registry / @dzhechkov/harness-core / 0.3.76

@dzhechkov/harness-core@0.3.76

⚠ Under review

Shared harness logic - skill loading, additive apply, and the init/sync/verify/doctor operations.

Static Scan Results

scanned 2h ago · by rust-scanner

Static analysis flagged 13 finding(s) at 93.0% confidence. This version is warn-only unless an AI or security-team review confirms malicious behavior.

Static reason

One or more suspicious static signals were detected.; previous stored version diff introduced dangerous source

Decision evidence

public snapshot

Behavioral surface

Source

ChildProcessCryptoDynamicRequireEnvironmentVarsFilesystemNetworkShell

Supply chain

HighEntropyStringsUrlStrings

ManifestNo manifest risk signals triggered.

scanned 58 file(s), 666 KB of source, external domains: api.github.com, api.npmjs.org, github.com, json-schema.org, raw.githubusercontent.com

Source & flagged code

6 flagged

dist/publish.jsView file

Lines 1-28javascript

1/**

2 * Automated publish — discovers changed packages, bumps patch versions,

3 * builds, and publishes to npm.

4 *

5 * @packageDocumentation

6 */

7import { existsSync, readFileSync, writeFileSync, readdirSync } from 'node:fs';

8import { join } from 'node:path';

9import { execSync } from 'node:child_process';

10/** Bump patch version: 0.3.11 → 0.3.12 */

High

Child Process

Package source references child process execution.

dist/publish.jsView on unpkg · L8

11export function bumpPatch(version) {

12 // Parse the core x.y.z, tolerating a 2-part "x.y" (treated as x.y.0) and a

13 // prerelease/build suffix (e.g. "1.2.3-beta.2"). A prerelease bumps to its

14 // release (x.y.z), which semver-orders ABOVE the prerelease — never below it,

15 // and never silently drops to a lower number (audit #12).

16 const core = (version.split('+')[0] ?? version).split('-');

17 const hasPrerelease = core.length > 1;

18 const nums = (core[0] ?? '').split('.');

19 const major = parseInt(nums[0] ?? '0', 10) || 0;

20 const minor = parseInt(nums[1] ?? '0', 10) || 0;

21 const patch = parseInt(nums[2] ?? '0', 10) || 0;

22 // Releasing a prerelease keeps the same x.y.z (it outranks the prerelease);

23 // a normal release bumps the patch.

24 return hasPrerelease ? `${major}.${minor}.${patch}` : `${major}.${minor}.${patch + 1}`;

25}

26/** Compare two x.y.z(-pre) versions by their core triple: >0 if a>b, <0 if a<b. */

27export function compareVersions(a, b) {

28 const core = (v) => ((v.split('+')[0] ?? v).split('-')[0] ?? '').split('.').map((n) => parseInt(n, 10) || 0);

•matchType = previous_version_dangerous_delta matchedPackage = @dzhechkov/harness-core@0.3.41 matchedIdentity = npm:QGR6aGVjaGtvdi9oYXJuZXNzLWNvcmU:0.3.41 similarity = 0.720 summary = stored previous version shares package body but lacks this dangerous source file

Critical

Previous Version Dangerous Delta

This package version adds a dangerous source file absent from the previous stored version; route for source-aware review.

dist/publish.jsView on unpkg

dist/setup.jsView file

Lines 109-149javascript

109}

110

111if (event === 'end' || event === 'precompact') {

112 // Option C: harvest learnings + mirror to the vector index, DETACHED (fire-and-forget) so the

113 // hook never waits on transcript parsing or the embedding model. Fires on BOTH SessionEnd and

114 // PreCompact (the reliable trigger for long sessions) — THROTTLED via .dz/.last-consolidate so

115 // rapid back-to-back compactions don't repeatedly pay the model-load cost.

116 let last = 0;

117 try { last = parseInt(String(readFileSync(CONSOLIDATE_MARKER, 'utf-8')).trim(), 10) || 0; } catch { last = 0; }

118 if (Date.now() - last < THROTTLE_MS) {

119 note({ consolidate: 'skipped-throttled' });

120 } else {

121 try { writeFileSync(CONSOLIDATE_MARKER, String(Date.now())); } catch { /* best-effort marker */ }

122 // Uses the globally-installed \`dz\` from PATH. NO shell on posix: spawn's args-array +

123 // shell:true silently word-splits a ROOT containing spaces AND is Node's documented

124 // command-injection hazard (QE P1+P2); a plain spawn searches PATH itself and quotes nothing.

125 // Windows needs a shell for the .cmd shim, so there we pass ONE pre-quoted string (") — quotes

126 // are illegal in Windows paths, so wrapping is sufficient. Failure is detected via BOTH the

127 // error event (posix ENOENT) and a non-zero exit code (shell-mediated "not found").

128 try {

129 const child = process.platform === 'win32'

130 ? spawn('dz consolidate --project "' + ROOT + '"', { detached: true, stdio: 'ignore', shell: true, cwd: ROOT })

131 : spawn('dz', ['consolidate', '--project', ROOT], { detached: true, stdio: 'ignore', cwd: ROOT });

High

Shell

Package source references shell execution.

dist/setup.jsView on unpkg · L129

132 child.on('error', (err) => note({ consolidate: 'skipped', error: String((err && err.message) || err) }));

133 child.on('exit', (code) => { if (code !== null && code !== 0) note({ consolidate: 'skipped', error: 'dz exited ' + code + ' (not on PATH?)' }); });

134 child.unref();

135 } catch (err) {

136 note({ consolidate: 'skipped', error: String((err && err.message) || err) });

137 }

138 }

139}

140`;

141}

142/** Parse the `dz-writer-version` stamp from a deployed writer file ('' or absent → 0). */

143export function writerVersionOf(content) {

144 const m = /^\/\/ dz-writer-version:\s*(\d+)/m.exec(content);

145 return m ? parseInt(m[1] ?? '0', 10) : 0;

146}

147/** Generate Claude Code hooks configuration for self-learning. */

148/**

149 * Commands of a Claude Code hook entry in EITHER shape: the valid matcher-group form

Lines 260-300javascript

260/**

261 * Install `agentdb` + `better-sqlite3` as LOCAL project deps so the session-hook writer can

262 * `import('agentdb')` and get a native SQLite store (better-sqlite3 ships prebuilt binaries — no

263 * build tools — and gives true cross-process WAL concurrency so the hook and the MCP server share

264 * one live store). Best-effort: returns false (caller degrades to jsonl) if install fails.

265 */

266function installAgentdbLocally(projectRoot) {

267 if (isAgentdbInstalledLocally(projectRoot))

268 return true;

269 try {

270 // Anchor npm to THIS project: without a package.json here, npm's prefix walk-up would

271 // install into (and mutate the lockfile of) the nearest ANCESTOR project (audit code#2).

272 const pkgJsonPath = join(projectRoot, 'package.json');

273 if (!existsSync(pkgJsonPath)) {

274 writeFileSync(pkgJsonPath, JSON.stringify({ name: 'dz-harness-project', private: true, version: '0.0.0' }, null, 2) + '\n');

275 }

276 // NB: use the ESM-imported execSync — `require()` is undefined in this ESM module (the

277 // original agentdb hooks failed silently for exactly this reason). stdio:'ignore' (not

278 // 'pipe') avoids execSync's 1 MB maxBuffer aborting the child on npm's verbose output.

279 // --save-exact: agentdb is alpha; a semver range would let a later `npm update` drift the

280 // local copy away from the version the MCP registration pins (audit gap G7).

281 execSync('npm install agentdb better-sqlite3 --save-exact --no-audit --no-fund --loglevel=error', {

282 cwd: projectRoot,

High

Runtime Package Install

Package source invokes a package manager install command at runtime.

dist/setup.jsView on unpkg · L280

283 stdio: 'ignore',

284 timeout: 300000,

285 });

286 return isAgentdbInstalledLocally(projectRoot);

287 }

288 catch {

289 return false;

290 }

291}

292/** Run full environment setup. */

293/** Marker that brackets the dz-harness section in a shared CLAUDE.md/AGENTS.md. */

294const DRIVER_MARKER_START = '';

295const DRIVER_MARKER_END = '';

296/**

297 * Operating instructions for a coding agent that should *drive* the dz CLI

298 * correctly. Inspired by Visa VVAH `--install-agents`: the toolkit ships its own

299 * "how to operate me" doc so agents use the CLI as intended rather than guessing.

300 */

dist/book-kb.jsView file

Lines 7-47javascript

7 *

8 * The semantic (vector) layer lives in the shared agentdb store via {@link indexPatternsToAgentdb};

9 * this is the lexical layer for `dz recall --books`. Native better-sqlite3; best-effort.

10 *

11 * @packageDocumentation

12 */

13import { join, dirname } from 'node:path';

14import { existsSync, mkdirSync } from 'node:fs';

15import { pathToFileURL } from 'node:url';

16import { createRequire } from 'node:module';

17/** Default lexical store path — a `memory/` sibling of the pattern store, never `agentdb.db`. */

18export function bookKbPath(projectRoot) {

19 return join(projectRoot, '.dz', 'memory', 'books.sqlite');

20}

21const SCHEMA = `CREATE VIRTUAL TABLE IF NOT EXISTS book_knowledge USING fts5(

22 book UNINDEXED, ku_id UNINDEXED, corpus_version UNINDEXED, type UNINDEXED,

23 name, problem, content, chapter UNINDEXED, pages UNINDEXED, metadata UNINDEXED

24);`;

25async function openDb(projectRoot, dbPath) {

26 let sqliteUrl;

27 try {

28 const req = createRequire(join(projectRoot, 'package.json'));

29 sqliteUrl = pathToFileURL(req.resolve('better-sqlite3')).href;

Medium

Dynamic Require

Package source references dynamic require/import behavior.

dist/book-kb.jsView on unpkg · L27

30 }

31 catch {

32 return { error: 'better-sqlite3 not installed in project (run: dz setup --memory agentdb)' };

33 }

34 const path = dbPath ?? bookKbPath(projectRoot);

35 mkdirSync(dirname(path), { recursive: true });

36 const { default: Database } = (await import(sqliteUrl));

37 const db = new Database(path);

38 db.pragma('journal_mode = WAL');

39 db.pragma('busy_timeout = 5000');

40 db.exec(SCHEMA);

41 return db;

42}

43/**

44 * Upsert a batch of KUs for a book. Idempotent per (book, kuId): existing rows for the same

45 * kuId are replaced, and — since a re-ingest changes `corpusVersion` — every row for the book

46 * whose corpus_version differs from this batch's is evicted (stale-corpus cleanup), so the KB

47 * mirrors exactly the current ingest. Best-effort: returns an honest error, never throws.

dist/upgrade.jsView file

Lines 1-21javascript

1/**

2 * Skill upgrade — detects installed skills and re-applies from canonical source.

Low

Weak Crypto

Package source references weak cryptographic algorithms.

dist/upgrade.jsView on unpkg · L1

3 *

4 * @packageDocumentation

5 */

6import { existsSync, readdirSync, readFileSync, statSync } from 'node:fs';

7import { join } from 'node:path';

8import { createHash } from 'node:crypto';

9/** Content hash of a file, or undefined if unreadable. */

10function hashFile(path) {

11 try {

12 return createHash('sha1').update(readFileSync(path)).digest('hex');

13 }

14 catch {

15 return undefined;

16 }

17}

18/** Discover installed skills in a target platform directory. */

19export function discoverInstalled(targetDir) {

20 if (!existsSync(targetDir))

21 return [];

Source & flagged code

6 flagged · loading source

dist/publish.jsView file

Critical

Previous Version Dangerous Delta

This package version adds a dangerous source file absent from the previous stored version; route for source-aware review.

dist/publish.jsView on unpkg

8import { join } from 'node:path'; L9: import { execSync } from 'node:child_process'; L10: /** Bump patch version: 0.3.11 → 0.3.12 */

High

Child Process

Package source references child process execution.

dist/publish.jsView on unpkg · L8

dist/setup.jsView file

129const child = process.platform === 'win32' L130: ? spawn('dz consolidate --project "' + ROOT + '"', { detached: true, stdio: 'ignore', shell: true, cwd: ROOT }) L131: : spawn('dz', ['consolidate', '--project', ROOT], { detached: true, stdio: 'ignore', cwd: ROOT });

High

Shell

Package source references shell execution.

dist/setup.jsView on unpkg · L129

280// local copy away from the version the MCP registration pins (audit gap G7). L281: execSync('npm install agentdb better-sqlite3 --save-exact --no-audit --no-fund --loglevel=error', { L282: cwd: projectRoot,

High

Runtime Package Install

Package source invokes a package manager install command at runtime.

dist/setup.jsView on unpkg · L280

dist/book-kb.jsView file

27try { L28: const req = createRequire(join(projectRoot, 'package.json')); L29: sqliteUrl = pathToFileURL(req.resolve('better-sqlite3')).href;

Medium

Dynamic Require

Package source references dynamic require/import behavior.

dist/book-kb.jsView on unpkg · L27

dist/upgrade.jsView file

1/** L2: * Skill upgrade — detects installed skills and re-applies from canonical source.

Low

Weak Crypto

Package source references weak cryptographic algorithms.

dist/upgrade.jsView on unpkg · L1

Findings

1 Critical3 High4 Medium5 Low

CriticalPrevious Version Dangerous Deltadist/publish.js

HighChild Processdist/publish.js

HighShelldist/setup.js

HighRuntime Package Installdist/setup.js

MediumDynamic Requiredist/book-kb.js

MediumNetwork

MediumEnvironment Vars

MediumStructural Risk Force Deep Review

LowScripts Present

LowWeak Cryptodist/upgrade.js

LowFilesystem

LowHigh Entropy Strings

LowUrl Strings

Source & flagged code

6 flagged

dist/publish.jsView file

Lines 1-28javascript

1/**

2 * Automated publish — discovers changed packages, bumps patch versions,

3 * builds, and publishes to npm.

4 *

5 * @packageDocumentation

6 */

7import { existsSync, readFileSync, writeFileSync, readdirSync } from 'node:fs';

8import { join } from 'node:path';

9import { execSync } from 'node:child_process';

10/** Bump patch version: 0.3.11 → 0.3.12 */

High

Child Process

Package source references child process execution.

dist/publish.jsView on unpkg · L8

11export function bumpPatch(version) {

12 // Parse the core x.y.z, tolerating a 2-part "x.y" (treated as x.y.0) and a

13 // prerelease/build suffix (e.g. "1.2.3-beta.2"). A prerelease bumps to its

14 // release (x.y.z), which semver-orders ABOVE the prerelease — never below it,

15 // and never silently drops to a lower number (audit #12).

16 const core = (version.split('+')[0] ?? version).split('-');

17 const hasPrerelease = core.length > 1;

18 const nums = (core[0] ?? '').split('.');

19 const major = parseInt(nums[0] ?? '0', 10) || 0;

20 const minor = parseInt(nums[1] ?? '0', 10) || 0;

21 const patch = parseInt(nums[2] ?? '0', 10) || 0;

22 // Releasing a prerelease keeps the same x.y.z (it outranks the prerelease);

23 // a normal release bumps the patch.

24 return hasPrerelease ? `${major}.${minor}.${patch}` : `${major}.${minor}.${patch + 1}`;

25}

26/** Compare two x.y.z(-pre) versions by their core triple: >0 if a>b, <0 if a<b. */

27export function compareVersions(a, b) {

28 const core = (v) => ((v.split('+')[0] ?? v).split('-')[0] ?? '').split('.').map((n) => parseInt(n, 10) || 0);

Critical

Previous Version Dangerous Delta

This package version adds a dangerous source file absent from the previous stored version; route for source-aware review.

dist/publish.jsView on unpkg

dist/setup.jsView file

Lines 109-149javascript

109}

110

111if (event === 'end' || event === 'precompact') {

112 // Option C: harvest learnings + mirror to the vector index, DETACHED (fire-and-forget) so the

113 // hook never waits on transcript parsing or the embedding model. Fires on BOTH SessionEnd and

114 // PreCompact (the reliable trigger for long sessions) — THROTTLED via .dz/.last-consolidate so

115 // rapid back-to-back compactions don't repeatedly pay the model-load cost.

116 let last = 0;

117 try { last = parseInt(String(readFileSync(CONSOLIDATE_MARKER, 'utf-8')).trim(), 10) || 0; } catch { last = 0; }

118 if (Date.now() - last < THROTTLE_MS) {

119 note({ consolidate: 'skipped-throttled' });

120 } else {

121 try { writeFileSync(CONSOLIDATE_MARKER, String(Date.now())); } catch { /* best-effort marker */ }

122 // Uses the globally-installed \`dz\` from PATH. NO shell on posix: spawn's args-array +

123 // shell:true silently word-splits a ROOT containing spaces AND is Node's documented

124 // command-injection hazard (QE P1+P2); a plain spawn searches PATH itself and quotes nothing.

125 // Windows needs a shell for the .cmd shim, so there we pass ONE pre-quoted string (") — quotes

126 // are illegal in Windows paths, so wrapping is sufficient. Failure is detected via BOTH the

127 // error event (posix ENOENT) and a non-zero exit code (shell-mediated "not found").

128 try {

129 const child = process.platform === 'win32'

130 ? spawn('dz consolidate --project "' + ROOT + '"', { detached: true, stdio: 'ignore', shell: true, cwd: ROOT })

131 : spawn('dz', ['consolidate', '--project', ROOT], { detached: true, stdio: 'ignore', cwd: ROOT });

High

Shell

Package source references shell execution.

dist/setup.jsView on unpkg · L129

132 child.on('error', (err) => note({ consolidate: 'skipped', error: String((err && err.message) || err) }));

133 child.on('exit', (code) => { if (code !== null && code !== 0) note({ consolidate: 'skipped', error: 'dz exited ' + code + ' (not on PATH?)' }); });

134 child.unref();

135 } catch (err) {

136 note({ consolidate: 'skipped', error: String((err && err.message) || err) });

137 }

138 }

139}

140`;

141}

142/** Parse the `dz-writer-version` stamp from a deployed writer file ('' or absent → 0). */

143export function writerVersionOf(content) {

144 const m = /^\/\/ dz-writer-version:\s*(\d+)/m.exec(content);

145 return m ? parseInt(m[1] ?? '0', 10) : 0;

146}

147/** Generate Claude Code hooks configuration for self-learning. */

148/**

149 * Commands of a Claude Code hook entry in EITHER shape: the valid matcher-group form

Lines 260-300javascript

260/**

261 * Install `agentdb` + `better-sqlite3` as LOCAL project deps so the session-hook writer can

262 * `import('agentdb')` and get a native SQLite store (better-sqlite3 ships prebuilt binaries — no

263 * build tools — and gives true cross-process WAL concurrency so the hook and the MCP server share

264 * one live store). Best-effort: returns false (caller degrades to jsonl) if install fails.

265 */

266function installAgentdbLocally(projectRoot) {

267 if (isAgentdbInstalledLocally(projectRoot))

268 return true;

269 try {

270 // Anchor npm to THIS project: without a package.json here, npm's prefix walk-up would

271 // install into (and mutate the lockfile of) the nearest ANCESTOR project (audit code#2).

272 const pkgJsonPath = join(projectRoot, 'package.json');

273 if (!existsSync(pkgJsonPath)) {

274 writeFileSync(pkgJsonPath, JSON.stringify({ name: 'dz-harness-project', private: true, version: '0.0.0' }, null, 2) + '\n');

275 }

276 // NB: use the ESM-imported execSync — `require()` is undefined in this ESM module (the

277 // original agentdb hooks failed silently for exactly this reason). stdio:'ignore' (not

278 // 'pipe') avoids execSync's 1 MB maxBuffer aborting the child on npm's verbose output.

279 // --save-exact: agentdb is alpha; a semver range would let a later `npm update` drift the

280 // local copy away from the version the MCP registration pins (audit gap G7).

281 execSync('npm install agentdb better-sqlite3 --save-exact --no-audit --no-fund --loglevel=error', {

282 cwd: projectRoot,

High

Runtime Package Install

Package source invokes a package manager install command at runtime.

dist/setup.jsView on unpkg · L280

283 stdio: 'ignore',

284 timeout: 300000,

285 });

286 return isAgentdbInstalledLocally(projectRoot);

287 }

288 catch {

289 return false;

290 }

291}

292/** Run full environment setup. */

293/** Marker that brackets the dz-harness section in a shared CLAUDE.md/AGENTS.md. */

294const DRIVER_MARKER_START = '';

295const DRIVER_MARKER_END = '';

296/**

297 * Operating instructions for a coding agent that should *drive* the dz CLI

298 * correctly. Inspired by Visa VVAH `--install-agents`: the toolkit ships its own

299 * "how to operate me" doc so agents use the CLI as intended rather than guessing.

300 */

dist/book-kb.jsView file

Lines 7-47javascript

7 *

8 * The semantic (vector) layer lives in the shared agentdb store via {@link indexPatternsToAgentdb};

9 * this is the lexical layer for `dz recall --books`. Native better-sqlite3; best-effort.

10 *

11 * @packageDocumentation

12 */

13import { join, dirname } from 'node:path';

14import { existsSync, mkdirSync } from 'node:fs';

15import { pathToFileURL } from 'node:url';

16import { createRequire } from 'node:module';

17/** Default lexical store path — a `memory/` sibling of the pattern store, never `agentdb.db`. */

18export function bookKbPath(projectRoot) {

19 return join(projectRoot, '.dz', 'memory', 'books.sqlite');

20}

21const SCHEMA = `CREATE VIRTUAL TABLE IF NOT EXISTS book_knowledge USING fts5(

22 book UNINDEXED, ku_id UNINDEXED, corpus_version UNINDEXED, type UNINDEXED,

23 name, problem, content, chapter UNINDEXED, pages UNINDEXED, metadata UNINDEXED

24);`;

25async function openDb(projectRoot, dbPath) {

26 let sqliteUrl;

27 try {

28 const req = createRequire(join(projectRoot, 'package.json'));

29 sqliteUrl = pathToFileURL(req.resolve('better-sqlite3')).href;

Medium

Dynamic Require

Package source references dynamic require/import behavior.

dist/book-kb.jsView on unpkg · L27

30 }

31 catch {

32 return { error: 'better-sqlite3 not installed in project (run: dz setup --memory agentdb)' };

33 }

34 const path = dbPath ?? bookKbPath(projectRoot);

35 mkdirSync(dirname(path), { recursive: true });

36 const { default: Database } = (await import(sqliteUrl));

37 const db = new Database(path);

38 db.pragma('journal_mode = WAL');

39 db.pragma('busy_timeout = 5000');

40 db.exec(SCHEMA);

41 return db;

42}

43/**

44 * Upsert a batch of KUs for a book. Idempotent per (book, kuId): existing rows for the same

45 * kuId are replaced, and — since a re-ingest changes `corpusVersion` — every row for the book

46 * whose corpus_version differs from this batch's is evicted (stale-corpus cleanup), so the KB

47 * mirrors exactly the current ingest. Best-effort: returns an honest error, never throws.

dist/upgrade.jsView file

Lines 1-21javascript

1/**

2 * Skill upgrade — detects installed skills and re-applies from canonical source.

Low

Weak Crypto

Package source references weak cryptographic algorithms.

dist/upgrade.jsView on unpkg · L1

3 *

4 * @packageDocumentation

5 */

6import { existsSync, readdirSync, readFileSync, statSync } from 'node:fs';

7import { join } from 'node:path';

8import { createHash } from 'node:crypto';

9/** Content hash of a file, or undefined if unreadable. */

10function hashFile(path) {

11 try {

12 return createHash('sha1').update(readFileSync(path)).digest('hex');

13 }

14 catch {

15 return undefined;

16 }

17}

18/** Discover installed skills in a target platform directory. */

19export function discoverInstalled(targetDir) {

20 if (!existsSync(targetDir))

21 return [];