@gethmy/mcp 3.7.0 → 3.9.0

package/dist/lib/api-client.js

@@ -15,12 +15,14 @@ var __export = (target, all) => {
 var __esm = (fn, res) => () => (fn && (res = fn(fn = 0)), res);
 
 // src/config.ts
+import { execFileSync } from "node:child_process";
 import { existsSync, mkdirSync, readFileSync, writeFileSync } from "node:fs";
-import { homedir } from "node:os";
+import { homedir, tmpdir } from "node:os";
 import { dirname, join, parse, resolve } from "node:path";
 function resetLegacyNoticesForTest() {
   warnedLegacyConfigDir = false;
   warnedLegacyLocalPin = false;
+  warnedUntrackedLocalPin = false;
 }
 function noteLegacyConfigDir(path) {
   if (warnedLegacyConfigDir)
@@ -32,11 +34,28 @@ function noteLegacyLocalPin(path) {
   if (warnedLegacyLocalPin)
     return;
   warnedLegacyLocalPin = true;
-  console.error(`Harmony: this repo is pinned by ${path}, the pre-#1082 name. ` + `Rename it to ${LOCAL_CONFIG_FILENAME} — the fallback that finds it is temporary.`);
+  console.error(`Harmony: this repo is pinned by ${path}, the pre-#1082 name. ` + `Run \`harmony-agent doctor --fix\` in this repo to write ` + `${LOCAL_CONFIG_FILENAME}, or rename the file yourself. ` + `The fallback that finds it is temporary.`);
 }
 function noteLocalPinRename(from, to) {
   console.error(`Harmony: wrote the repo pin to ${to} (the pre-#1082 ${from} is now ignored and can be deleted).`);
 }
+function noteUntrackedLocalPin(path) {
+  if (warnedUntrackedLocalPin)
+    return;
+  warnedUntrackedLocalPin = true;
+  console.error(`Harmony: ${path} is ignored by git, so it will not travel with a branch — ` + `a fresh clone, and every worktree the agent daemon cuts, will not have it. ` + `Commit it if you want it to describe this repo everywhere.`);
+}
+function isGitIgnored(path) {
+  try {
+    execFileSync("git", ["check-ignore", "--quiet", path], {
+      cwd: dirname(path),
+      stdio: "ignore"
+    });
+    return true;
+  } catch {
+    return false;
+  }
+}
 function getHmyRootDir() {
   return join(homedir(), CONFIG_DIR_NAME);
 }
@@ -151,19 +170,96 @@ function saveLocalConfig(config, cwd) {
   if (foundPath !== null && foundPath !== localConfigPath) {
     noteLocalPinRename(foundPath, localConfigPath);
   }
-  const existingConfig = loadLocalConfig(cwd) || {
-    workspaceId: null,
-    projectId: null
-  };
-  const newConfig = { ...existingConfig, ...config };
-  const cleanConfig = {};
-  if (newConfig.workspaceId)
-    cleanConfig.workspaceId = newConfig.workspaceId;
-  if (newConfig.projectId)
-    cleanConfig.projectId = newConfig.projectId;
-  writeFileSync(localConfigPath, JSON.stringify(cleanConfig, null, 2));
+  const existing = readRawLocalConfig(foundPath ?? localConfigPath);
+  const merged = { ...existing };
+  if ("workspaceId" in config) {
+    if (config.workspaceId)
+      merged.workspaceId = config.workspaceId;
+    else
+      delete merged.workspaceId;
+  }
+  if ("projectId" in config) {
+    if (config.projectId)
+      merged.projectId = config.projectId;
+    else
+      delete merged.projectId;
+  }
+  writeFileSync(localConfigPath, `${JSON.stringify(merged, null, localIndent(localConfigPath))}
+`);
+  if (isGitIgnored(localConfigPath))
+    noteUntrackedLocalPin(localConfigPath);
   return localConfigPath;
 }
+function readRawLocalConfig(path) {
+  let text;
+  try {
+    text = readFileSync(path, "utf-8");
+  } catch {
+    return {};
+  }
+  try {
+    const parsed = JSON.parse(text);
+    if (parsed && typeof parsed === "object" && !Array.isArray(parsed)) {
+      return parsed;
+    }
+  } catch {}
+  noteUnparsableLocalPin(path, text);
+  return {};
+}
+function noteUnparsableLocalPin(path, contents) {
+  let backup = null;
+  try {
+    backup = join(tmpdir(), `hmy-pin-${Date.now()}-${Math.random().toString(36).slice(2, 8)}.json.bak`);
+    writeFileSync(backup, contents);
+  } catch {
+    backup = null;
+  }
+  console.error(`Harmony: ${path} could not be parsed as JSON, so the pin write REPLACED it. ` + (backup ? `The previous contents are in ${backup}.` : "The previous contents could not be backed up and are gone.") + ` If it carried a "commands" block, re-add it.`);
+}
+function localIndent(configPath) {
+  const root = dirname(configPath);
+  for (const name of ["biome.json", "biome.jsonc"]) {
+    const parsed = readJsonish(join(root, name));
+    if (!parsed || typeof parsed !== "object")
+      continue;
+    const formatter = parsed.formatter;
+    if (formatter?.indentStyle === "space") {
+      const width = formatter.indentWidth;
+      return typeof width === "number" && width > 0 ? width : 2;
+    }
+    return "\t";
+  }
+  const editorconfig = readTextSafely(join(root, ".editorconfig"));
+  if (editorconfig) {
+    if (/^\s*indent_style\s*=\s*tab\s*$/im.test(editorconfig))
+      return "\t";
+    const size = editorconfig.match(/^\s*indent_size\s*=\s*(\d+)\s*$/im);
+    if (size) {
+      const width = Number(size[1]);
+      if (width > 0)
+        return width;
+    }
+  }
+  return 2;
+}
+function readJsonish(path) {
+  const text = readTextSafely(path);
+  if (text === null)
+    return null;
+  try {
+    const stripped = text.replace(/^\s*\/\/.*$/gm, "").replace(/,(\s*[}\]])/g, "$1");
+    return JSON.parse(stripped);
+  } catch {
+    return null;
+  }
+}
+function readTextSafely(path) {
+  try {
+    return readFileSync(path, "utf-8");
+  } catch {
+    return null;
+  }
+}
 function hasLocalConfig(cwd) {
   return findLocalConfigPath(cwd) !== null;
 }
@@ -300,7 +396,7 @@ function getMemoryDir() {
     return config.memoryDir;
   return join(homedir(), ".harmony", "memory");
 }
-var DEFAULT_API_URL = "https://app.gethmy.com/api", LOCAL_CONFIG_FILENAME = ".hmy.json", LEGACY_LOCAL_CONFIG_FILENAME = ".harmony-mcp.json", CONFIG_DIR_NAME = ".hmy", CONFIG_DIR_SUBDIR = "agent", LEGACY_CONFIG_DIR_NAME = ".harmony-mcp", warnedLegacyConfigDir = false, warnedLegacyLocalPin = false;
+var DEFAULT_API_URL = "https://app.gethmy.com/api", LOCAL_CONFIG_FILENAME = ".hmy.json", LEGACY_LOCAL_CONFIG_FILENAME = ".harmony-mcp.json", CONFIG_DIR_NAME = ".hmy", CONFIG_DIR_SUBDIR = "agent", LEGACY_CONFIG_DIR_NAME = ".harmony-mcp", warnedLegacyConfigDir = false, warnedLegacyLocalPin = false, warnedUntrackedLocalPin = false;
 var init_config = () => {};
 
 // src/oauth-login.ts
@@ -864,7 +960,7 @@ var init_prompt_builder = __esm(() => {
   };
   VARIANT_INSTRUCTIONS = {
     analysis: `ANALYSIS MODE: Analyze this task thoroughly. Identify requirements, constraints, edge cases, and potential challenges. Do NOT implement anything yet - focus on understanding and planning.`,
-    draft: `DRAFT MODE: Create a detailed implementation plan with code structure, key decisions, and approach. Include pseudocode or skeleton code where helpful. This is for review before full implementation.`,
+    draft: `DRAFT MODE: Draft the approach for review before implementing. Cover the key decisions with their reasons, the data model and the API contracts, and success criteria a test can check. A short signature or schema sketch is fine wherever an interpretation gap would otherwise remain; function bodies, control flow and test code are not - an implementer transcribes a plan faithfully, defects included.`,
     execute: `EXECUTE MODE: Implement this task completely. Write production-ready code following best practices. Include necessary tests and documentation.`
   };
 });
@@ -1014,6 +1110,60 @@ var REVIEW_DISALLOWED_TOOLS = [
   "mcp__harmony__harmony_delete_subtask",
   "mcp__harmony__harmony_toggle_subtask"
 ];
+// ../harmony-shared/dist/runEventSanitize.js
+var REPLACEMENT = "�";
+function sanitizeRunEventString(value) {
+  let out = "";
+  for (let i = 0;i < value.length; i++) {
+    const code = value.charCodeAt(i);
+    if (code === 0)
+      continue;
+    if (code >= 55296 && code <= 56319) {
+      const next = value.charCodeAt(i + 1);
+      if (next >= 56320 && next <= 57343) {
+        out += value[i] + value[i + 1];
+        i++;
+        continue;
+      }
+      out += REPLACEMENT;
+      continue;
+    }
+    if (code >= 56320 && code <= 57343) {
+      out += REPLACEMENT;
+      continue;
+    }
+    out += value[i];
+  }
+  return out;
+}
+function sanitizeRunEventPayload(payload) {
+  return walk(payload, new Map);
+}
+function sanitizeRunEventDraft(draft) {
+  return { ...draft, payload: sanitizeRunEventPayload(draft.payload) };
+}
+function walk(value, seen) {
+  if (typeof value === "string")
+    return sanitizeRunEventString(value);
+  if (value === null || typeof value !== "object")
+    return value;
+  const already = seen.get(value);
+  if (already !== undefined)
+    return already;
+  if (Array.isArray(value)) {
+    const out2 = [];
+    seen.set(value, out2);
+    for (const entry of value)
+      out2.push(walk(entry, seen));
+    return out2;
+  }
+  const out = {};
+  seen.set(value, out);
+  for (const [key, entry] of Object.entries(value)) {
+    out[sanitizeRunEventString(key)] = walk(entry, seen);
+  }
+  return out;
+}
 // ../harmony-shared/dist/runRedaction.js
 var REDACTION_MARK = "«redacted»";
 var CONFIG_SCOPED_SEGMENTS = new Set([
@@ -1395,6 +1545,15 @@ class HarmonyApiClient {
   async registerWorkspaceAgent(workspaceId, data) {
     return this.request("POST", `/workspaces/${workspaceId}/agents`, data);
   }
+  async reportAgentConfig(workspaceId, agentId, config) {
+    return this.request("POST", `/workspaces/${workspaceId}/agents/${agentId}/reported-config`, { config });
+  }
+  async getWorkspaceModelConfig(workspaceId) {
+    return this.request("GET", `/workspaces/${workspaceId}/model-config`);
+  }
+  async getModelCatalog() {
+    return this.request("GET", "/model-catalog");
+  }
   async listProjects(workspaceId) {
     return this.request("GET", `/workspaces/${workspaceId}/projects`);
   }
@@ -1543,6 +1702,9 @@ class HarmonyApiClient {
       title
     });
   }
+  async removeExternalLink(cardId, linkId) {
+    return this.request("DELETE", `/cards/${cardId}/external-links/${linkId}`);
+  }
   async uploadArtifact(data) {
     return this.request("POST", "/artifacts", data);
   }
@@ -1635,7 +1797,10 @@ class HarmonyApiClient {
     return this.request("DELETE", `/cards/${cardId}/agent-context`, data);
   }
   async appendAgentRunEvents(cardId, data) {
-    return this.request("POST", `/cards/${cardId}/agent-run-events`, data);
+    return this.request("POST", `/cards/${cardId}/agent-run-events`, {
+      ...data,
+      events: data.events.map((event) => sanitizeRunEventDraft(event))
+    });
   }
   async getPendingUserMessages(cardId, sessionId, sinceSeq) {
     return this.request("GET", `/cards/${cardId}/agent-messages?sessionId=${sessionId}&sinceSeq=${sinceSeq}`);

package/dist/lib/config.js

@@ -15,12 +15,14 @@ var __export = (target, all) => {
 var __esm = (fn, res) => () => (fn && (res = fn(fn = 0)), res);
 
 // src/config.ts
+import { execFileSync } from "node:child_process";
 import { existsSync, mkdirSync, readFileSync, writeFileSync } from "node:fs";
-import { homedir } from "node:os";
+import { homedir, tmpdir } from "node:os";
 import { dirname, join, parse, resolve } from "node:path";
 function resetLegacyNoticesForTest() {
   warnedLegacyConfigDir = false;
   warnedLegacyLocalPin = false;
+  warnedUntrackedLocalPin = false;
 }
 function noteLegacyConfigDir(path) {
   if (warnedLegacyConfigDir)
@@ -32,11 +34,28 @@ function noteLegacyLocalPin(path) {
   if (warnedLegacyLocalPin)
     return;
   warnedLegacyLocalPin = true;
-  console.error(`Harmony: this repo is pinned by ${path}, the pre-#1082 name. ` + `Rename it to ${LOCAL_CONFIG_FILENAME} — the fallback that finds it is temporary.`);
+  console.error(`Harmony: this repo is pinned by ${path}, the pre-#1082 name. ` + `Run \`harmony-agent doctor --fix\` in this repo to write ` + `${LOCAL_CONFIG_FILENAME}, or rename the file yourself. ` + `The fallback that finds it is temporary.`);
 }
 function noteLocalPinRename(from, to) {
   console.error(`Harmony: wrote the repo pin to ${to} (the pre-#1082 ${from} is now ignored and can be deleted).`);
 }
+function noteUntrackedLocalPin(path) {
+  if (warnedUntrackedLocalPin)
+    return;
+  warnedUntrackedLocalPin = true;
+  console.error(`Harmony: ${path} is ignored by git, so it will not travel with a branch — ` + `a fresh clone, and every worktree the agent daemon cuts, will not have it. ` + `Commit it if you want it to describe this repo everywhere.`);
+}
+function isGitIgnored(path) {
+  try {
+    execFileSync("git", ["check-ignore", "--quiet", path], {
+      cwd: dirname(path),
+      stdio: "ignore"
+    });
+    return true;
+  } catch {
+    return false;
+  }
+}
 function getHmyRootDir() {
   return join(homedir(), CONFIG_DIR_NAME);
 }
@@ -151,19 +170,96 @@ function saveLocalConfig(config, cwd) {
   if (foundPath !== null && foundPath !== localConfigPath) {
     noteLocalPinRename(foundPath, localConfigPath);
   }
-  const existingConfig = loadLocalConfig(cwd) || {
-    workspaceId: null,
-    projectId: null
-  };
-  const newConfig = { ...existingConfig, ...config };
-  const cleanConfig = {};
-  if (newConfig.workspaceId)
-    cleanConfig.workspaceId = newConfig.workspaceId;
-  if (newConfig.projectId)
-    cleanConfig.projectId = newConfig.projectId;
-  writeFileSync(localConfigPath, JSON.stringify(cleanConfig, null, 2));
+  const existing = readRawLocalConfig(foundPath ?? localConfigPath);
+  const merged = { ...existing };
+  if ("workspaceId" in config) {
+    if (config.workspaceId)
+      merged.workspaceId = config.workspaceId;
+    else
+      delete merged.workspaceId;
+  }
+  if ("projectId" in config) {
+    if (config.projectId)
+      merged.projectId = config.projectId;
+    else
+      delete merged.projectId;
+  }
+  writeFileSync(localConfigPath, `${JSON.stringify(merged, null, localIndent(localConfigPath))}
+`);
+  if (isGitIgnored(localConfigPath))
+    noteUntrackedLocalPin(localConfigPath);
   return localConfigPath;
 }
+function readRawLocalConfig(path) {
+  let text;
+  try {
+    text = readFileSync(path, "utf-8");
+  } catch {
+    return {};
+  }
+  try {
+    const parsed = JSON.parse(text);
+    if (parsed && typeof parsed === "object" && !Array.isArray(parsed)) {
+      return parsed;
+    }
+  } catch {}
+  noteUnparsableLocalPin(path, text);
+  return {};
+}
+function noteUnparsableLocalPin(path, contents) {
+  let backup = null;
+  try {
+    backup = join(tmpdir(), `hmy-pin-${Date.now()}-${Math.random().toString(36).slice(2, 8)}.json.bak`);
+    writeFileSync(backup, contents);
+  } catch {
+    backup = null;
+  }
+  console.error(`Harmony: ${path} could not be parsed as JSON, so the pin write REPLACED it. ` + (backup ? `The previous contents are in ${backup}.` : "The previous contents could not be backed up and are gone.") + ` If it carried a "commands" block, re-add it.`);
+}
+function localIndent(configPath) {
+  const root = dirname(configPath);
+  for (const name of ["biome.json", "biome.jsonc"]) {
+    const parsed = readJsonish(join(root, name));
+    if (!parsed || typeof parsed !== "object")
+      continue;
+    const formatter = parsed.formatter;
+    if (formatter?.indentStyle === "space") {
+      const width = formatter.indentWidth;
+      return typeof width === "number" && width > 0 ? width : 2;
+    }
+    return "\t";
+  }
+  const editorconfig = readTextSafely(join(root, ".editorconfig"));
+  if (editorconfig) {
+    if (/^\s*indent_style\s*=\s*tab\s*$/im.test(editorconfig))
+      return "\t";
+    const size = editorconfig.match(/^\s*indent_size\s*=\s*(\d+)\s*$/im);
+    if (size) {
+      const width = Number(size[1]);
+      if (width > 0)
+        return width;
+    }
+  }
+  return 2;
+}
+function readJsonish(path) {
+  const text = readTextSafely(path);
+  if (text === null)
+    return null;
+  try {
+    const stripped = text.replace(/^\s*\/\/.*$/gm, "").replace(/,(\s*[}\]])/g, "$1");
+    return JSON.parse(stripped);
+  } catch {
+    return null;
+  }
+}
+function readTextSafely(path) {
+  try {
+    return readFileSync(path, "utf-8");
+  } catch {
+    return null;
+  }
+}
 function hasLocalConfig(cwd) {
   return findLocalConfigPath(cwd) !== null;
 }
@@ -300,7 +396,7 @@ function getMemoryDir() {
     return config.memoryDir;
   return join(homedir(), ".harmony", "memory");
 }
-var DEFAULT_API_URL = "https://app.gethmy.com/api", LOCAL_CONFIG_FILENAME = ".hmy.json", LEGACY_LOCAL_CONFIG_FILENAME = ".harmony-mcp.json", CONFIG_DIR_NAME = ".hmy", CONFIG_DIR_SUBDIR = "agent", LEGACY_CONFIG_DIR_NAME = ".harmony-mcp", warnedLegacyConfigDir = false, warnedLegacyLocalPin = false;
+var DEFAULT_API_URL = "https://app.gethmy.com/api", LOCAL_CONFIG_FILENAME = ".hmy.json", LEGACY_LOCAL_CONFIG_FILENAME = ".harmony-mcp.json", CONFIG_DIR_NAME = ".hmy", CONFIG_DIR_SUBDIR = "agent", LEGACY_CONFIG_DIR_NAME = ".harmony-mcp", warnedLegacyConfigDir = false, warnedLegacyLocalPin = false, warnedUntrackedLocalPin = false;
 var init_config = () => {};
 init_config();
 

package/dist/lib/oauth-refresh.js

@@ -15,12 +15,14 @@ var __export = (target, all) => {
 var __esm = (fn, res) => () => (fn && (res = fn(fn = 0)), res);
 
 // src/config.ts
+import { execFileSync } from "node:child_process";
 import { existsSync, mkdirSync, readFileSync, writeFileSync } from "node:fs";
-import { homedir } from "node:os";
+import { homedir, tmpdir } from "node:os";
 import { dirname, join, parse, resolve } from "node:path";
 function resetLegacyNoticesForTest() {
   warnedLegacyConfigDir = false;
   warnedLegacyLocalPin = false;
+  warnedUntrackedLocalPin = false;
 }
 function noteLegacyConfigDir(path) {
   if (warnedLegacyConfigDir)
@@ -32,11 +34,28 @@ function noteLegacyLocalPin(path) {
   if (warnedLegacyLocalPin)
     return;
   warnedLegacyLocalPin = true;
-  console.error(`Harmony: this repo is pinned by ${path}, the pre-#1082 name. ` + `Rename it to ${LOCAL_CONFIG_FILENAME} — the fallback that finds it is temporary.`);
+  console.error(`Harmony: this repo is pinned by ${path}, the pre-#1082 name. ` + `Run \`harmony-agent doctor --fix\` in this repo to write ` + `${LOCAL_CONFIG_FILENAME}, or rename the file yourself. ` + `The fallback that finds it is temporary.`);
 }
 function noteLocalPinRename(from, to) {
   console.error(`Harmony: wrote the repo pin to ${to} (the pre-#1082 ${from} is now ignored and can be deleted).`);
 }
+function noteUntrackedLocalPin(path) {
+  if (warnedUntrackedLocalPin)
+    return;
+  warnedUntrackedLocalPin = true;
+  console.error(`Harmony: ${path} is ignored by git, so it will not travel with a branch — ` + `a fresh clone, and every worktree the agent daemon cuts, will not have it. ` + `Commit it if you want it to describe this repo everywhere.`);
+}
+function isGitIgnored(path) {
+  try {
+    execFileSync("git", ["check-ignore", "--quiet", path], {
+      cwd: dirname(path),
+      stdio: "ignore"
+    });
+    return true;
+  } catch {
+    return false;
+  }
+}
 function getHmyRootDir() {
   return join(homedir(), CONFIG_DIR_NAME);
 }
@@ -151,19 +170,96 @@ function saveLocalConfig(config, cwd) {
   if (foundPath !== null && foundPath !== localConfigPath) {
     noteLocalPinRename(foundPath, localConfigPath);
   }
-  const existingConfig = loadLocalConfig(cwd) || {
-    workspaceId: null,
-    projectId: null
-  };
-  const newConfig = { ...existingConfig, ...config };
-  const cleanConfig = {};
-  if (newConfig.workspaceId)
-    cleanConfig.workspaceId = newConfig.workspaceId;
-  if (newConfig.projectId)
-    cleanConfig.projectId = newConfig.projectId;
-  writeFileSync(localConfigPath, JSON.stringify(cleanConfig, null, 2));
+  const existing = readRawLocalConfig(foundPath ?? localConfigPath);
+  const merged = { ...existing };
+  if ("workspaceId" in config) {
+    if (config.workspaceId)
+      merged.workspaceId = config.workspaceId;
+    else
+      delete merged.workspaceId;
+  }
+  if ("projectId" in config) {
+    if (config.projectId)
+      merged.projectId = config.projectId;
+    else
+      delete merged.projectId;
+  }
+  writeFileSync(localConfigPath, `${JSON.stringify(merged, null, localIndent(localConfigPath))}
+`);
+  if (isGitIgnored(localConfigPath))
+    noteUntrackedLocalPin(localConfigPath);
   return localConfigPath;
 }
+function readRawLocalConfig(path) {
+  let text;
+  try {
+    text = readFileSync(path, "utf-8");
+  } catch {
+    return {};
+  }
+  try {
+    const parsed = JSON.parse(text);
+    if (parsed && typeof parsed === "object" && !Array.isArray(parsed)) {
+      return parsed;
+    }
+  } catch {}
+  noteUnparsableLocalPin(path, text);
+  return {};
+}
+function noteUnparsableLocalPin(path, contents) {
+  let backup = null;
+  try {
+    backup = join(tmpdir(), `hmy-pin-${Date.now()}-${Math.random().toString(36).slice(2, 8)}.json.bak`);
+    writeFileSync(backup, contents);
+  } catch {
+    backup = null;
+  }
+  console.error(`Harmony: ${path} could not be parsed as JSON, so the pin write REPLACED it. ` + (backup ? `The previous contents are in ${backup}.` : "The previous contents could not be backed up and are gone.") + ` If it carried a "commands" block, re-add it.`);
+}
+function localIndent(configPath) {
+  const root = dirname(configPath);
+  for (const name of ["biome.json", "biome.jsonc"]) {
+    const parsed = readJsonish(join(root, name));
+    if (!parsed || typeof parsed !== "object")
+      continue;
+    const formatter = parsed.formatter;
+    if (formatter?.indentStyle === "space") {
+      const width = formatter.indentWidth;
+      return typeof width === "number" && width > 0 ? width : 2;
+    }
+    return "\t";
+  }
+  const editorconfig = readTextSafely(join(root, ".editorconfig"));
+  if (editorconfig) {
+    if (/^\s*indent_style\s*=\s*tab\s*$/im.test(editorconfig))
+      return "\t";
+    const size = editorconfig.match(/^\s*indent_size\s*=\s*(\d+)\s*$/im);
+    if (size) {
+      const width = Number(size[1]);
+      if (width > 0)
+        return width;
+    }
+  }
+  return 2;
+}
+function readJsonish(path) {
+  const text = readTextSafely(path);
+  if (text === null)
+    return null;
+  try {
+    const stripped = text.replace(/^\s*\/\/.*$/gm, "").replace(/,(\s*[}\]])/g, "$1");
+    return JSON.parse(stripped);
+  } catch {
+    return null;
+  }
+}
+function readTextSafely(path) {
+  try {
+    return readFileSync(path, "utf-8");
+  } catch {
+    return null;
+  }
+}
 function hasLocalConfig(cwd) {
   return findLocalConfigPath(cwd) !== null;
 }
@@ -300,7 +396,7 @@ function getMemoryDir() {
     return config.memoryDir;
   return join(homedir(), ".harmony", "memory");
 }
-var DEFAULT_API_URL = "https://app.gethmy.com/api", LOCAL_CONFIG_FILENAME = ".hmy.json", LEGACY_LOCAL_CONFIG_FILENAME = ".harmony-mcp.json", CONFIG_DIR_NAME = ".hmy", CONFIG_DIR_SUBDIR = "agent", LEGACY_CONFIG_DIR_NAME = ".harmony-mcp", warnedLegacyConfigDir = false, warnedLegacyLocalPin = false;
+var DEFAULT_API_URL = "https://app.gethmy.com/api", LOCAL_CONFIG_FILENAME = ".hmy.json", LEGACY_LOCAL_CONFIG_FILENAME = ".harmony-mcp.json", CONFIG_DIR_NAME = ".hmy", CONFIG_DIR_SUBDIR = "agent", LEGACY_CONFIG_DIR_NAME = ".harmony-mcp", warnedLegacyConfigDir = false, warnedLegacyLocalPin = false, warnedUntrackedLocalPin = false;
 var init_config = () => {};
 
 // src/oauth-login.ts

package/dist/run-hook-cli.js

@@ -588,6 +588,60 @@ var REVIEW_DISALLOWED_TOOLS = [
   "mcp__harmony__harmony_delete_subtask",
   "mcp__harmony__harmony_toggle_subtask"
 ];
+// ../harmony-shared/dist/runEventSanitize.js
+var REPLACEMENT = "�";
+function sanitizeRunEventString(value) {
+  let out = "";
+  for (let i = 0;i < value.length; i++) {
+    const code = value.charCodeAt(i);
+    if (code === 0)
+      continue;
+    if (code >= 55296 && code <= 56319) {
+      const next = value.charCodeAt(i + 1);
+      if (next >= 56320 && next <= 57343) {
+        out += value[i] + value[i + 1];
+        i++;
+        continue;
+      }
+      out += REPLACEMENT;
+      continue;
+    }
+    if (code >= 56320 && code <= 57343) {
+      out += REPLACEMENT;
+      continue;
+    }
+    out += value[i];
+  }
+  return out;
+}
+function sanitizeRunEventPayload(payload) {
+  return walk(payload, new Map);
+}
+function sanitizeRunEventDraft(draft) {
+  return { ...draft, payload: sanitizeRunEventPayload(draft.payload) };
+}
+function walk(value, seen) {
+  if (typeof value === "string")
+    return sanitizeRunEventString(value);
+  if (value === null || typeof value !== "object")
+    return value;
+  const already = seen.get(value);
+  if (already !== undefined)
+    return already;
+  if (Array.isArray(value)) {
+    const out2 = [];
+    seen.set(value, out2);
+    for (const entry of value)
+      out2.push(walk(entry, seen));
+    return out2;
+  }
+  const out = {};
+  seen.set(value, out);
+  for (const [key, entry] of Object.entries(value)) {
+    out[sanitizeRunEventString(key)] = walk(entry, seen);
+  }
+  return out;
+}
 // ../harmony-shared/dist/runRedaction.js
 var MAX_INPUT_CHARS = 2000;
 var MAX_OUTPUT_CHARS = 4000;

package/package.json

@@ -1,7 +1,7 @@
 {
   "name": "@gethmy/mcp",
-  "version": "3.7.0",
-  "description": "MCP server for Harmony, the shared surface for human–agent teams — agents claim cards, report progress, and move work on your board.",
+  "version": "3.9.0",
+  "description": "MCP server for Harmony, the shared surface for human\u2013agent teams \u2014 agents claim cards, report progress, and move work on your board.",
   "publishConfig": {
     "access": "public"
   },