as recordActivity, m as seoPostToolUseResponse, mt as MCP_TTL_MS, n as handlePre, nt as trimLogFile, o as gate, ot as promptSubmitContext, p as seoPostToolUse, pt as normalizeEvent, q as detectSolidProfile, r as DEFAULT_WINDOW_MS, rt as devContext, s as preCommitGate, st as taskContext, t as handleHook, tt as removeOldFiles, u as extractSymbols, ut as defaultStateDir, v as trackMcpResearch, vt as queryOf, w as dispatchLessons, wt as securityStatePath, x as dispatchLifecycle, xt as loadSecurityState, y as trackSkillRead, yt as activityFor, z as trackSessionChanges } from "../handle-CYlA6TeF.mjs";
 //#region src/runtime/storage.ts
 /**
 * The project's single state dir (`<root>/.harness`) — neutral + harness-agnostic,

package/package.json

@@ -1,6 +1,6 @@
 {
   "name": "@fusengine/harness",
-  "version": "0.1.34",
+  "version": "0.1.35",
   "description": "Harness-agnostic toolkit for AI coding agents: runtime harness detection (Claude Code, Codex, Cursor, Cline, Gemini, Aider...), pure policy core (env config, project/framework detection, SOLID/file-size limits, APEX freshness, guard patterns, portable prompts), cache, project memory, ref routing, state/locks, statusline, per-harness adapters (Claude/Cursor/Cline/Gemini) and a cli-mode harness-check binary. Bun-native, with a built dist for Node + bundlers.",
   "type": "module",
   "module": "src/index.ts",