@fusengine/harness 0.1.63 → 0.1.64

package/dist/adapters/claude/index.mjs

@@ -1,2 +1,2 @@
-import { a as fileSizeGuard, c as readClaudeInput, i as denyResponse, l as systemMessage, n as blockResponse, o as guard, r as contextResponse, s as informResponse, t as attachSystemMessage, u as toClaudeResponse } from "../../claude-C0xGMbeA.mjs";
+import { a as fileSizeGuard, c as readClaudeInput, i as denyResponse, l as systemMessage, n as blockResponse, o as guard, r as contextResponse, s as informResponse, t as attachSystemMessage, u as toClaudeResponse } from "../../claude-CaBe4eBY.mjs";
 export { attachSystemMessage, blockResponse, contextResponse, denyResponse, fileSizeGuard, guard, informResponse, readClaudeInput, systemMessage, toClaudeResponse };

package/dist/adapters/codex/index.mjs

@@ -2,7 +2,7 @@ import { f as countLines } from "../../home-state-D0RLWP8J.mjs";
 import { t as evaluate } from "../../evaluate-wDDbojx6.mjs";
 import { t as formatPrompt } from "../../types-ernB1Dy3.mjs";
 import { t as parseApplyPatch } from "../../apply-patch-CIS2EZ_q.mjs";
-import { _ as commandToString, c as readClaudeInput, i as denyResponse, r as contextResponse } from "../../claude-C0xGMbeA.mjs";
+import { c as readClaudeInput, i as denyResponse, r as contextResponse, v as commandToString } from "../../claude-CaBe4eBY.mjs";
 //#region src/adapters/codex/index.ts
 /**
 * OpenAI Codex CLI adapter (hook-mode). Codex's `PreToolUse` hook (since 2026)

package/dist/adapters/hermes/index.mjs

@@ -1,2 +1,2 @@
-import { n as readHermesInput, r as toHermesResponse, t as guard } from "../../hermes-C1gt6ooE.mjs";
+import { n as readHermesInput, r as toHermesResponse, t as guard } from "../../hermes-BdwBBemn.mjs";
 export { guard, readHermesInput, toHermesResponse };

package/dist/{claude-C0xGMbeA.mjs → claude-CaBe4eBY.mjs}

@@ -81,11 +81,23 @@ function spawnCapture(cmd, args, cwd) {
 		return "";
 	}
 }
-/** Read the full process stdin as UTF-8 text (works under Node and Bun). */
+/**
+* Read the full process stdin as UTF-8 text (works under Node and Bun).
+* Synchronous fd-0 read — never `for await (const c of process.stdin)` —
+* because Bun has a confirmed Linux-only bug where merely adding a new
+* top-level module import shifts stdin's internal init order and makes
+* that async iterator silently yield zero bytes (oven-sh/bun#25320,
+* #27849): exactly what broke every `harness hook` invocation on CI the
+* moment `figures` became this package's first runtime dependency.
+* `readFileSync(0)` bypasses that stream/ownership machinery entirely and
+* is well-supported for piped (non-TTY) stdin under both runtimes.
+*/
 async function readStdin() {
-	const chunks = [];
-	for await (const chunk of process.stdin) chunks.push(chunk);
-	return Buffer.concat(chunks).toString("utf8");
+	try {
+		return readFileSync(0, "utf8");
+	} catch {
+		return "";
+	}
 }
 /**
 * Recursively collect files under `dir` whose extension is in `exts`, skipping
@@ -214,4 +226,4 @@ function guard(input) {
 /** @deprecated use {@link guard}. Kept for back-compat. */
 const fileSizeGuard = guard;
 //#endregion
-export { commandToString as _, fileSizeGuard as a, readClaudeInput as c, collectFiles as d, pathExists as f, writeText as g, spawnCapture as h, denyResponse as i, systemMessage as l, sleep as m, blockResponse as n, guard as o, readText as p, contextResponse as r, informResponse as s, attachSystemMessage as t, toClaudeResponse as u };
+export { writeText as _, fileSizeGuard as a, readClaudeInput as c, collectFiles as d, pathExists as f, spawnCapture as g, sleep as h, denyResponse as i, systemMessage as l, readText as m, blockResponse as n, guard as o, readStdin as p, contextResponse as r, informResponse as s, attachSystemMessage as t, toClaudeResponse as u, commandToString as v };

package/dist/cli/bin.mjs

@@ -4,7 +4,8 @@ import { t as detectHarness } from "../harness-Cb9xR8dC.mjs";
 import { t as claudeHome } from "../home-state-D0RLWP8J.mjs";
 import { n as stagedContent, r as stagedFiles, t as checkStaged } from "../run-kVHXFVug.mjs";
 import { n as writeInitFile, t as initFor } from "../run-Do2JltgU.mjs";
-import { J as runningVersion, Lt as todayUtc, Y as versionBanner, q as runDoctor, t as handleHook } from "../handle-CjwRTMOv.mjs";
+import { J as runningVersion, Lt as todayUtc, Y as versionBanner, q as runDoctor, t as handleHook } from "../handle-DE-753Mr.mjs";
+import { p as readStdin$1 } from "../claude-CaBe4eBY.mjs";
 import { delimiter, join } from "node:path";
 import { existsSync, mkdirSync, readFileSync, readdirSync, writeFileSync } from "node:fs";
 import { homedir } from "node:os";
@@ -361,15 +362,19 @@ function discoverRefs(home, cwd, marketplaces) {
 *   harness hook <id>      runtime: read a hook payload on stdin, route to the adapter, print the response
 *   harness changelog      fetch + diff the Claude Code changelog, print a JSON summary (changelog-watcher)
 */
+const hookDebug = process.env.FUSE_HARNESS_DEBUG === "1";
+function traceHook(label, data) {
+	if (hookDebug) process.stderr.write(`[hook-debug] ${label}: ${typeof data === "string" ? data : JSON.stringify(data)}\n`);
+}
 async function readStdin() {
-	const chunks = [];
-	for await (const c of process.stdin) chunks.push(c);
-	const text = Buffer.concat(chunks).toString("utf8").trim();
+	const text = (await readStdin$1()).trim();
+	traceHook("stdin-text-length", text.length);
 	if (!text) return {};
 	try {
 		const parsed = JSON.parse(text);
 		return typeof parsed === "object" && parsed !== null ? parsed : {};
-	} catch {
+	} catch (e) {
+		traceHook("stdin-parse-error", e instanceof Error ? e.message : String(e));
 		return {};
 	}
 }
@@ -399,13 +404,27 @@ if (cmd === "--version" || cmd === "-v") {
 	])).has(scopeArg) ? scopeArg : "core";
 	const marketplaces = (process.env.FUSE_HARNESS_MARKETPLACES ?? "fusengine-plugins").split(",").map((s) => s.trim()).filter(Boolean);
 	const refsDir = process.env.FUSE_HARNESS_REFS || discoverRefs(homedir(), process.cwd(), marketplaces) || void 0;
-	const outcome = await handleHook(id, await readStdin(), {
-		now: Date.now(),
-		cwd: process.cwd(),
-		refsDir,
-		windowMs: resolveTtlSec(process.env) * 1e3,
+	traceHook("args", {
+		id,
 		scope
 	});
+	let outcome;
+	try {
+		outcome = await handleHook(id, await readStdin(), {
+			now: Date.now(),
+			cwd: process.cwd(),
+			refsDir,
+			windowMs: resolveTtlSec(process.env) * 1e3,
+			scope
+		});
+	} catch (e) {
+		traceHook("handleHook-threw", e instanceof Error ? `${e.message}\n${e.stack}` : String(e));
+		throw e;
+	}
+	traceHook("outcome", {
+		stdoutLength: outcome.stdout.length,
+		exit: outcome.exit
+	});
 	if (outcome.stdout) process.stdout.write(outcome.stdout);
 	process.exit(outcome.exit);
 } else if (cmd === "init") {

package/dist/{handle-CjwRTMOv.mjs → handle-DE-753Mr.mjs}

@@ -14,8 +14,8 @@ import { d as loadIndex, i as cacheLookupMeta, n as webfetchCacheWrite, o as cac
 import { t as loadRefs } from "./loader-AGz4nK7d.mjs";
 import { a as writeLastNonce, c as recordAgent, d as recordRefRead, f as recordTarget, h as apexAuthorizationGate, i as verifyTrack, l as recordBrainstormRequired, m as trivialCount, n as saveTrack, o as agentsFresh, p as recordTrivialEdit, r as signTrack, s as emptyTrack, t as loadTrack, u as recordDoc } from "./store-CQ4roWrU.mjs";
 import { t as parseApplyPatch } from "./apply-patch-CIS2EZ_q.mjs";
-import { _ as commandToString, d as collectFiles, f as pathExists, g as writeText, h as spawnCapture, i as denyResponse, l as systemMessage, m as sleep, n as blockResponse, p as readText, r as contextResponse, s as informResponse, t as attachSystemMessage } from "./claude-C0xGMbeA.mjs";
-import { r as toHermesResponse } from "./hermes-C1gt6ooE.mjs";
+import { _ as writeText, d as collectFiles, f as pathExists, g as spawnCapture, h as sleep, i as denyResponse, l as systemMessage, m as readText, n as blockResponse, r as contextResponse, s as informResponse, t as attachSystemMessage, v as commandToString } from "./claude-CaBe4eBY.mjs";
+import { r as toHermesResponse } from "./hermes-BdwBBemn.mjs";
 import { basename, dirname, extname, join, relative, resolve, sep } from "node:path";
 import { appendFileSync, copyFileSync, existsSync, mkdirSync, readFileSync, readdirSync, renameSync, rmSync, rmdirSync, statSync, unlinkSync, writeFileSync } from "node:fs";
 import { homedir } from "node:os";
@@ -23,6 +23,7 @@ import { mkdir, rmdir } from "node:fs/promises";
 import { createHash } from "node:crypto";
 import { execFileSync, execSync } from "node:child_process";
 import { fileURLToPath } from "node:url";
+import figures from "figures";
 //#region src/runtime/lifecycle/security/skill-state.ts
 /**
 * Shared security-tracker state: per-UTC-day JSON under
@@ -7053,6 +7054,56 @@ function respond(id, prompt) {
 	}
 }
 //#endregion
+//#region src/runtime/deny-notice.ts
+/**
+* @module deny-notice
+* Attach a user-visible notice to a deny/ask hook response — the owner-reported
+* gap where `permissionDecision: deny/ask` (the agent-only channel) left the
+* human staring at a silent terminal. Mirrors {@link module:notices}'s
+* compliance notices but for the BLOCKING outcomes those never covered.
+* @packageDocumentation
+*/
+/**
+* The human-facing line for a block/ask outcome: the gate's own
+* {@link Prompt.userMessage} when it set one, else a generic symbol + title —
+* text-presentation Unicode only (`figures.cross`/`?`), never emoji: terminal-safe,
+* single-cell width, with the Windows fallbacks `figures` already resolves, matching
+* the existing notice family (`notices.ts`'s `✓`/`⚠`, left untouched by this module).
+* Null for `inform` ({@link module:respond}'s own `userMessage` path already
+* covers it) or when neither applies.
+*/
+function denyAskNotice(prompt) {
+	if (prompt.kind === "block") return prompt.userMessage ?? `${figures.cross} ${prompt.title}`;
+	if (prompt.kind === "ask") return prompt.userMessage ?? `? ${prompt.title}`;
+	return null;
+}
+/**
+* Attach {@link denyAskNotice} onto an already-rendered deny/ask `stdout`, for
+* the harnesses whose human channel is `systemMessage` (claude-code/codex —
+* `permissionDecision`/`permissionDecisionReason` stay byte-intact, only the
+* top-level field is added). Every other harness passes `stdout` through
+* unchanged: Cursor already emits `user_message` natively (respond.ts), Hermes
+* and cline have no human channel. Deduped via {@link onceExclusive} against
+* the ~11 sibling-plugin fan-out for one real event (same window as the
+* sniper reminder / compliance notices).
+* @param id - Harness id (`ctx.id` from `PreContext`).
+* @param stdout - The rendered hook response (from {@link module:respond.respond}).
+* @param prompt - The {@link Prompt} that produced `stdout`.
+* @param sessionId - Current session id (dedup scope).
+* @param dir - State-dir for the dedup marker (per-project state dir).
+* @param now - Event clock (tests pass a fake one).
+*/
+function withDenyNotice(id, stdout, prompt, sessionId, dir, now) {
+	if (id !== "claude-code" && id !== "codex") return stdout;
+	const notice = denyAskNotice(prompt);
+	if (!notice) return stdout;
+	if (!onceExclusive(`deny-notice:${sessionId}:${prompt.title}`, 2e3, {
+		now,
+		dir
+	})) return stdout;
+	return attachSystemMessage(stdout, notice);
+}
+//#endregion
 //#region src/policy/design/content-checks.ts
 /** Accessibility warnings: icon buttons need aria-label, images need alt. */
 function checkAccessibility(content) {
@@ -7618,7 +7669,7 @@ async function handlePre(ctx) {
 	}
 	const designBlock = designGate(payload, event, mcpDir, opts.cwd);
 	if (designBlock) return {
-		stdout: respond(id, designBlock),
+		stdout: withDenyNotice(id, respond(id, designBlock), designBlock, event.sessionId, dirname(file), opts.now),
 		exit: 0
 	};
 	if (opts.scope === "security") return {
@@ -7639,7 +7690,7 @@ async function handlePre(ctx) {
 	if (event.files && event.files.length > 0) {
 		const patchPrompt = applyPatchGate(event.files, opts.cwd);
 		if (patchPrompt) return {
-			stdout: respond(id, patchPrompt),
+			stdout: withDenyNotice(id, respond(id, patchPrompt), patchPrompt, event.sessionId, dirname(file), opts.now),
 			exit: 0
 		};
 	}
@@ -7661,7 +7712,7 @@ async function handlePre(ctx) {
 		transcriptPath: typeof payload.transcript_path === "string" ? payload.transcript_path : void 0
 	});
 	if (prompt) return {
-		stdout: respond(id, prompt),
+		stdout: withDenyNotice(id, respond(id, prompt), prompt, event.sessionId, dirname(file), opts.now),
 		exit: 0
 	};
 	return allowOutcome(id, event, payload, mcpDir, opts.cwd, {

package/dist/{hermes-C1gt6ooE.mjs → hermes-BdwBBemn.mjs}

@@ -1,6 +1,6 @@
 import { t as evaluate } from "./evaluate-wDDbojx6.mjs";
 import { t as formatPrompt } from "./types-ernB1Dy3.mjs";
-import { _ as commandToString, c as readClaudeInput } from "./claude-C0xGMbeA.mjs";
+import { c as readClaudeInput, v as commandToString } from "./claude-CaBe4eBY.mjs";
 //#region src/adapters/hermes/index.ts
 /**
 * Hermes Agent adapter (hook-mode). Nous Research's hermes-agent (2026) pipes a

package/dist/runtime/index.mjs

@@ -1,6 +1,6 @@
 import { r as projectLayout } from "../layout-C0jaaCQC.mjs";
 import { a as sanitizeSessionId, c as sessionsDir, i as loadSessionState, n as fuseHarnessHome, o as saveSessionState, r as fusengineCache, s as sessionStatePath, t as claudeHome } from "../home-state-D0RLWP8J.mjs";
-import { $ as postEditTypescript, A as trackSkillRead, At as trackFile, B as isProject, C as seoPostToolUse, Ct as gitContext, D as postTrackingSideEffects, Dt as taskContext, E as securityAdvisory, Et as promptSubmitContext, F as dispatchLessons, Ft as securityStateDir, G as getFileDesc, H as loadEnriched, I as cartoSessionStart, It as securityStatePath, K as listChildren, L as generateEcosystemMap, Lt as todayUtc, M as dispatchLifecycle, Mt as isoUtc, N as aipilotPostToolUse, Nt as loadSecurityState, O as trackWatchResearch, Ot as defaultStateDir, P as dispatchAipilot, Pt as saveSecurityState, Q as lessonsStateFileFor, R as writePluginMap, S as postEditContext, St as devContext, T as dispatchMemory, Tt as claudeMdKey, U as mergeLines, V as writeTree, W as countFiles, X as lessonsArchiveFileFor, Z as lessonsFileFor, _ as preCommitGate, _t as sessionStartCore, a as recordActivity, at as validateTeammateOutput, b as extractSymbols, bt as removeOldFiles, c as MCP_TTL_MS, ct as validateTailwind, d as isMcpTool, dt as countLoc, et as trackSessionChanges, f as queryOf, ft as detectSolidProfile, g as gate, gt as runSessionStartCleanups, h as TRIVIAL_BUDGET, ht as readRules, i as respond, it as logToolFailure, j as trackEnrichment, jt as normalizeEvent, k as trackMcpResearch, kt as projectHash, l as WEBFETCH_TTL_MS, lt as validateSolidGate, m as REQUIRED_AGENTS, mt as injectRules, n as activityFor, nt as cleanupSession, o as mcpPostStore, ot as trackAgentMemory, p as DEFAULT_WINDOW_MS, pt as solidDetectStart, r as handlePre, rt as saveApexState, s as mcpPreIntercept, st as subagentCacheContext, t as handleHook, tt as validateRulesLoaded, u as cacheQueryOf, ut as checkFileSize, v as detectDuplication, vt as pruneEmptyDirs, w as seoPostToolUseResponse, wt as projectContext, x as lifecycleStdout, xt as trimLogFile, y as dryGate, yt as purgeTtlTree, z as generateProjectMap } from "../handle-CjwRTMOv.mjs";
+import { $ as postEditTypescript, A as trackSkillRead, At as trackFile, B as isProject, C as seoPostToolUse, Ct as gitContext, D as postTrackingSideEffects, Dt as taskContext, E as securityAdvisory, Et as promptSubmitContext, F as dispatchLessons, Ft as securityStateDir, G as getFileDesc, H as loadEnriched, I as cartoSessionStart, It as securityStatePath, K as listChildren, L as generateEcosystemMap, Lt as todayUtc, M as dispatchLifecycle, Mt as isoUtc, N as aipilotPostToolUse, Nt as loadSecurityState, O as trackWatchResearch, Ot as defaultStateDir, P as dispatchAipilot, Pt as saveSecurityState, Q as lessonsStateFileFor, R as writePluginMap, S as postEditContext, St as devContext, T as dispatchMemory, Tt as claudeMdKey, U as mergeLines, V as writeTree, W as countFiles, X as lessonsArchiveFileFor, Z as lessonsFileFor, _ as preCommitGate, _t as sessionStartCore, a as recordActivity, at as validateTeammateOutput, b as extractSymbols, bt as removeOldFiles, c as MCP_TTL_MS, ct as validateTailwind, d as isMcpTool, dt as countLoc, et as trackSessionChanges, f as queryOf, ft as detectSolidProfile, g as gate, gt as runSessionStartCleanups, h as TRIVIAL_BUDGET, ht as readRules, i as respond, it as logToolFailure, j as trackEnrichment, jt as normalizeEvent, k as trackMcpResearch, kt as projectHash, l as WEBFETCH_TTL_MS, lt as validateSolidGate, m as REQUIRED_AGENTS, mt as injectRules, n as activityFor, nt as cleanupSession, o as mcpPostStore, ot as trackAgentMemory, p as DEFAULT_WINDOW_MS, pt as solidDetectStart, r as handlePre, rt as saveApexState, s as mcpPreIntercept, st as subagentCacheContext, t as handleHook, tt as validateRulesLoaded, u as cacheQueryOf, ut as checkFileSize, v as detectDuplication, vt as pruneEmptyDirs, w as seoPostToolUseResponse, wt as projectContext, x as lifecycleStdout, xt as trimLogFile, y as dryGate, yt as purgeTtlTree, z as generateProjectMap } from "../handle-DE-753Mr.mjs";
 //#region src/runtime/storage.ts
 /**
 * The project's single state dir (`<root>/.harness`) — neutral + harness-agnostic,

package/package.json

@@ -1,6 +1,6 @@
 {
   "name": "@fusengine/harness",
-  "version": "0.1.63",
+  "version": "0.1.64",
   "description": "Harness-agnostic toolkit for AI coding agents: runtime harness detection (Claude Code, Codex, Cursor, Cline, Gemini, Aider...), pure policy core (env config, project/framework detection, SOLID/file-size limits, APEX freshness, guard patterns, portable prompts), cache, project memory, ref routing, state/locks, statusline, per-harness adapters (Claude/Cursor/Cline/Gemini) and a cli-mode harness-check binary. Bun-native, with a built dist for Node + bundlers.",
   "type": "module",
   "module": "src/index.ts",
@@ -152,5 +152,8 @@
     "tsdown": "^0.22.3",
     "typedoc": "^0.28.19",
     "typescript": "^6.0.3"
+  },
+  "dependencies": {
+    "figures": "^6.1.0"
   }
 }