agent-harness-kit 0.7.0 → 0.9.0

package/src/templates/scripts/statusline.mjs

@@ -0,0 +1,63 @@
+#!/usr/bin/env node
+// statusLine — single compact line into Claude Code's TUI status bar.
+// Reads stdin (Claude Code payload), augments with kit state, emits to
+// stdout. Failure mode: print nothing rather than crash.
+
+import { readFileSync, existsSync } from "node:fs";
+import { resolve } from "node:path";
+import { spawnSync } from "node:child_process";
+
+const CWD = process.env.CLAUDE_PROJECT_DIR || process.cwd();
+
+function safeRead(rel) {
+  try { return readFileSync(resolve(CWD, rel), "utf8"); }
+  catch { return null; }
+}
+function safeJSON(rel) {
+  const raw = safeRead(rel);
+  if (!raw) return null;
+  try { return JSON.parse(raw); } catch { return null; }
+}
+function readStdinSync() {
+  try { return readFileSync(0, "utf8"); } catch { return ""; }
+}
+
+function pieces() {
+  const out = [];
+  const lock = safeJSON(".harness/installed.json");
+  if (lock?.version) out.push(`{kit-v${lock.version}}`);
+
+  const features = safeJSON("feature_list.json");
+  if (features?.features && Array.isArray(features.features)) {
+    const open = features.features.find((f) => f.passes === false);
+    out.push(open ? `feat:${open.id}` : "feat:clean");
+  }
+
+  try {
+    const br = spawnSync("git", ["branch", "--show-current"], {
+      cwd: CWD, encoding: "utf8", stdio: ["ignore", "pipe", "ignore"],
+    });
+    const status = spawnSync("git", ["status", "--short"], {
+      cwd: CWD, encoding: "utf8", stdio: ["ignore", "pipe", "ignore"],
+    });
+    if (br.status === 0 && br.stdout.trim()) {
+      const dirty = status.stdout ? status.stdout.split("\n").filter(Boolean).length : 0;
+      out.push(dirty > 0 ? `${br.stdout.trim()}(±${dirty})` : br.stdout.trim());
+    }
+  } catch { /* git not on PATH — skip */ }
+
+  const raw = readStdinSync();
+  let payload = null;
+  if (raw) { try { payload = JSON.parse(raw); } catch { /* ignore */ } }
+  if (payload?.context && typeof payload.context.percentage === "number") {
+    out.push(`ctx:${Math.round(payload.context.percentage)}%`);
+  }
+  if (payload?.cost && typeof payload.cost.total === "number") {
+    const v = payload.cost.total;
+    out.push(`$${v < 1 ? v.toFixed(2) : v.toFixed(1)}`);
+  }
+  return out;
+}
+
+const line = pieces().join(" • ");
+if (line) process.stdout.write(line);

package/src/templates/scripts/subagent-stop.sh.hbs

@@ -0,0 +1,76 @@
+#!/usr/bin/env bash
+# SubagentStop hook — fires when a subagent finishes its turn (Task tool).
+# Triggers the same structural-test that PostToolUse(Edit) runs, because a
+# subagent can edit files in batches that individually pass but jointly drift
+# off-layer. Running the check at subagent boundary catches that drift early.
+#
+# Contract:
+#   - Never blocks (exit 0 even on failure — the parent Stop hook handles the
+#     final gate). We only emit a stderr summary that Claude reads.
+#   - Telemetry append to .harness/telemetry.jsonl as {event:"subagent_stop"}.
+#   - Skipped when harness.config.json#structuralTest.engine === "none" (the
+#     "structural test not yet wired" escape hatch used by polyglot scaffolds).
+set -eo pipefail
+
+INPUT=$(cat)
+SCRIPT_DIR="$(cd "$(dirname "$0")" && pwd)"
+have_jq() {
+  [ "${AHK_DISABLE_JQ:-}" = "1" ] && return 1
+  command -v jq >/dev/null 2>&1
+}
+have_jp() {
+  have_jq && return 0
+  command -v node >/dev/null 2>&1 && [ -f "$SCRIPT_DIR/_lib/json-pick.mjs" ] && return 0
+  return 1
+}
+jp() {
+  if have_jq; then jq -r "$1"
+  else node "$SCRIPT_DIR/_lib/json-pick.mjs" "$1"
+  fi
+}
+
+SUBAGENT="(unknown)"
+if have_jp; then
+  SUBAGENT=$(echo "$INPUT" | jp '.subagent // .session_id // "unknown"' 2>/dev/null || echo "unknown")
+fi
+
+# Telemetry first so we record every subagent boundary, even if the
+# structural-test bails below.
+mkdir -p .harness
+TS=$(date -u +%Y-%m-%dT%H:%M:%SZ)
+SHA=$(git rev-parse --short HEAD 2>/dev/null || echo 'no-git')
+printf '{"ts":"%s","event":"subagent_stop","subagent":"%s","sha":"%s"}\n' \
+  "$TS" "$SUBAGENT" "$SHA" >> .harness/telemetry.jsonl
+
+# Skip if structural test disabled.
+if [ -f harness.config.json ] \
+   && grep -qE '"engine"[[:space:]]*:[[:space:]]*"none"' harness.config.json; then
+  exit 0
+fi
+
+# AHK_HOOK_MODE=warn → log only, don't run.
+if [ "${AHK_HOOK_MODE:-}" = "warn" ]; then
+  exit 0
+fi
+
+# Run structural test workspace-wide. Subagents typically touch multiple
+# files; per-file scoping would miss the cross-file drift case. Cap output
+# to 30 lines on stderr so the parent agent sees the summary without flood.
+RAN=0
+if [ -f harness/structural-check.mjs ] && command -v node >/dev/null 2>&1; then
+  RAN=1
+  if ! node harness/structural-check.mjs 2>&1 | tail -30 >&2; then
+    echo "[ahk] subagent_stop: structural-test reported violations (see above). Continuing — parent Stop hook will gate." >&2
+  fi
+elif command -v npm >/dev/null 2>&1 && [ -f package.json ] \
+     && grep -q '"harness:check"' package.json 2>/dev/null; then
+  RAN=1
+  if ! npm run --silent harness:check 2>&1 | tail -30 >&2; then
+    echo "[ahk] subagent_stop: structural-test reported violations (see above). Continuing — parent Stop hook will gate." >&2
+  fi
+fi
+if [ "$RAN" = "0" ]; then
+  # No structural-test entry point. Skip silently — already logged in telemetry.
+  exit 0
+fi
+exit 0

package/src/templates/scripts/userprompt-guard.sh.hbs

@@ -0,0 +1,100 @@
+#!/usr/bin/env bash
+# UserPromptSubmit hook — denies prompt patterns that undo harness safety
+# rules. Hard guardrail replacing soft CLAUDE.md guidance.
+#
+# Denied patterns:
+#   1. "ignore previous instructions" / "disregard above"
+#   2. "disable the structural test" / "skip the structural check"
+#   3. "bypass the (Stop|PreToolUse|hook) (rules?|checks?)"
+#   4. "remove the .harness" / "delete .harness directory"
+#   5. "set disableAllHooks: true"
+#
+# Escape hatch: AHK_ALLOW_BYPASS=1 logs to .harness/bypass.log + lets through.
+set -eo pipefail
+
+INPUT=$(cat)
+SCRIPT_DIR="$(cd "$(dirname "$0")" && pwd)"
+have_jq() {
+  [ "${AHK_DISABLE_JQ:-}" = "1" ] && return 1
+  command -v jq >/dev/null 2>&1
+}
+have_jp() {
+  have_jq && return 0
+  command -v node >/dev/null 2>&1 && [ -f "$SCRIPT_DIR/_lib/json-pick.mjs" ] && return 0
+  return 1
+}
+jp() {
+  if have_jq; then
+    if [ -n "$2" ]; then jq -r "$1" "$2"; else jq -r "$1"; fi
+  else
+    if [ -n "$2" ]; then
+      node "$SCRIPT_DIR/_lib/json-pick.mjs" "$1" "$2"
+    else
+      node "$SCRIPT_DIR/_lib/json-pick.mjs" "$1"
+    fi
+  fi
+}
+
+if ! have_jp; then
+  exit 0
+fi
+
+PROMPT=$(echo "$INPUT" | jp '.prompt // empty')
+[ -z "$PROMPT" ] && exit 0
+
+LOWER=$(printf '%s' "$PROMPT" | tr '[:upper:]' '[:lower:]')
+
+REASON=""
+
+if printf '%s' "$LOWER" | grep -qE '(ignore|disregard|forget) (the|all|any|your|previous|prior|above)'; then
+  REASON="Prompts that ask Claude to ignore previous instructions defeat the harness's safety rules. State the actual change you need; the structural test and Stop checklist are deterministic and stay enforced."
+fi
+
+if [ -z "$REASON" ] \
+   && printf '%s' "$LOWER" | grep -qE '(disable|skip|turn off|bypass) (the )?(structural|layer|stop hook|stop check|precompletion|lint|harness:check)'; then
+  REASON="Disabling the structural test or Stop checklist is not how the kit is meant to be used. Fix the violation in code, or open an ADR if the layer rule itself needs to change."
+fi
+
+if [ -z "$REASON" ] \
+   && printf '%s' "$LOWER" | grep -qE 'bypass (the )?(pretooluse|posttooluse|sessionstart|sessionend|precompact|hook|hooks|rules?|checks?)'; then
+  REASON="Prompts that ask to bypass kit hooks defeat their purpose. If a specific hook is wrong for your workflow, edit it explicitly with a commit message; do not phrase the request as 'bypass'."
+fi
+
+if [ -z "$REASON" ] \
+   && printf '%s' "$LOWER" | grep -qE '(remove|delete|wipe|rm -rf|drop) (the )?(\.harness|\.claude)( |/|$|\.)'; then
+  REASON="Removing .harness/ or .claude/ deletes the kit's lockfile, structural baseline, skills, agents, and hooks. Use 'agent-harness-kit upgrade' to refresh installed files; do not delete by hand."
+fi
+
+if [ -z "$REASON" ] \
+   && printf '%s' "$LOWER" | grep -qE 'disableallhooks.*true'; then
+  REASON="disableAllHooks: true defeats every protection the kit installs. Remove specific hooks explicitly if needed; do not flip the master switch."
+fi
+
+if [ -z "$REASON" ]; then
+  exit 0
+fi
+
+if [ "${AHK_ALLOW_BYPASS:-}" = "1" ]; then
+  mkdir -p .harness
+  TS=$(date -u +%Y-%m-%dT%H:%M:%SZ)
+  SHA=$(git rev-parse --short HEAD 2>/dev/null || echo 'no-git')
+  ESCAPED_PROMPT=${PROMPT//$'\n'/ }
+  ESCAPED_PROMPT=${ESCAPED_PROMPT//\"/\\\"}
+  printf '{"ts":"%s","sha":"%s","bypass":"AHK_ALLOW_BYPASS","reason":"%s","prompt":"%s","hook":"UserPromptSubmit"}\n' \
+    "$TS" "$SHA" "${REASON//\"/\\\"}" "$ESCAPED_PROMPT" >> .harness/bypass.log
+  exit 0
+fi
+
+if command -v node >/dev/null 2>&1; then
+  node -e "
+    const reason = process.argv[1];
+    const out = { decision: 'block', reason };
+    process.stdout.write(JSON.stringify(out));
+  " "$REASON"
+elif have_jq; then
+  jq -nc --arg r "$REASON" '{decision:"block", reason:$r}'
+else
+  echo "$REASON" >&2
+  exit 2
+fi
+exit 0