registry / @dzhechkov/harness-core / 0.3.43

@dzhechkov/harness-core@0.3.43

⚠ Under review

Shared harness logic - skill loading, additive apply, and the init/sync/verify/doctor operations.

Static Scan Results

scanned 2d ago · by rust-scanner

Static analysis flagged 13 finding(s) at 93.0% confidence. This version is warn-only unless an AI or security-team review confirms malicious behavior.

Static reason

One or more suspicious static signals were detected.; previous stored version diff introduced dangerous source

Decision evidence

public snapshot

Behavioral surface

Source

ChildProcessCryptoDynamicRequireEnvironmentVarsFilesystemNetworkShell

Supply chain

HighEntropyStringsUrlStrings

ManifestNo manifest risk signals triggered.

scanned 50 file(s), 488 KB of source, external domains: api.github.com, api.npmjs.org, github.com, json-schema.org, raw.githubusercontent.com

Source & flagged code

6 flagged

dist/publish.jsView file

Lines 1-28javascript

1/**

2 * Automated publish — discovers changed packages, bumps patch versions,

3 * builds, and publishes to npm.

4 *

5 * @packageDocumentation

6 */

7import { existsSync, readFileSync, writeFileSync, readdirSync } from 'node:fs';

8import { join } from 'node:path';

9import { execSync } from 'node:child_process';

10/** Bump patch version: 0.3.11 → 0.3.12 */

High

Child Process

Package source references child process execution.

dist/publish.jsView on unpkg · L8

11export function bumpPatch(version) {

12 // Parse the core x.y.z, tolerating a 2-part "x.y" (treated as x.y.0) and a

13 // prerelease/build suffix (e.g. "1.2.3-beta.2"). A prerelease bumps to its

14 // release (x.y.z), which semver-orders ABOVE the prerelease — never below it,

15 // and never silently drops to a lower number (audit #12).

16 const core = (version.split('+')[0] ?? version).split('-');

17 const hasPrerelease = core.length > 1;

18 const nums = (core[0] ?? '').split('.');

19 const major = parseInt(nums[0] ?? '0', 10) || 0;

20 const minor = parseInt(nums[1] ?? '0', 10) || 0;

21 const patch = parseInt(nums[2] ?? '0', 10) || 0;

22 // Releasing a prerelease keeps the same x.y.z (it outranks the prerelease);

23 // a normal release bumps the patch.

24 return hasPrerelease ? `${major}.${minor}.${patch}` : `${major}.${minor}.${patch + 1}`;

25}

26/** Compare two x.y.z(-pre) versions by their core triple: >0 if a>b, <0 if a<b. */

27export function compareVersions(a, b) {

28 const core = (v) => ((v.split('+')[0] ?? v).split('-')[0] ?? '').split('.').map((n) => parseInt(n, 10) || 0);

dist/setup.jsView file

Lines 84-124javascript

84 const db = new Database(DB);

85 db.pragma('journal_mode = WAL');

86 db.pragma('busy_timeout = 5000'); // wait out a brief MCP-server write lock instead of failing

87 db.exec('CREATE TABLE IF NOT EXISTS dz_session_events (id INTEGER PRIMARY KEY AUTOINCREMENT, event TEXT NOT NULL, ts TEXT NOT NULL, source TEXT NOT NULL DEFAULT \\'dz-

dist/patterns.jsView file

Lines 510-550javascript

510 }

511 catch { /* best-effort */ }

512}

513/**

514 * Mirror harvested learnings into the AgentDB **vector index** (Option C, ADR-003).

515 *

516 * Writes NATIVELY via better-sqlite3 — replicating ReasoningBank's exact schema and insert

517 * (reasoning_patterns + pattern_embeddings, embedding text `${taskType}: ${approach}`) — and

518 * uses agentdb only for the EmbeddingService. QE P1: agentdb's own `createDatabase` is

519 * hardwired to sql.js, whose whole-file load-modify-save can clobber concurrent native-WAL

dist/upgrade.jsView file

Lines 1-21javascript

1/**

2 * Skill upgrade — detects installed skills and re-applies from canonical source.

Low

Weak Crypto

Package source references weak cryptographic algorithms.

dist/upgrade.jsView on unpkg · L1

3 *

4 * @packageDocumentation

5 */

6import { existsSync, readdirSync, readFileSync, statSync } from 'node:fs';

7import { join } from 'node:path';

Source & flagged code

6 flagged · loading source

dist/publish.jsView file

8import { join } from 'node:path'; L9: import { execSync } from 'node:child_process'; L10: /** Bump patch version: 0.3.11 → 0.3.12 */

High

Child Process

Package source references child process execution.

dist/publish.jsView on unpkg · L8

dist/setup.jsView file

104const child = process.platform === 'win32' L105: ? spawn('dz consolidate --project "' + ROOT + '"', { detached: true, stdio: 'ignore', shell: true, cwd: ROOT }) L106: : spawn('dz', ['consolidate', '--project', ROOT], { detached: true, stdio: 'ignore', cwd: ROOT });

High

Shell

Package source references shell execution.

dist/setup.jsView on unpkg · L104

231// local copy away from the version the MCP registration pins (audit gap G7). L232: execSync('npm install agentdb better-sqlite3 --save-exact --no-audit --no-fund --loglevel=error', { L233: cwd: projectRoot,

High

Runtime Package Install

Package source invokes a package manager install command at runtime.

dist/setup.jsView on unpkg · L231

dist/patterns.jsView file

•matchType = previous_version_dangerous_delta matchedPackage = @dzhechkov/harness-core@0.3.41 matchedIdentity = npm:QGR6aGVjaGtvdi9oYXJuZXNzLWNvcmU:0.3.41 similarity = 0.840 summary = stored previous version shares package body but lacks this dangerous source file

Critical

Previous Version Dangerous Delta

This package version adds a dangerous source file absent from the previous stored version.

dist/patterns.jsView on unpkg

530try { L531: const req = createRequire(join(projectRoot, 'package.json')); L532: sqliteUrl = pathToFileURL(req.resolve('better-sqlite3')).href;

Medium

Dynamic Require

Package source references dynamic require/import behavior.

dist/patterns.jsView on unpkg · L530

dist/upgrade.jsView file

1/** L2: * Skill upgrade — detects installed skills and re-applies from canonical source.

Low

Weak Crypto

Package source references weak cryptographic algorithms.

dist/upgrade.jsView on unpkg · L1

Findings

1 Critical3 High4 Medium5 Low

CriticalPrevious Version Dangerous Deltadist/patterns.js

HighChild Processdist/publish.js

HighShelldist/setup.js

HighRuntime Package Installdist/setup.js

MediumDynamic Requiredist/patterns.js

MediumNetwork

MediumEnvironment Vars

MediumStructural Risk Force Deep Review

LowScripts Present

LowWeak Cryptodist/upgrade.js

LowFilesystem

LowHigh Entropy Strings

LowUrl Strings

Source & flagged code

6 flagged

dist/publish.jsView file

Lines 1-28javascript

1/**

2 * Automated publish — discovers changed packages, bumps patch versions,

3 * builds, and publishes to npm.

4 *

5 * @packageDocumentation

6 */

7import { existsSync, readFileSync, writeFileSync, readdirSync } from 'node:fs';

8import { join } from 'node:path';

9import { execSync } from 'node:child_process';

10/** Bump patch version: 0.3.11 → 0.3.12 */

High

Child Process

Package source references child process execution.

dist/publish.jsView on unpkg · L8

11export function bumpPatch(version) {

12 // Parse the core x.y.z, tolerating a 2-part "x.y" (treated as x.y.0) and a

13 // prerelease/build suffix (e.g. "1.2.3-beta.2"). A prerelease bumps to its

14 // release (x.y.z), which semver-orders ABOVE the prerelease — never below it,

15 // and never silently drops to a lower number (audit #12).

16 const core = (version.split('+')[0] ?? version).split('-');

17 const hasPrerelease = core.length > 1;

18 const nums = (core[0] ?? '').split('.');

19 const major = parseInt(nums[0] ?? '0', 10) || 0;

20 const minor = parseInt(nums[1] ?? '0', 10) || 0;

21 const patch = parseInt(nums[2] ?? '0', 10) || 0;

22 // Releasing a prerelease keeps the same x.y.z (it outranks the prerelease);

23 // a normal release bumps the patch.

24 return hasPrerelease ? `${major}.${minor}.${patch}` : `${major}.${minor}.${patch + 1}`;

25}

26/** Compare two x.y.z(-pre) versions by their core triple: >0 if a>b, <0 if a<b. */

27export function compareVersions(a, b) {

28 const core = (v) => ((v.split('+')[0] ?? v).split('-')[0] ?? '').split('.').map((n) => parseInt(n, 10) || 0);

dist/setup.jsView file

Lines 84-124javascript

84 const db = new Database(DB);

85 db.pragma('journal_mode = WAL');

86 db.pragma('busy_timeout = 5000'); // wait out a brief MCP-server write lock instead of failing

87 db.exec('CREATE TABLE IF NOT EXISTS dz_session_events (id INTEGER PRIMARY KEY AUTOINCREMENT, event TEXT NOT NULL, ts TEXT NOT NULL, source TEXT NOT NULL DEFAULT \\'dz-

dist/patterns.jsView file

Lines 510-550javascript

510 }

511 catch { /* best-effort */ }

512}

513/**

514 * Mirror harvested learnings into the AgentDB **vector index** (Option C, ADR-003).

515 *

516 * Writes NATIVELY via better-sqlite3 — replicating ReasoningBank's exact schema and insert

517 * (reasoning_patterns + pattern_embeddings, embedding text `${taskType}: ${approach}`) — and

518 * uses agentdb only for the EmbeddingService. QE P1: agentdb's own `createDatabase` is

519 * hardwired to sql.js, whose whole-file load-modify-save can clobber concurrent native-WAL

dist/upgrade.jsView file

Lines 1-21javascript

1/**

2 * Skill upgrade — detects installed skills and re-applies from canonical source.

Low

Weak Crypto

Package source references weak cryptographic algorithms.

dist/upgrade.jsView on unpkg · L1

3 *

4 * @packageDocumentation

5 */

6import { existsSync, readdirSync, readFileSync, statSync } from 'node:fs';

7import { join } from 'node:path';

Lines 211-251javascript

211/**

212 * Install `agentdb` + `better-sqlite3` as LOCAL project deps so the session-hook writer can

213 * `import('agentdb')` and get a native SQLite store (better-sqlite3 ships prebuilt binaries — no

214 * build tools — and gives true cross-process WAL concurrency so the hook and the MCP server share

215 * one live store). Best-effort: returns false (caller degrades to jsonl) if install fails.

216 */

217function installAgentdbLocally(projectRoot) {

218 if (isAgentdbInstalledLocally(projectRoot))

219 return true;

220 try {

221 // Anchor npm to THIS project: without a package.json here, npm's prefix walk-up would

222 // install into (and mutate the lockfile of) the nearest ANCESTOR project (audit code#2).

223 const pkgJsonPath = join(projectRoot, 'package.json');

224 if (!existsSync(pkgJsonPath)) {

225 writeFileSync(pkgJsonPath, JSON.stringify({ name: 'dz-harness-project', private: true, version: '0.0.0' }, null, 2) + '\n');

226 }

227 // NB: use the ESM-imported execSync — `require()` is undefined in this ESM module (the

228 // original agentdb hooks failed silently for exactly this reason). stdio:'ignore' (not

229 // 'pipe') avoids execSync's 1 MB maxBuffer aborting the child on npm's verbose output.

230 // --save-exact: agentdb is alpha; a semver range would let a later `npm update` drift the

231 // local copy away from the version the MCP registration pins (audit gap G7).

232 execSync('npm install agentdb better-sqlite3 --save-exact --no-audit --no-fund --loglevel=error', {

233 cwd: projectRoot,

High

Runtime Package Install

Package source invokes a package manager install command at runtime.

dist/setup.jsView on unpkg · L231

234 stdio: 'ignore',

235 timeout: 300000,

236 });

237 return isAgentdbInstalledLocally(projectRoot);

238 }

239 catch {

240 return false;

241 }

242}

243/** Run full environment setup. */

244/** Marker that brackets the dz-harness section in a shared CLAUDE.md/AGENTS.md. */

245const DRIVER_MARKER_START = '';

246const DRIVER_MARKER_END = '';

247/**

248 * Operating instructions for a coding agent that should *drive* the dz CLI

249 * correctly. Inspired by Visa VVAH `--install-agents`: the toolkit ships its own

250 * "how to operate me" doc so agents use the CLI as intended rather than guessing.

251 */