harborloop 0.5.6 → 0.5.7
This diff represents the content of publicly available package versions that have been released to one of the supported registries. The information contained in this diff is provided for informational purposes only and reflects changes between package versions as they appear in their respective public registries.
- package/README.md +34 -4
- package/bin/checksums.json +7 -7
- package/package.json +7 -7
package/README.md
CHANGED
|
@@ -37,7 +37,7 @@ Create a workspace agent key in Harbor's settings, then give the environment
|
|
|
37
37
|
this setup script:
|
|
38
38
|
|
|
39
39
|
```
|
|
40
|
-
HARBOR_AGENT_KEY=<your key> npx -y harborloop@0.5.
|
|
40
|
+
HARBOR_AGENT_KEY=<your key> npx -y harborloop@0.5.7 init --headless
|
|
41
41
|
```
|
|
42
42
|
|
|
43
43
|
The key goes on the line itself. Claude Code on the web does not pass the
|
|
@@ -53,7 +53,7 @@ If the setup script runs inside a repo that has its own package named
|
|
|
53
53
|
`harborloop`, `npx` picks that one up instead. Install it globally there:
|
|
54
54
|
|
|
55
55
|
```
|
|
56
|
-
npm i -g harborloop@0.5.
|
|
56
|
+
npm i -g harborloop@0.5.7 && HARBOR_AGENT_KEY=<your key> harbor init --headless
|
|
57
57
|
```
|
|
58
58
|
|
|
59
59
|
`init --headless` wires Claude Code with the key: the MCP entry, the hooks, the
|
|
@@ -67,8 +67,38 @@ schedules the daemon. It prints one line and exits 0 whatever happens, so a
|
|
|
67
67
|
Harbor problem cannot stop the session. With no `HARBOR_AGENT_KEY` it prints
|
|
68
68
|
`Harbor: no HARBOR_AGENT_KEY, skipping` and changes nothing.
|
|
69
69
|
|
|
70
|
-
|
|
71
|
-
|
|
70
|
+
**Blocked commands reach Harbor.** When a guardrail blocks a command in the
|
|
71
|
+
container, the Stop hook at the end of that turn sends the record to Harbor
|
|
72
|
+
with the key: the rule, the program name, the session, never a path or an
|
|
73
|
+
argument. If Harbor cannot be reached, the record waits for the next turn.
|
|
74
|
+
|
|
75
|
+
**A repo that commits its own hooks.** If the repo's `.claude/settings.json`
|
|
76
|
+
already runs Harbor's hooks, add `--no-hooks`. It sets up everything else and
|
|
77
|
+
leaves the hooks unregistered, so each one runs once instead of twice.
|
|
78
|
+
|
|
79
|
+
### Codex cloud
|
|
80
|
+
|
|
81
|
+
In the Codex environment's settings, add the key as a secret named
|
|
82
|
+
`HARBOR_AGENT_KEY` (secrets reach the setup script, and only the setup script),
|
|
83
|
+
then use this setup script:
|
|
84
|
+
|
|
85
|
+
```
|
|
86
|
+
npx -y harborloop@0.5.7 init --headless --codex --origin https://github.com/<owner>/<repo>
|
|
87
|
+
```
|
|
88
|
+
|
|
89
|
+
- **Agent internet access** must be On, with `app.gethrbr.com` and
|
|
90
|
+
`mcp.gethrbr.com` allowed. With it Off only the guardrails synced at setup
|
|
91
|
+
still block; nothing reaches Harbor.
|
|
92
|
+
- `--codex` writes Harbor's hooks and MCP entry into the Codex the agent runs
|
|
93
|
+
(`/opt/codex` in Codex cloud), and has that Codex trust the hooks: Codex runs
|
|
94
|
+
no hook it has not trusted. The line reports how many it trusted.
|
|
95
|
+
- The key goes into the MCP entry's header on disk, because Codex starts hooks
|
|
96
|
+
and MCP servers without the environment's variables.
|
|
97
|
+
- `--origin` names the repo. Codex clones it with no `origin` remote, and
|
|
98
|
+
Harbor stays off in a repo it cannot name. An origin the clone already has
|
|
99
|
+
is never replaced.
|
|
100
|
+
|
|
101
|
+
Cursor cloud agents are not supported yet.
|
|
72
102
|
|
|
73
103
|
## Why a CLI at all
|
|
74
104
|
|
package/bin/checksums.json
CHANGED
|
@@ -1,12 +1,12 @@
|
|
|
1
1
|
{
|
|
2
|
-
"version": "0.5.
|
|
2
|
+
"version": "0.5.7",
|
|
3
3
|
"algorithm": "sha256",
|
|
4
4
|
"binaries": {
|
|
5
|
-
"@gethrbr/harborloop-darwin-arm64": "
|
|
6
|
-
"@gethrbr/harborloop-darwin-x64": "
|
|
7
|
-
"@gethrbr/harborloop-linux-x64": "
|
|
8
|
-
"@gethrbr/harborloop-linux-arm64": "
|
|
9
|
-
"@gethrbr/harborloop-linux-x64-musl": "
|
|
10
|
-
"@gethrbr/harborloop-win32-x64": "
|
|
5
|
+
"@gethrbr/harborloop-darwin-arm64": "845da934e854f39cbd86f1397505b84a3519bd4515187b5043e302485b5e2aaf",
|
|
6
|
+
"@gethrbr/harborloop-darwin-x64": "e51523cc681ae480f47ea494ef4e96c4dba94ace762c30a75abd652ae4809273",
|
|
7
|
+
"@gethrbr/harborloop-linux-x64": "5684489c8d6e7b544ed6025dba6c520a2fc4a85c89c0feef1d56e7cedbce5809",
|
|
8
|
+
"@gethrbr/harborloop-linux-arm64": "1c2ff9276ad30d4f94809db38dae3e99fee6b595fe9a3d467d61a39a2ff5a539",
|
|
9
|
+
"@gethrbr/harborloop-linux-x64-musl": "ac9f41a1b59c9fdedace5f5220ee99ea6df2dc04919d91d654b24e1919c8fd29",
|
|
10
|
+
"@gethrbr/harborloop-win32-x64": "4e5ad7d05ba18c00082b135b9e65d5414f3c15cfb01ce42ee49451fe6ace9034"
|
|
11
11
|
}
|
|
12
12
|
}
|
package/package.json
CHANGED
|
@@ -1,6 +1,6 @@
|
|
|
1
1
|
{
|
|
2
2
|
"name": "harborloop",
|
|
3
|
-
"version": "0.5.
|
|
3
|
+
"version": "0.5.7",
|
|
4
4
|
"description": "Install and health-check the harbor knowledge loop in your terminal. Recall in Claude Code, Codex and Cursor; a doctor that can say no.",
|
|
5
5
|
"type": "module",
|
|
6
6
|
"license": "MIT",
|
|
@@ -26,12 +26,12 @@
|
|
|
26
26
|
"agents.md"
|
|
27
27
|
],
|
|
28
28
|
"optionalDependencies": {
|
|
29
|
-
"@gethrbr/harborloop-darwin-arm64": "0.5.
|
|
30
|
-
"@gethrbr/harborloop-darwin-x64": "0.5.
|
|
31
|
-
"@gethrbr/harborloop-linux-x64": "0.5.
|
|
32
|
-
"@gethrbr/harborloop-linux-arm64": "0.5.
|
|
33
|
-
"@gethrbr/harborloop-linux-x64-musl": "0.5.
|
|
34
|
-
"@gethrbr/harborloop-win32-x64": "0.5.
|
|
29
|
+
"@gethrbr/harborloop-darwin-arm64": "0.5.7",
|
|
30
|
+
"@gethrbr/harborloop-darwin-x64": "0.5.7",
|
|
31
|
+
"@gethrbr/harborloop-linux-x64": "0.5.7",
|
|
32
|
+
"@gethrbr/harborloop-linux-arm64": "0.5.7",
|
|
33
|
+
"@gethrbr/harborloop-linux-x64-musl": "0.5.7",
|
|
34
|
+
"@gethrbr/harborloop-win32-x64": "0.5.7"
|
|
35
35
|
},
|
|
36
36
|
"publishConfig": {
|
|
37
37
|
"//": "A scoped package defaults to RESTRICTED, and `npm publish` on a scope with no paid plan fails outright rather than publishing privately. This is the whole difference between a wedge anybody can `npx` and a 402.",
|