@osfactory/har 0.49.0 → 0.49.2

package/dist/index.js

@@ -28694,6 +28694,10 @@ var init_control_config = __esm({
 });
 
 // src/utils/shell.ts
+function quoteShellArg(arg) {
+  if (/^[A-Za-z0-9_./:=+-]+$/.test(arg)) return arg;
+  return `'${arg.replace(/'/g, `'\\''`)}'`;
+}
 function run(command2, options = {}) {
   try {
     const stdout = (0, import_child_process.execSync)(command2, {
@@ -29055,10 +29059,6 @@ var init_slot_registry = __esm({
 });
 
 // src/core/local-executor.ts
-function quoteShellArg(arg) {
-  if (/^[A-Za-z0-9_./:=+-]+$/.test(arg)) return arg;
-  return `'${arg.replace(/'/g, `'\\''`)}'`;
-}
 function buildLaunchFlagArgs(flags) {
   const args = [];
   if (flags.worktree === false) args.push("--no-worktree");
@@ -31227,11 +31227,11 @@ function buildTelemetryEnvBlock(attrs) {
   const lines2 = [
     "",
     "# HAR session attribution (generated)",
-    `HAR_SESSION_KEY=${attrs.sessionKey}`,
-    ...attrs.workUnitId ? [`HAR_WORK_UNIT_ID=${attrs.workUnitId}`] : [],
-    ...attrs.attemptId ? [`HAR_ATTEMPT_ID=${attrs.attemptId}`] : [],
-    `HAR_CONTROL_API_URL=${apiUrl}`,
-    `OTEL_RESOURCE_ATTRIBUTES=${buildOtelResourceAttributes(attrs)}`,
+    `HAR_SESSION_KEY=${quoteShellArg(attrs.sessionKey)}`,
+    ...attrs.workUnitId ? [`HAR_WORK_UNIT_ID=${quoteShellArg(attrs.workUnitId)}`] : [],
+    ...attrs.attemptId ? [`HAR_ATTEMPT_ID=${quoteShellArg(attrs.attemptId)}`] : [],
+    `HAR_CONTROL_API_URL=${quoteShellArg(apiUrl)}`,
+    `OTEL_RESOURCE_ATTRIBUTES=${quoteShellArg(buildOtelResourceAttributes(attrs))}`,
     "# Agent telemetry: @osfactory/otel-hook \u2192 Mission Control (har telemetry on|off)"
   ];
   return lines2.join("\n") + "\n";
@@ -31264,6 +31264,7 @@ var init_telemetry_env = __esm({
     fs20 = __toESM(require("fs"));
     path21 = __toESM(require("path"));
     init_control_config();
+    init_shell();
     TELEMETRY_MARKER_START = "# HAR session attribution (generated)";
     TELEMETRY_MARKER_END = "# end HAR telemetry";
   }

package/dist/templates/har-boilerplate-ios/CLAUDE.agent.md

@@ -60,8 +60,8 @@ source .env.agent.${AGENT_ID}
 # Build
 xcodebuild build -scheme MyApp -destination "$HARNESS_IOS_DESTINATION" CODE_SIGNING_ALLOWED=NO
 
-# Run unit tests
-xcodebuild test -scheme MyApp -destination "$HARNESS_IOS_DESTINATION" CODE_SIGNING_ALLOWED=NO
+# Run unit tests — signed, or an app with entitlements traps at launch
+xcodebuild test -scheme MyApp -destination "$HARNESS_IOS_DESTINATION"
 
 # Install and launch on this slot's device
 ./.har/agent-cli.sh ${AGENT_ID} install path/to/MyApp.app

package/dist/templates/har-boilerplate-ios/verify.sh

@@ -118,6 +118,8 @@ process.stdout.write(JSON.stringify(arr));
 }
 
 # Quick (default): compile-only — use XCODEBUILD_BIN from .env.agent.<id> (written by launch)
+# Nothing is installed or run, so CODE_SIGNING_ALLOWED=NO keeps the smoke build
+# from needing a signing identity.
 run_step "build" '${XCODEBUILD_BIN:-xcodebuild} build \
   ${XC_FLAGS} \
   -scheme "${XC_SCHEME}" \
@@ -133,18 +135,20 @@ run_step "build" '${XCODEBUILD_BIN:-xcodebuild} build \
 
 if [ -n "$FULL" ]; then
   # Full: project-specific checks — add/remove/reorder steps for this repo.
+  # No CODE_SIGNING_ALLOWED=NO here, unlike the build step: tests install and run
+  # the host app on the simulator, and an unsigned app gets no entitlements. Apps
+  # using CloudKit, NSUbiquitousKeyValueStore, or push then trap at launch, before
+  # the test harness connects — the whole bundle is lost, not one test.
   run_step "unit-tests" '${XCODEBUILD_BIN:-xcodebuild} test \
     ${XC_FLAGS} \
     -scheme "${XC_SCHEME}" \
     -destination "${XC_DESTINATION}" \
     -derivedDataPath "${XC_DERIVED}" \
-    CODE_SIGNING_ALLOWED=NO \
     | xcbeautify 2>/dev/null || ${XCODEBUILD_BIN:-xcodebuild} test \
       ${XC_FLAGS} \
       -scheme "${XC_SCHEME}" \
       -destination "${XC_DESTINATION}" \
-      -derivedDataPath "${XC_DERIVED}" \
-      CODE_SIGNING_ALLOWED=NO' || true
+      -derivedDataPath "${XC_DERIVED}"' || true
 
   # SwiftLint — optional, skip gracefully when not installed
   run_step "lint" "command -v \"${HARNESS_SWIFTLINT_CMD:-swiftlint}\" >/dev/null 2>&1 && \

package/package.json

@@ -1,6 +1,6 @@
 {
   "name": "@osfactory/har",
-  "version": "0.49.0",
+  "version": "0.49.2",
   "description": "Open harness for reproducible multi-agent coding workflows",
   "keywords": [
     "har",