harness-everything 0.3.6 → 0.4.1

package/hooks/hooks.json

@@ -6,7 +6,7 @@
         "hooks": [
           {
             "type": "command",
-            "command": "node harness-everything/scripts/bootstrap.js"
+            "command": "node \"${CLAUDE_PLUGIN_ROOT}/harness-everything/scripts/bootstrap.js\""
           }
         ],
         "description": "Bootstrap Harness Skills OS on session start",
@@ -18,20 +18,31 @@
         "hooks": [
           {
             "type": "command",
-            "command": "node harness-everything/scripts/tier-router.js"
+            "command": "node \"${CLAUDE_PLUGIN_ROOT}/harness-everything/scripts/kernel-router.js\""
           }
         ],
-        "description": "Auto-route user requests using tier-router",
-        "id": "harness:pre:tier-router"
+        "description": "Establish Harness routing invariants before host/domain skill selection",
+        "id": "harness:pre:kernel-router"
       }
     ],
     "PreToolUse": [
+      {
+        "matcher": "Bash|PowerShell",
+        "hooks": [
+          {
+            "type": "command",
+            "command": "node \"${CLAUDE_PLUGIN_ROOT}/hooks/scripts/action-gate.js\""
+          }
+        ],
+        "description": "Require explicit approval for destructive or external side effects",
+        "id": "harness:pre:action-gate"
+      },
       {
         "matcher": "Bash|PowerShell|Edit|Write",
         "hooks": [
           {
             "type": "command",
-            "command": "node hooks/scripts/rule-of-3.js"
+            "command": "node \"${CLAUDE_PLUGIN_ROOT}/hooks/scripts/rule-of-3.js\""
           }
         ],
         "description": "Rule of 3 Circuit Breaker - Prevents micro-error looping",
@@ -42,7 +53,7 @@
         "hooks": [
           {
             "type": "command",
-            "command": "node hooks/scripts/boundary-guard.js"
+            "command": "node \"${CLAUDE_PLUGIN_ROOT}/hooks/scripts/boundary-guard.js\""
           }
         ],
         "description": "Physical boundary enforcement for searches and large file reads",
@@ -53,7 +64,7 @@
         "hooks": [
           {
             "type": "command",
-            "command": "node hooks/scripts/depth-guard.js"
+            "command": "node \"${CLAUDE_PLUGIN_ROOT}/hooks/scripts/depth-guard.js\""
           }
         ],
         "description": "Information depth guard - Enforce impact assessment before writing code",
@@ -64,7 +75,7 @@
         "hooks": [
           {
             "type": "command",
-            "command": "node hooks/scripts/context-compact.js"
+            "command": "node \"${CLAUDE_PLUGIN_ROOT}/hooks/scripts/context-compact.js\""
           }
         ],
         "description": "Strategic context compaction enforcement",
@@ -75,7 +86,7 @@
         "hooks": [
           {
             "type": "command",
-            "command": "node hooks/scripts/subagent-scope-guard.js"
+            "command": "node \"${CLAUDE_PLUGIN_ROOT}/hooks/scripts/subagent-scope-guard.js\""
           }
         ],
         "description": "Snapshot repo state before a subagent burst starts",
@@ -87,7 +98,17 @@
         "hooks": [
           {
             "type": "command",
-            "command": "node hooks/scripts/stop-gate.js"
+            "command": "node \"${CLAUDE_PLUGIN_ROOT}/hooks/scripts/action-gate.js\""
+          }
+        ],
+        "description": "Close any unexecuted action-gate approvals as rejected for this turn",
+        "id": "harness:stop:action-gate-audit"
+      },
+      {
+        "hooks": [
+          {
+            "type": "command",
+            "command": "node \"${CLAUDE_PLUGIN_ROOT}/hooks/scripts/stop-gate.js\""
           }
         ],
         "description": "Pre-delivery gate - bounce the end of a turn once per edit batch when edits were never verified",
@@ -100,7 +121,18 @@
         "hooks": [
           {
             "type": "command",
-            "command": "node hooks/scripts/rule-of-3-tracker.js"
+            "command": "node \"${CLAUDE_PLUGIN_ROOT}/hooks/scripts/action-gate.js\""
+          }
+        ],
+        "description": "Record execution of an approved action-gate payload",
+        "id": "harness:post:action-gate-audit"
+      },
+      {
+        "matcher": "Bash|PowerShell",
+        "hooks": [
+          {
+            "type": "command",
+            "command": "node \"${CLAUDE_PLUGIN_ROOT}/hooks/scripts/rule-of-3-tracker.js\""
           }
         ],
         "description": "Track error signatures for Rule of 3",
@@ -111,7 +143,7 @@
         "hooks": [
           {
             "type": "command",
-            "command": "node hooks/scripts/state-persist.js"
+            "command": "node \"${CLAUDE_PLUGIN_ROOT}/hooks/scripts/state-persist.js\""
           }
         ],
         "description": "Save skill transition state",
@@ -122,7 +154,7 @@
         "hooks": [
           {
             "type": "command",
-            "command": "node hooks/scripts/atomic-commit-check.js"
+            "command": "node \"${CLAUDE_PLUGIN_ROOT}/hooks/scripts/atomic-commit-check.js\""
           }
         ],
         "description": "Atomic commit enforcement",
@@ -133,7 +165,7 @@
         "hooks": [
           {
             "type": "command",
-            "command": "node hooks/scripts/contract-test.js"
+            "command": "node \"${CLAUDE_PLUGIN_ROOT}/hooks/scripts/contract-test.js\""
           }
         ],
         "description": "Contract testing between sub-agents",
@@ -144,12 +176,25 @@
         "hooks": [
           {
             "type": "command",
-            "command": "node hooks/scripts/subagent-scope-guard.js"
+            "command": "node \"${CLAUDE_PLUGIN_ROOT}/hooks/scripts/subagent-scope-guard.js\""
           }
         ],
         "description": "Diff the whole repo after a subagent burst finishes - catches scope creep past what the task briefed",
         "id": "harness:post:subagent-scope-guard"
       }
+    ],
+    "PostToolUseFailure": [
+      {
+        "matcher": "Bash|PowerShell",
+        "hooks": [
+          {
+            "type": "command",
+            "command": "node \"${CLAUDE_PLUGIN_ROOT}/hooks/scripts/action-gate.js\""
+          }
+        ],
+        "description": "Record that an approved action-gate payload executed but failed",
+        "id": "harness:post-failure:action-gate-audit"
+      }
     ]
   }
 }

package/hooks/scripts/action-gate-rules.json

@@ -0,0 +1,77 @@
+{
+  "schemaVersion": 1,
+  "rules": [
+    {
+      "id": "git-force-push",
+      "tools": ["Bash", "PowerShell"],
+      "pattern": "\\bgit\\s+push\\b[\\s\\S]*(?:--force(?:-with-lease)?|(?:^|\\s)-f(?:\\s|$))",
+      "flags": "i",
+      "reason": "Force-pushing can rewrite remote history.",
+      "scope": "always"
+    },
+    {
+      "id": "git-reset-hard",
+      "tools": ["Bash", "PowerShell"],
+      "pattern": "\\bgit\\s+reset\\s+--hard\\b",
+      "flags": "i",
+      "reason": "git reset --hard can discard local work.",
+      "scope": "always"
+    },
+    {
+      "id": "git-clean-force-delete",
+      "tools": ["Bash", "PowerShell"],
+      "pattern": "\\bgit\\s+clean\\b(?=[^\\r\\n]*\\s-(?:[^\\s]*f|f\\b))(?=[^\\r\\n]*\\s-(?:[^\\s]*d|d\\b))",
+      "flags": "i",
+      "reason": "git clean with force and directory deletion can remove untracked work.",
+      "scope": "always"
+    },
+    {
+      "id": "recursive-delete",
+      "tools": ["Bash"],
+      "pattern": "(?:^|[;&|\\n]\\s*)rm\\s+(?=[^\\r\\n;&|]*-(?:[^\\s]*r|r\\b))(?=[^\\r\\n;&|]*-(?:[^\\s]*f|f\\b))",
+      "flags": "i",
+      "reason": "Recursive forced deletion outside approved scratch space is destructive.",
+      "scope": "outside-scratch"
+    },
+    {
+      "id": "powershell-recursive-force-delete",
+      "tools": ["Bash", "PowerShell"],
+      "pattern": "\\bRemove-Item\\b(?=[^\\r\\n;|]*-(?:Recurse|r)\\b)(?=[^\\r\\n;|]*-(?:Force|fo)\\b)",
+      "flags": "i",
+      "reason": "PowerShell recursive forced deletion outside approved scratch space is destructive.",
+      "scope": "outside-scratch"
+    },
+    {
+      "id": "sql-destructive-ddl",
+      "tools": ["Bash", "PowerShell"],
+      "pattern": "\\b(?:DROP\\s+(?:TABLE|DATABASE|SCHEMA)|TRUNCATE(?:\\s+TABLE)?)\\b",
+      "flags": "i",
+      "reason": "Destructive SQL DDL can irreversibly remove production data or schema state.",
+      "scope": "always"
+    },
+    {
+      "id": "package-publish",
+      "tools": ["Bash", "PowerShell"],
+      "pattern": "\\b(?:npm|pnpm|yarn|cargo|twine)\\s+publish\\b",
+      "flags": "i",
+      "reason": "Publishing creates an external package/release side effect.",
+      "scope": "always"
+    },
+    {
+      "id": "github-release-create",
+      "tools": ["Bash", "PowerShell"],
+      "pattern": "\\bgh\\s+release\\s+create\\b",
+      "flags": "i",
+      "reason": "Creating a GitHub release is an external irreversible publication action.",
+      "scope": "always"
+    },
+    {
+      "id": "production-deploy",
+      "tools": ["Bash", "PowerShell"],
+      "pattern": "\\b(?:kubectl\\s+apply|helm\\s+(?:upgrade|install)|terraform\\s+apply|vercel\\s+deploy|fly\\s+deploy|gcloud\\s+run\\s+deploy|(?:npm|pnpm|yarn)\\s+(?:run\\s+)?deploy|deploy\\s+to\\s+(?:prod|production|live))\\b",
+      "flags": "i",
+      "reason": "Deployment changes an external environment and requires explicit approval.",
+      "scope": "always"
+    }
+  ]
+}