hunter-harness 0.2.1 → 0.2.3

package/dist/bin.js

@@ -2993,13 +2993,27 @@ function shannonEntropy(value) {
   }
   return entropy;
 }
+var HEX_DIGEST = /^(?:[a-fA-F0-9]{32}|[a-fA-F0-9]{40}|[a-fA-F0-9]{64})$/;
+var STRUCTURED_LOWERCASE_ID = /^[a-z0-9]+(?:[.-][a-z0-9]+)+$/;
+function isBenignHighEntropyLookalike(value) {
+  if (HEX_DIGEST.test(value)) {
+    return true;
+  }
+  if (value.includes("/")) {
+    return true;
+  }
+  if (STRUCTURED_LOWERCASE_ID.test(value) && (value.match(/\./g) ?? []).length >= 2) {
+    return true;
+  }
+  return false;
+}
 function highEntropyCandidates(content) {
-  const matches = content.matchAll(/\b[A-Za-z0-9_+/.=-]{24,}\b/g);
+  const matches = content.matchAll(/\b[A-Za-z0-9_+.=\-]{24,}\b/g);
   return [...matches].map((match) => ({
     value: match[0],
     offset: match.index,
     entropy: shannonEntropy(match[0])
-  })).filter((item2) => item2.entropy >= 4.5);
+  })).filter((item2) => item2.entropy >= 4.5 && !isBenignHighEntropyLookalike(item2.value));
 }
 
 // ../core/dist/security/scanner.js
@@ -3084,7 +3098,11 @@ function scanSensitiveFiles(files, options = {}) {
   for (const [inputPath, content] of Object.entries(files).sort(([a], [b]) => a.localeCompare(b))) {
     const path = normalizeManagedPath(inputPath);
     const ignores = parseInlineIgnores(content);
+    const knowledgeMetadata = path === ".harness/knowledge" || path.startsWith(".harness/knowledge/");
     for (const raw of rawFindings(content)) {
+      if (knowledgeMetadata && raw.ruleId === "HH_WINDOWS_ABSOLUTE_PATH") {
+        continue;
+      }
       const position = location(content, raw.offset);
       const fingerprint = sha256Bytes([
         SENSITIVE_SCANNER_VERSION,
@@ -5132,11 +5150,27 @@ async function resolveWorkflowResourcesRoot(options, argv = []) {
   } catch (error) {
     if (error instanceof WorkflowDataResolutionError) throw error;
     throw new WorkflowDataResolutionError(
-      "\u65E0\u6CD5\u83B7\u53D6\u5DE5\u4F5C\u6D41\u6570\u636E\u5305\uFF1A\u65E0\u7F51\u7EDC\u4E14\u672C\u5730\u7F13\u5B58\u4E0D\u5B58\u5728\u3002\u8BF7\u5148\u5728\u6709\u7F51\u7EDC\u7684\u73AF\u5883\u8FD0\u884C hunter-harness\uFF0C\u6216\u8BBE\u7F6E HUNTER_HARNESS_RESOURCES_ROOT \u6307\u5411\u542B harness/ \u7684\u76EE\u5F55\u3002",
+      describeWorkflowDataFetchFailure(error, packageSpec),
       "WORKFLOW_DATA_UNAVAILABLE"
     );
   }
 }
+function describeWorkflowDataFetchFailure(error, packageSpec) {
+  const detailRaw = error instanceof Error ? error.message : String(error);
+  const detail = detailRaw.length > 240 ? detailRaw.slice(0, 240) + "\u2026" : detailRaw;
+  const code = error !== null && typeof error === "object" && "code" in error ? String(error.code) : "";
+  const hintRoot = "\u8BBE\u7F6E HUNTER_HARNESS_RESOURCES_ROOT \u6307\u5411\u542B harness/ \u7684\u76EE\u5F55";
+  if (code === "ERR_MODULE_NOT_FOUND" || /Cannot find package ['"]pacote['"]/i.test(detailRaw)) {
+    return `\u65E0\u6CD5\u83B7\u53D6\u5DE5\u4F5C\u6D41\u6570\u636E\u5305 ${packageSpec}\uFF1A\u7F3A\u5C11\u53EF\u9009\u4F9D\u8D56 pacote\uFF08npx/npm \u5B89\u88C5 CLI \u65F6\u672A\u88C5\u4E0A\uFF09\u3002\u8BF7\u91CD\u88C5 hunter-harness\uFF0C\u6216${hintRoot}\u3002\u539F\u56E0\uFF1A${detail}`;
+  }
+  if (code === "ECONNRESET" || code === "ETIMEDOUT" || code === "ENOTFOUND" || code === "EAI_AGAIN" || code === "ECONNREFUSED" || /ECONNRESET|ETIMEDOUT|socket disconnected|TLS connection/i.test(detailRaw)) {
+    return `\u65E0\u6CD5\u83B7\u53D6\u5DE5\u4F5C\u6D41\u6570\u636E\u5305 ${packageSpec}\uFF1A\u4ECE npm \u4E0B\u8F7D\u5931\u8D25\uFF08\u7F51\u7EDC/TLS\uFF09\u3002\u53EF\u5148\u8BBE\u7F6E NODE_OPTIONS=--dns-result-order=ipv4first \u540E\u91CD\u8BD5\uFF0C\u6216${hintRoot}\u3002\u539F\u56E0\uFF1A${code !== "" ? code + " " : ""}${detail}`;
+  }
+  if (code === "E404" || /\b404\b|Not Found/i.test(detailRaw)) {
+    return `\u65E0\u6CD5\u83B7\u53D6\u5DE5\u4F5C\u6D41\u6570\u636E\u5305 ${packageSpec}\uFF1Anpm \u4E0A\u627E\u4E0D\u5230\u8BE5\u5305\u6216\u65E0\u6743\u8BBF\u95EE\u3002\u8BF7\u786E\u8BA4\u5DF2\u53D1\u5E03\u5BF9\u5E94 scope \u7684 workflow \u6570\u636E\u5305\uFF0C\u6216${hintRoot}\u3002\u539F\u56E0\uFF1A${detail}`;
+  }
+  return `\u65E0\u6CD5\u83B7\u53D6\u5DE5\u4F5C\u6D41\u6570\u636E\u5305 ${packageSpec}\uFF1A\u672C\u5730\u7F13\u5B58\u4E0D\u5B58\u5728\u4E14\u83B7\u53D6\u5931\u8D25\u3002\u53EF${hintRoot}\u3002\u539F\u56E0\uFF1A${code !== "" ? code + " " : ""}${detail}`;
+}
 async function readWorkflowFamilyManifest(resourcesRoot) {
   const manifestPath = join16(resourcesRoot, "hunter-workflow-family.json");
   if (!await pathExists3(manifestPath)) return {};

package/package.json

@@ -1,6 +1,6 @@
-{
+{
   "name": "hunter-harness",
-  "version": "0.2.1",
+  "version": "0.2.3",
   "description": "Local-first, server-governed agent harness",
   "license": "MIT",
   "type": "module",