hunter-harness 0.2.1 → 0.2.2

package/dist/bin.js

@@ -2993,13 +2993,27 @@ function shannonEntropy(value) {
   }
   return entropy;
 }
+var HEX_DIGEST = /^(?:[a-fA-F0-9]{32}|[a-fA-F0-9]{40}|[a-fA-F0-9]{64})$/;
+var STRUCTURED_LOWERCASE_ID = /^[a-z0-9]+(?:[.-][a-z0-9]+)+$/;
+function isBenignHighEntropyLookalike(value) {
+  if (HEX_DIGEST.test(value)) {
+    return true;
+  }
+  if (value.includes("/")) {
+    return true;
+  }
+  if (STRUCTURED_LOWERCASE_ID.test(value) && (value.match(/\./g) ?? []).length >= 2) {
+    return true;
+  }
+  return false;
+}
 function highEntropyCandidates(content) {
-  const matches = content.matchAll(/\b[A-Za-z0-9_+/.=-]{24,}\b/g);
+  const matches = content.matchAll(/\b[A-Za-z0-9_+.=\-]{24,}\b/g);
   return [...matches].map((match) => ({
     value: match[0],
     offset: match.index,
     entropy: shannonEntropy(match[0])
-  })).filter((item2) => item2.entropy >= 4.5);
+  })).filter((item2) => item2.entropy >= 4.5 && !isBenignHighEntropyLookalike(item2.value));
 }
 
 // ../core/dist/security/scanner.js
@@ -3084,7 +3098,11 @@ function scanSensitiveFiles(files, options = {}) {
   for (const [inputPath, content] of Object.entries(files).sort(([a], [b]) => a.localeCompare(b))) {
     const path = normalizeManagedPath(inputPath);
     const ignores = parseInlineIgnores(content);
+    const knowledgeMetadata = path === ".harness/knowledge" || path.startsWith(".harness/knowledge/");
     for (const raw of rawFindings(content)) {
+      if (knowledgeMetadata && raw.ruleId === "HH_WINDOWS_ABSOLUTE_PATH") {
+        continue;
+      }
       const position = location(content, raw.offset);
       const fingerprint = sha256Bytes([
         SENSITIVE_SCANNER_VERSION,

package/package.json

@@ -1,6 +1,6 @@
-{
+{
   "name": "hunter-harness",
-  "version": "0.2.1",
+  "version": "0.2.2",
   "description": "Local-first, server-governed agent harness",
   "license": "MIT",
   "type": "module",