@polderlabs/bizar 6.2.4 → 6.3.0

package/install.sh

@@ -1,26 +1,23 @@
 #!/usr/bin/env bash
 #
-# install.sh — Cross-platform BizarHarness installer (v5.x — thin shell wrapper).
+# install.sh — Cross-platform BizarHarness installer (Claude Code).
 #
-# v5.x — Updated for issue #7. The install/update flow now:
-#   1. On first install: registers the system service that auto-starts
-#      the dashboard (`bizar service install`).
-#   2. On update: stops the running service before files are replaced
-#      (`bizar service stop` → npm upgrade → `bizar service restart`).
+# v6.3.0 — Migrated from Cline to Claude Code.
 #
-# Almost all logic still lives in `cli/provision.mjs:runProvision`, which
-# is shared between `bizar install` and `bizar update`. This bash script
-# exists only for the platform-specific steps that need sudo + a system
-# package manager:
+#   1. Detects platform (Linux/macOS/Windows)
+#   2. Installs Node.js 18+, jq, gh, uv, python3 (cross-platform)
+#   3. Installs Claude Code via npm:
+#        npm install -g @anthropic-ai/claude-agent-sdk
+#        npm install -g @anthropic-ai/claude-code
+#   4. Optionally installs agent-browser (Rust native CLI from vercel-labs)
+#   5. Shells out to `node cli/provision-claude.mjs`, which writes the
+#      `~/.claude/` config tree, registers the Bizar MCP server, and
+#      copies agent files / skills / commands / hooks / rules.
 #
-#   - Linux:  ensure node is installed (apt/dnf/pacman/zypper), install uv,
-#             python3.12, jq, gh, agent-browser (npm), Chrome for Testing.
-#   - macOS:  ensure homebrew is installed; everything else is via brew/npm.
-#   - Windows: a stub that prints "use install.ps1".
-#
-# Agent files / plugin copy / cline.json patching / service registration /
-# skills install / doctor check are ALL handled by the unified provisioner
-# after this script returns.
+# Almost all logic still lives in `cli/provision-claude.mjs:runProvision`,
+# which is shared between `bizar install` and `bizar update`. This bash
+# script exists only for the platform-specific steps that need sudo +
+# a system package manager.
 #
 # Flags:
 #   --non-interactive   skip prompts (CI safe)
@@ -72,7 +69,7 @@ MODE="install"
 
 show_usage() {
   cat <<'EOF'
-install.sh — BizarHarness cross-platform installer
+install.sh — BizarHarness cross-platform installer (Claude Code)
 
 Usage:
   ./install.sh                     Interactive install (Linux/macOS)
@@ -84,9 +81,10 @@ Usage:
   ./install.sh --mode=<mode>       install | update | install-only-system
 
 This script handles platform-specific system dependencies (apt/dnf/pacman/
-zypper on Linux, brew on macOS) and then shells to `node cli/provision.mjs`,
-which performs agent-file sync, plugin copy, cline.json patching,
-service registration, skills install, and the post-install doctor check.
+zypper on Linux, brew on macOS) and then shells to
+`node cli/provision-claude.mjs`, which writes ~/.claude/, registers the
+Bizar MCP server, copies agents / skills / commands / hooks / rules,
+and runs the post-install doctor check.
 EOF
 }
 
@@ -159,7 +157,7 @@ ensure_node() {
       action "Detected NixOS — Node.js must be installed via nix-shell"
       warn "Run the following, then re-run this installer:"
       warn "  nix-shell -p nodejs python3 jq gh git"
-      warn "  node cli/provision.mjs"
+      warn "  node cli/provision-claude.mjs"
       exit 0
       ;;
     void)
@@ -175,6 +173,29 @@ ensure_node() {
   note "Node.js installed: $(node --version)"
 }
 
+# ── Claude Code install ────────────────────────────────────────────────────
+install_claude_code() {
+  if have_cmd claude; then
+    note "claude $(claude --version 2>/dev/null | head -1) present"
+  else
+    section "Installing Claude Code"
+    if ! have_cmd npm; then
+      err "npm not available — install Node.js 18+ first: https://nodejs.org/"
+      exit 1
+    fi
+    action "Installing @anthropic-ai/claude-agent-sdk..."
+    dry npm install -g @anthropic-ai/claude-agent-sdk 2>&1 || \
+      warn "claude-agent-sdk install failed — retry later: npm install -g @anthropic-ai/claude-agent-sdk"
+    action "Installing @anthropic-ai/claude-code..."
+    dry npm install -g @anthropic-ai/claude-code 2>&1
+    if have_cmd claude; then
+      note "claude $(claude --version 2>/dev/null | head -1) installed"
+    else
+      warn "claude CLI not found on PATH after install — check npm global bin dir"
+    fi
+  fi
+}
+
 # ── Dependency detection + install (cross-platform) ────────────────────────
 check_deps() {
   section "Checking dependencies"
@@ -194,7 +215,7 @@ install_agent_browser() {
   # the v5.x browser-harness (Python CDP wrapper). Installs via npm.
   #
   # If npm is not available, this is a soft-fail: agent-browser is
-  # optional, and `cli/provision.mjs:ensureAgentBrowser` will retry it
+  # optional, and `cli/provision-claude.mjs:ensureAgentBrowser` will retry it
   # once npm is available.
   if have_cmd agent-browser; then
     local ab_ver
@@ -305,7 +326,7 @@ install_missing_deps_linux() {
       warn "NixOS detected — LightRAG and other uv tools require manual setup"
       warn "  After nix-shell: nix-shell -p nodejs python3 jq gh git"
       warn "  Then run: uv tool install \"lightrag-hku[api]\""
-      warn "  And re-run this installer: node cli/provision.mjs"
+      warn "  And re-run this installer: node cli/provision-claude.mjs"
       return 0
       ;;
   esac
@@ -337,15 +358,13 @@ install_service() {
   # We still call it from here because the bash script may run standalone
   # (e.g. for first-boot provisioning before the npm package is set up).
   #
-  # v5.x — issue #7: On first install, register the service so the
-  # dashboard auto-starts at login. On update, the running service is
-  # stopped by the provisioner before files are replaced, then restarted
-  # by the provisioner after — see cli/provision.mjs. This function
-  # covers the FIRST install path only.
+  # v6.3.0 — Claude Code does NOT have an out-of-process "server" the way
+  # Cline did, so we skip `bizar service install` here. The dashboard
+  # (bizar-dash) is launched via `bizar dash start --bg` instead.
   local bin="$REPO_DIR/cli/bin.mjs"
   if [ ! -f "$bin" ]; then
     warn "cli/bin.mjs not found — service registration deferred"
-    warn "    (will complete when `bizar service install` is run later)"
+    warn "    (will complete when \`bizar service install\` is run later)"
     return 0
   fi
   if [ "$DRY_RUN" -eq 1 ]; then
@@ -369,15 +388,15 @@ print_banner() {
   section "Install complete"
   echo ""
   echo -e "${BOLD}${CYAN}┌────────────────────────────────────────────────────────────┐${NC}"
-  echo -e "${BOLD}${CYAN}│${NC}  ${BOLD}BizarHarness ready.${NC}                                             │"
+  echo -e "${BOLD}${CYAN}│${NC}  ${BOLD}BizarHarness ready (Claude Code).${NC}                          │"
   echo -e "${BOLD}${CYAN}│${NC}                                                          │"
-  echo -e "${BOLD}${CYAN}│${NC}  ${GREEN}✓${NC} Cross-platform installer v4.4.7                             │"
+  echo -e "${BOLD}${CYAN}│${NC}  ${GREEN}✓${NC} Cross-platform installer v6.3.0                             │"
   echo -e "${BOLD}${CYAN}│${NC}                                                          │"
   echo -e "${BOLD}${CYAN}│${NC}  Dashboard: ${CYAN}$dashboard_url${NC}                                    │"
   echo -e "${BOLD}${CYAN}│${NC}                                                          │"
   echo -e "${BOLD}${CYAN}│${NC}  ${DIM}Next:${NC}                                                            │"
-  echo -e "${BOLD}${CYAN}│${NC}  ${DIM}  1. Restart cline to pick up new config${NC}                     │"
-  echo -e "${BOLD}${CYAN}│${NC}  ${DIM}  2. Run /connect in cline to add API keys${NC}                   │"
+  echo -e "${BOLD}${CYAN}│${NC}  ${DIM}  1. Restart claude to pick up new config${NC}                   │"
+  echo -e "${BOLD}${CYAN}│${NC}  ${DIM}  2. Run \`claude auth login\` to add API keys${NC}                 │"
   echo -e "${BOLD}${CYAN}│${NC}  ${DIM}  3. Run 'bizar dash start' to launch the dashboard${NC}             │"
   echo -e "${BOLD}${CYAN}│${NC}  ${DIM}  4. Visit $dashboard_url in your browser${NC}                │"
   echo -e "${BOLD}${CYAN}└────────────────────────────────────────────────────────────┘${NC}"
@@ -393,6 +412,7 @@ install_linux() {
   note "Detected Linux ($(uname -m))"
   ensure_node
   check_deps
+  install_claude_code
   install_missing_deps_linux
   install_agent_browser
   install_service
@@ -402,6 +422,7 @@ install_macos() {
   note "Detected macOS ($(uname -m))"
   check_deps
   install_missing_deps_macos
+  install_claude_code
   install_agent_browser
   install_service
 }
@@ -417,7 +438,7 @@ main() {
   fi
 
   echo ""
-  echo -e "${BOLD}${CYAN}  ⚡ BizarHarness Installer v6.0.0${NC}"
+  echo -e "${BOLD}${CYAN}  ⚡ BizarHarness Installer v6.3.0 (Claude Code)${NC}"
   if [ "$UPDATE_MODE" -eq 1 ]; then
     echo -e "  ${DIM}Update mode${NC}"
   fi
@@ -441,16 +462,17 @@ main() {
   esac
 
   # ── Hand off to the unified provisioner (Node) ─────────────────────────
-  # All cross-OS work (agent files, plugin copy, cline.json patching,
-  # skills install, doctor check) lives in `cli/provision.mjs:runProvision`.
-  # It's idempotent — skipping it (e.g. via --install-only-system) is fine
-  # for first-boot scenarios where the npm package isn't yet set up.
+  # All cross-OS work (agent files, command copy, ~/.claude/ settings,
+  # MCP server registration, skills/rules/hooks mirror) lives in
+  # `cli/provision-claude.mjs:runProvision`. It's idempotent — skipping
+  # it (e.g. via --install-only-system) is fine for first-boot scenarios
+  # where the npm package isn't yet set up.
   if [ "$MODE" = "install-only-system" ]; then
     note "skipped node provisioner (--mode=install-only-system)"
     exit 0
   fi
 
-  if [ -f "$REPO_DIR/cli/provision.mjs" ]; then
+  if [ -f "$REPO_DIR/cli/provision-claude.mjs" ]; then
     echo ""
     section "Running unified provisioner"
     local args=(--mode "$MODE")
@@ -459,7 +481,7 @@ main() {
     [ "$NON_INTERACTIVE" -eq 1 ] && args+=(--yes)
     # `set +e` so we capture the provisioner's exit code and surface it.
     set +e
-    node "$REPO_DIR/cli/provision.mjs" "${args[@]}"
+    node "$REPO_DIR/cli/provision-claude.mjs" "${args[@]}"
     local rc=$?
     set -e
     if [ "$rc" -ne 0 ]; then
@@ -468,9 +490,9 @@ main() {
     fi
     print_banner
   else
-    warn "cli/provision.mjs not found — agent files / plugin / cline.json"
+    warn "cli/provision-claude.mjs not found — agent files / MCP / settings.json"
     warn "    were NOT synced. Run \`bizar install\` from a checkout to fix."
   fi
 }
 
-main "$@"
+main "$@"

package/package.json

@@ -1,7 +1,7 @@
 {
   "name": "@polderlabs/bizar",
-  "version": "6.2.4",
-  "description": "Norse-pantheon multi-agent system for cline — 13 agents across 4 cost tiers with cost-aware routing, plans, and a configurable agent harness. v4 ships as a single npm package bundling the dashboard server, cline plugin, and typed SDK.",
+  "version": "6.3.0",
+  "description": "Norse-pantheon multi-agent system for Claude Code — 14 agents across 4 cost tiers with cost-aware routing, plans, and a configurable agent harness. Ships as a single npm package with the dashboard server, Claude Code MCP server, and typed SDK.",
   "type": "module",
   "bin": {
     "bizar": "cli/bin.mjs"
@@ -9,13 +9,12 @@
   "files": [
     "cli/",
     "bizar-dash/",
-    "plugins/",
     "packages/sdk/",
+    ".claude/",
     "config/",
     "templates/",
     "scripts/",
-    "install.sh",
-    "cli/browser-harness-up.sh"
+    "install.sh"
   ],
   "scripts": {
     "typecheck": "tsc --noEmit",
@@ -24,12 +23,13 @@
     "test:sdk": "node_modules/.bin/vitest run --root packages/sdk",
     "test:web": "cd bizar-dash && npx vitest run",
     "test:sdk:watch": "node_modules/.bin/vitest --root packages/sdk",
-    "test": "npm run typecheck && npm run test:sdk && node --test cli/install.test.mjs cli/provision.test.mjs cli/commands/validate.test.mjs cli/commands/setup-provider.test.mjs cli/commands/rca.test.mjs && bun test plugins/bizar/tests/loop.test.ts plugins/bizar/tests/block.test.ts plugins/bizar/tests/stall-think.test.ts plugins/bizar/tests/tools/bg-get-comments.test.ts plugins/bizar/tests/tools/bg-spawn-delegation.test.ts plugins/bizar/tests/tools/cline-runner.test.ts plugins/bizar/tests/settings.test.ts plugins/bizar/tests/commands.test.ts plugins/bizar/tests/commands-impl.test.ts plugins/bizar/tests/tools/plan-action.test.ts plugins/bizar/tests/tools/wait-for-feedback.test.ts plugins/bizar/tests/tools/read-glyph-feedback.test.ts plugins/bizar/tests/reasoning-clean.test.ts plugins/bizar/tests/key-rotation.test.ts && node bizar-dash/tests/smoke-v2.mjs && node --test bizar-dash/tests/path-safe.test.mjs bizar-dash/tests/tmux-wrap.test.mjs bizar-dash/tests/cline-sessions-detail.test.mjs bizar-dash/tests/cline-runner.test.mjs bizar-dash/tests/mod-instructions.node.test.mjs bizar-dash/tests/mod-upgrade.node.test.mjs bizar-dash/tests/graphify-mod-spawn.node.test.mjs bizar-dash/tests/no-agent-browser.node.test.mjs bizar-dash/tests/providers-store-backup-keys.node.test.mjs bizar-dash/tests/dashboard-ports.test.mjs bizar-dash/tests/submit-feedback.test.mjs bizar-dash/tests/yaml.test.mjs bizar-dash/tests/memory-store.test.mjs bizar-dash/tests/memory-schema.test.mjs bizar-dash/tests/memory-secrets.test.mjs bizar-dash/tests/memory-git.test.mjs bizar-dash/tests/memory-sync.test.mjs bizar-dash/tests/obsidian-back-compat.test.mjs bizar-dash/tests/memory-lightrag.test.mjs bizar-dash/tests/memory-config.test.mjs bizar-dash/tests/memory-cli.test.mjs bizar-dash/tests/memory-cli-readlistdelete.test.mjs bizar-dash/tests/memory-cli-setup.test.mjs bizar-dash/tests/memory-conflicts.test.mjs bizar-dash/tests/memory-namespace.test.mjs bizar-dash/tests/memory-path-safety.test.mjs bizar-dash/tests/memory-protocol-drift.test.mjs bizar-dash/tests/memory-roundtrip.test.mjs bizar-dash/tests/cli-bugfixes.test.mjs bizar-dash/tests/server-bugfixes.test.mjs bizar-dash/tests/frontend-bugfixes.test.mjs",
+    "test": "npm run typecheck && npm run test:sdk && node --test cli/install.test.mjs cli/provision.test.mjs cli/commands/setup-provider.test.mjs cli/commands/rca.test.mjs && node --test bizar-dash/tests/path-safe.test.mjs",
     "build": "npm run build:sdk && npm run build:dash",
     "prepublishOnly": "npm run build"
   },
   "keywords": [
-    "cline",
+    "claude-code",
+    "claude-agent-sdk",
     "ai-agent",
     "norse",
     "multi-agent",
@@ -37,7 +37,8 @@
     "cli",
     "platform",
     "mods",
-    "schedules"
+    "schedules",
+    "mcp"
   ],
   "license": "MIT",
   "engines": {
@@ -45,6 +46,7 @@
     "bun": ">=1.1.0"
   },
   "dependencies": {
+    "@polderlabs/bizar-sdk": "^0.4.0",
     "@mdx-js/mdx": "^3.1.1",
     "@mdx-js/react": "^3.1.1",
     "@opentelemetry/api": "^1.9.1",
@@ -77,8 +79,14 @@
     "ws": "^8.18.0",
     "zod": "4.1.8"
   },
-  "peerDependencies": {},
-  "peerDependenciesMeta": {},
+  "peerDependencies": {
+    "@anthropic-ai/claude-agent-sdk": "*"
+  },
+  "peerDependenciesMeta": {
+    "@anthropic-ai/claude-agent-sdk": {
+      "optional": true
+    }
+  },
   "devDependencies": {
     "@testing-library/jest-dom": "^6.9.1",
     "@testing-library/react": "^16.3.2",
@@ -108,6 +116,6 @@
   },
   "homepage": "https://github.com/DrB0rk/BizarHarness#readme",
   "optionalDependencies": {
-    "@cline/sdk": "^0.0.58"
+    "@anthropic-ai/claude-agent-sdk": "^0.1.0"
   }
 }

package/packages/sdk/ARCHITECTURE.md

@@ -1,66 +1,70 @@
 # packages/sdk/ — Architecture
 
-> TypeScript SDK wrapper for the Bizar Harness. Provides typed
-> access to Cline events and HTTP responses. The plugin (Layer 0)
-> embeds ClineCore in-process and does NOT use this SDK; the
-> dashboard's HTTP client uses this SDK for legacy compat.
+> TypeScript SDK for the Bizar Harness. Provides the Claude Code MCP
+> server, memory vault, dangerous-pattern scanner, tool-call fingerprint,
+> and shared helpers consumed by both the dashboard and the runtime.
+> This is the only entry point into Bizar for Claude Code; the legacy
+> Cline plugin runtime has been removed (v6.3.0).
 
 ## Top-level layout
 
 ```
 packages/sdk/
 ├── src/
-│   ├── cline.ts                   # HTTP client (legacy compat)
-│   ├── cline-events.ts            # Event shape definitions
-│   ├── cline-types.ts             # Type definitions
-│   ├── client.ts                  # Higher-level client wrapper
-│   ├── errors.ts                  # Discriminated error model
-│   ├── events.ts                  # Event stream helpers
-│   ├── index.ts                   # Public API surface
-│   ├── types.ts                   # Shared types
-│   └── version.ts                 # SDK version constant
-├── tests/
-│   ├── client.test.ts             # vitest
-│   ├── errors.test.ts
-│   └── events.test.ts
+│   ├── index.ts                   # Public API surface (re-exports)
+│   ├── mcp/
+│   │   ├── server.ts              # createBizarMcpServer / BIZAR_TOOLS
+│   │   └── bin.ts                 # stdio MCP server entry (bizar-mcp)
+│   ├── memory/
+│   │   └── index.ts               # Obsidian-compatible vault helpers
+│   ├── dangerous-patterns.ts      # 36-pattern destructive-command scanner
+│   └── fingerprint.ts             # Tool-call fingerprint (SHA256)
 └── package.json
 ```
 
 ## Public contract
 
 ```ts
-import { ClineSdk, parseEvent, isBizarError } from "@polderlabs/bizar-sdk";
-
-const sdk = new ClineSdk({ baseUrl: "http://127.0.0.1:4321", password });
-const events = await sdk.events.subscribe({ sessionID });
-for await (const event of events) {
-  if (isBizarError(event)) console.error("error:", event);
-  else console.log("event:", parseEvent(event));
-}
+import {
+  // Memory vault (Obsidian-compatible markdown)
+  readNote, writeNote, listNotes, searchNotes,
+  // Dangerous-pattern scanner
+  checkDangerous, listDangerousPatterns,
+  // Tool-call fingerprint
+  fingerprint,
+  // MCP server (Claude Code's only path into the SDK)
+  createBizarMcpServer, BIZAR_TOOLS,
+} from "@polderlabs/bizar-sdk";
 ```
 
 ## Key invariants
 
-- SDK is HTTP-only (legacy compat). New code uses `@cline/core`
-  in-process for both plugin and dashboard.
-- Discriminated error model via `isBizarError(event)`.
-- Event shapes are versioned (current: `runtime.team.progress.v1`).
-- Tests use vitest (`bun test` doesn't pick them up — see
-  test files for vitest config).
+- This package is consumed **only** by the `bizar-mcp` stdio binary
+  (registered in `~/.claude/settings.json`) and by `plugins/bizar`
+  (back-compat shim that re-exports the SDK surface).
+- Claude Code has no in-process plugin API; MCP servers are the
+  sole integration path. Anything that previously required Cline's
+  `AgentPlugin` is now expressed as MCP tools or skills.
+- Memory vault is plain markdown with YAML frontmatter; the SDK
+  provides typed read/write/list/search so the dashboard, hooks,
+  and MCP tools all use the same backend.
+- Discriminated error model for memory + dangerous-pattern results
+  (`{ ok: true, data } | { ok: false, error }`).
 
 ## Versioning
 
 - `@polderlabs/bizar-sdk` follows semver.
-- Beta releases: `0.x.0-beta.N` (e.g. `0.2.0-beta.4`).
-- Stable releases: `0.x.0` once v0.2 stabilizes.
+- Current: `0.4.0` (Claude Code-native; MCP-first).
 
 ## Verification
 
-- `make check` — TS compile + tests (incl. vitest)
-- `make e2e` — SDK wrapper integration (plugin ↔ dashboard
-  roundtrip)
+- `make check` — TS compile + vitest
+- `make test` — vitest over the SDK
+- `bun run packages/sdk/src/mcp/bin.ts` — smoke test the MCP server
 
 ## See also
 
 - [docs/architecture.md](../../docs/architecture.md) — layer model
 - [@polderlabs/bizar-sdk on npm](https://www.npmjs.com/package/@polderlabs/bizar-sdk)
+- [docs/migration-guide.md](../../docs/migration-guide.md) — v6.3.0
+  Claude Code migration

package/packages/sdk/package-lock.json

@@ -0,0 +1,32 @@
+{
+  "name": "@polderlabs/bizar-sdk",
+  "version": "0.4.0",
+  "lockfileVersion": 3,
+  "requires": true,
+  "packages": {
+    "": {
+      "name": "@polderlabs/bizar-sdk",
+      "version": "0.4.0",
+      "dependencies": {
+        "zod": "^3.23.0"
+      },
+      "peerDependencies": {
+        "@anthropic-ai/claude-agent-sdk": "*"
+      },
+      "peerDependenciesMeta": {
+        "@anthropic-ai/claude-agent-sdk": {
+          "optional": true
+        }
+      }
+    },
+    "node_modules/zod": {
+      "version": "3.25.76",
+      "resolved": "https://registry.npmjs.org/zod/-/zod-3.25.76.tgz",
+      "integrity": "sha512-gzUt/qt81nXsFGKIFcC3YnfEAx5NkunCfnDlvuBSSFS02bcXu4Lmea0AFIUwbLWxWPx3d9p8S5QoaujKcNQxcQ==",
+      "license": "MIT",
+      "funding": {
+        "url": "https://github.com/sponsors/colinhacks"
+      }
+    }
+  }
+}

package/packages/sdk/package.json

@@ -1,20 +1,30 @@
 {
   "name": "@polderlabs/bizar-sdk",
-  "version": "0.3.3",
+  "version": "0.4.0",
   "type": "module",
   "main": "./dist/index.js",
   "types": "./dist/index.d.ts",
+  "bin": {
+    "bizar-mcp": "dist/mcp/bin.js"
+  },
   "exports": {
     ".": "./dist/index.js",
-    "./cline": "./dist/cline.js"
+    "./memory": "./dist/memory/index.js",
+    "./mcp": "./dist/mcp/server.js",
+    "./dangerous-patterns": "./dist/dangerous-patterns.js"
   },
-  "files": ["dist"],
+  "files": [
+    "dist"
+  ],
   "peerDependencies": {
-    "@cline/sdk": "*"
+    "@anthropic-ai/claude-agent-sdk": "*"
   },
   "peerDependenciesMeta": {
-    "@cline/sdk": {
+    "@anthropic-ai/claude-agent-sdk": {
       "optional": true
     }
+  },
+  "dependencies": {
+    "zod": "^3.23.0"
   }
 }

package/{plugins/bizar → packages/sdk}/src/dangerous-patterns.ts

@@ -5,20 +5,10 @@
  * + OpenFang `crates/openfang-skills/src/verify.rs` + OpenClaw
  * `src/security/external-content.ts:28-43`.
  *
- * Detects dangerous commands and blocks/requires approval before
- * tool execution. Every tool that takes a "command" or "path"
- * argument runs through `checkDangerous()` before being dispatched.
- *
- * Categories:
- *   - Filesystem destruction (rm -rf, mkfs, dd, fork bombs)
- *   - Privilege escalation (sudo, su, chmod 777, chown)
- *   - Network exfiltration (curl to metadata, wget, nc backdoors)
- *   - Process control (kill -9 1, pkill, shutdown)
- *   - Crypto mining (xmrig, minerd)
- *   - Path traversal in file paths (../../etc/passwd, ~/.ssh/)
- *
- * v6.0.0 — initial patterns. Tuned to catch the common exploits
- * without false positives on legitimate dev work.
+ * Detects dangerous commands and blocks/requires approval before tool
+ * execution. Every tool that takes a "command" or "path" argument runs
+ * through `checkDangerous()` before being dispatched. Framework-agnostic
+ * — used by both the SDK MCP server and any Claude Code hook scripts.
  */
 
 export type ApprovalDecision = "allow" | "require-approval" | "deny";
@@ -30,8 +20,6 @@ export interface ApprovalCheck {
   pattern?: string;
 }
 
-// 30+ patterns from Hermes + OpenFang + OpenClaw. Catches the common
-// dangerous operations in coding-agent contexts.
 const DANGEROUS_PATTERNS: Array<{ name: string; pattern: RegExp; decision: ApprovalDecision; reason: string }> = [
   // Filesystem destruction
   { name: "rm-rf-root", pattern: /\brm\s+(-\w*r\w*f\w*\s+)*\/\s*$/i, decision: "deny", reason: "Recursive delete of root filesystem" },
@@ -62,10 +50,10 @@ const DANGEROUS_PATTERNS: Array<{ name: string; pattern: RegExp; decision: Appro
   { name: "shutdown", pattern: /\b(shutdown|halt|poweroff|reboot)\b/i, decision: "deny", reason: "System shutdown" },
   { name: "init-0", pattern: /\binit\s+0\b/i, decision: "deny", reason: "init 0 (shutdown)" },
 
-  // Crypto mining (common malware)
+  // Crypto mining
   { name: "xmrig", pattern: /\b(xmrig|minerd|cpuminer|cgminer)\b/i, decision: "deny", reason: "Crypto miner" },
 
-  // Package management (often exploited)
+  // Package management
   { name: "pip-install-shell", pattern: /\bpip\s+install\s+.*\|\s*(ba)?sh\b/i, decision: "deny", reason: "pip install piped to shell" },
   { name: "npm-install-shell", pattern: /\bnpm\s+install\s+.*\|\s*(ba)?sh\b/i, decision: "deny", reason: "npm install piped to shell" },
 
@@ -90,15 +78,7 @@ const DANGEROUS_PATTERNS: Array<{ name: string; pattern: RegExp; decision: Appro
   { name: "system-prompt-leak", pattern: /reveal\s+(your\s+)?system\s+prompt/i, decision: "deny", reason: "Prompt extraction attempt" },
 ];
 
-/**
- * Check a tool call's arguments for dangerous patterns.
- * Returns a decision (allow / require-approval / deny) and a reason.
- *
- * The check is applied to the union of all string-typed arguments,
- * so the caller doesn't need to know which arg is the "command".
- */
 export function checkDangerous(args: Record<string, unknown>): ApprovalCheck {
-  // Collect all string values from the args object
   const text = collectStrings(args);
   if (!text) return { decision: "allow" };
 
@@ -128,12 +108,10 @@ function collectStrings(value: unknown, parts: string[] = []): string {
   return parts.join("\n");
 }
 
-/** Get all pattern names (for audit / reporting). */
 export function listDangerousPatterns(): string[] {
   return DANGEROUS_PATTERNS.map((p) => p.name);
 }
 
-/** Count of patterns in each category. */
 export function getDangerousPatternStats(): {
   total: number;
   deny: number;