@zhivex-ai/harness 1.4.0 → 1.5.0

package/dist/{index-5jhgatga.js → index-vvzc5ezz.js}

@@ -1,19 +1,19 @@
 import {
   createHarnessClientAdapter
-} from "./index-937cb7y8.js";
+} from "./index-vc7yxz50.js";
 import {
   harnessPolicyDecisionEventSchema
-} from "./index-pp474137.js";
+} from "./index-bt2p8x7r.js";
 import {
   openCliSessionStore
-} from "./index-s2k2edts.js";
+} from "./index-fqqz1yt8.js";
 import {
   SqliteDatabase
-} from "./index-m34q25jj.js";
+} from "./index-6dxrbnxm.js";
 import {
   harnessClientRequestSchema,
   streamEventDocument
-} from "./index-nmjdwd4p.js";
+} from "./index-4gt045j0.js";
 import {
   __require
 } from "./index-1bx83sw4.js";
@@ -378,7 +378,7 @@ var startHarnessLocalService = async (harness, options) => {
       }
       const parsed = harnessClientRequestSchema.safeParse(value);
       const method = parsed.success ? parsed.data.command.method : undefined;
-      const mutation = method !== undefined && !["project.get", "policy.get", "session.list", "session.get", "run.get", "checkpoint.list", "checkpoint.inspect", "restore.get"].includes(method);
+      const mutation = method !== undefined && !["task.get", "task.review", "project.get", "policy.get", "session.list", "session.get", "run.get", "checkpoint.list", "checkpoint.inspect", "restore.get"].includes(method);
       if (paused && mutation && method !== "run.cancel")
         return send(res, 503, fault("SERVICE_PAUSED"));
       if (mutation)
@@ -424,6 +424,7 @@ var startHarnessLocalService = async (harness, options) => {
       ...options.retentionMs === undefined ? {} : { retentionMs: options.retentionMs }
     });
     adapter = await createHarnessClientAdapter(harness, {
+      taskProjectionSensitiveValues: [token, ...options.sensitiveValues ?? [], ...Object.entries(process.env).filter(([k, v]) => /(?:API_KEY|TOKEN|SECRET|PASSWORD)$/.test(k) && v && v.length >= 8).map(([, v]) => v)],
       ...options.approvalNow ? { now: options.approvalNow } : {},
       onPolicyDecision: (sessionId, runId, event) => activity.policyDecision(sessionId, runId, event),
       onPrompt: async (sessionId, runId, prompt) => {