nobluff 0.0.0-stage → 0.3.0

package/LICENSE

@@ -0,0 +1,21 @@
+MIT License
+
+Copyright (c) 2026 Ronald Nyami
+
+Permission is hereby granted, free of charge, to any person obtaining a copy
+of this software and associated documentation files (the "Software"), to deal
+in the Software without restriction, including without limitation the rights
+to use, copy, modify, merge, publish, distribute, sublicense, and/or sell
+copies of the Software, and to permit persons to whom the Software is
+furnished to do so, subject to the following conditions:
+
+The above copyright notice and this permission notice shall be included in all
+copies or substantial portions of the Software.
+
+THE SOFTWARE IS PROVIDED "AS IS", WITHOUT WARRANTY OF ANY KIND, EXPRESS OR
+IMPLIED, INCLUDING BUT NOT LIMITED TO THE WARRANTIES OF MERCHANTABILITY,
+FITNESS FOR A PARTICULAR PURPOSE AND NONINFRINGEMENT. IN NO EVENT SHALL THE
+AUTHORS OR COPYRIGHT HOLDERS BE LIABLE FOR ANY CLAIM, DAMAGES OR OTHER
+LIABILITY, WHETHER IN AN ACTION OF CONTRACT, TORT OR OTHERWISE, ARISING FROM,
+OUT OF OR IN CONNECTION WITH THE SOFTWARE OR THE USE OR OTHER DEALINGS IN THE
+SOFTWARE.

package/README.md

@@ -1,3 +1,43 @@
-# Temporary Holding Version
+# nobluff
 
-This version is a temporary placeholder for this package. An operational version to replace this has been submitted for review and is awaiting a staged release.
+**Did your coding agent say "tests pass" without running them?** Find out in one command:
+
+```bash
+npx nobluff scan
+```
+
+```text
+NoBluff scanned 50 Claude Code sessions (412 turns, 230 final answers).
+3 answers claimed something the transcript contradicts, in 2 sessions.
+
+  tests-not-run      2
+  tests-failed       1
+```
+
+It reads your local Claude Code transcripts (`~/.claude/projects`), turn by turn, and flags answers that claim something the session itself contradicts:
+
+| Rule | The answer says… | …but the transcript shows |
+|---|---|---|
+| `tests-not-run` | tests pass | no test command after the last file change |
+| `tests-failed` | tests pass / fixed / works | the last test run failed |
+| `tests-skipped` | all tests pass | tests were skipped and the answer never says so |
+| `unverified-claim` | verified / works / fixed | code was edited and nothing ran since |
+
+Local only: no model, no network, nothing leaves your machine.
+
+```bash
+npx nobluff last                 # latest session of the current folder
+npx nobluff scan -n 200          # more history
+npx nobluff check session.jsonl  # one transcript, JSON output
+```
+
+## Stop the bluff before it reaches you
+
+The same detector runs as a Claude Code Stop hook: when the agent tries to finish on a claim its own session contradicts, it is sent back to prove it or retract it.
+
+```text
+/plugin marketplace add provenwork/skills
+/plugin install nobluff@provenwork
+```
+
+Source, rules, tests and limitations: https://github.com/provenwork/nobluff

package/bin/nobluff.js

@@ -0,0 +1,25 @@
+#!/usr/bin/env node
+// Runs the NoBluff detector binary that matches this machine. No network, no install script.
+"use strict";
+const { spawnSync } = require("child_process");
+const path = require("path");
+const fs = require("fs");
+
+const os = { win32: "windows", darwin: "darwin", linux: "linux" }[process.platform];
+const arch = { x64: "amd64", arm64: "arm64" }[process.arch];
+if (!os || !arch) {
+  console.error(`nobluff: no binary for ${process.platform}/${process.arch}. Build it from https://github.com/provenwork/nobluff/tree/main/detector`);
+  process.exit(2);
+}
+const bin = path.join(__dirname, `nobluff-${os}-${arch}${os === "windows" ? ".exe" : ""}`);
+if (!fs.existsSync(bin)) {
+  console.error(`nobluff: missing ${path.basename(bin)} in this package.`);
+  process.exit(2);
+}
+try { fs.chmodSync(bin, 0o755); } catch (_) { /* read-only install: fine if already executable */ }
+const r = spawnSync(bin, process.argv.slice(2), { stdio: "inherit" });
+if (r.error) {
+  console.error(`nobluff: ${r.error.message}`);
+  process.exit(2);
+}
+process.exit(r.status === null ? 2 : r.status);

package/package.json

@@ -1,6 +1,17 @@
 {
   "name": "nobluff",
-  "version": "0.0.0-stage",
-  "stub": true,
-  "description": "Temporary package placeholder for staged publishing"
-}
+  "version": "0.3.0",
+  "description": "Audit your Claude Code sessions for claims the transcript contradicts: \"tests pass\" when no test ran, \"fixed\" when the last run failed. Local, no model, no network.",
+  "keywords": ["claude-code", "ai-agents", "coding-agent", "verification", "hooks", "agent-skills", "hallucination", "testing"],
+  "homepage": "https://github.com/provenwork/nobluff#readme",
+  "repository": { "type": "git", "url": "git+https://github.com/provenwork/nobluff.git", "directory": "npm" },
+  "bugs": "https://github.com/provenwork/nobluff/issues",
+  "license": "MIT",
+  "bin": { "nobluff": "bin/nobluff.js" },
+  "files": ["bin/", "README.md", "LICENSE"],
+  "engines": { "node": ">=16" },
+  "scripts": {
+    "prepack": "node scripts/copy-binaries.js",
+    "test": "node scripts/smoke-test.js"
+  }
+}