Harmonist v1.1.0
Harmonist v1.1.0 — native Windows, 193 agents, hardened fail-closed enforcement.
Highlights
Cross-platform / native Windows
- Pure-Python hook runtime (
hook_runner.py) is the active path on macOS, Linux, WSL and native Windows (no bash required);upgrade.pyrendershooks.jsonwith a Python launcher that exists on the host.convert.py/install.pyport the shell tooling; CI gains a native-Windows job.
Catalogue (186 → 193 agents)
- Model pinned to
claude-opus-4-8across the pool. - +6 authorized-security agents (recon, web-app pentest, vuln triage, exploit dev, red-team, pentest reporting) +
privacy-engineer— on-demand, scope-guarded. - Reusable skills library + schema-validated security/privacy hardening checklist.
Enforcement
- Mechanical concurrent-subagent cap + delegation-context gate.
- New
beforeShellExecutionHITL gate on destructive commands (POSIX + Python parity). - Git pre-commit guard extends review enforcement to terminal commits.
- Zero-dependency repo map (
ast+sqlite) powers repo-scout and an opt-in impact-aware affected-tests gate.
Reliability & security audit (fail-closed)
stopgate never ends a turn silently (phases wrapped, validator timeout-bounded).session.jsonread-modify-write is locked cross-platform (no lost writes / cap bypass).- Webhook:
http(s)-only scheme allowlist (nofile://SSRF), no redirects, retry/backoff. - Memory secret scanner: scans every match, the AWS
.envform, and all free-text fields. verify_integrationnow actually implementspack-manifest.jsondrift detection.- Hardened dangerous-command patterns;
run_regressionkills the whole process tree on timeout and no longer lets a partial run satisfy the gate.
Coherence & docs
- Six hook phases, accurate counts, a11y review gate wired in, install lists aligned with reality.
All green: check_pack_health 18/18, 550+ test assertions, cross-platform E2E. Full details in CHANGELOG.md.
Install: git clone https://github.com/GammaLabTechnologies/harmonist.git then paste integration-prompt.md into Cursor Agent mode.