@fusengine/harness 0.1.0 → 0.1.2

package/dist/adapters/claude/index.d.mts

@@ -1,36 +1,2 @@
-import { t as Prompt } from "../../types-D56jSgD9.mjs";
-
-//#region src/adapters/claude/index.d.ts
-/** Subset of the Claude Code hook stdin payload we consume. */
-interface ClaudeHookInput {
-  hook_event_name?: string;
-  tool_name?: string;
-  tool_input?: {
-    file_path?: string;
-    content?: string;
-    new_string?: string;
-    command?: string;
-  };
-  cwd?: string;
-}
-/** Read & parse the Claude hook payload from stdin (empty object on bad input). */
-declare function readClaudeInput(): Promise<ClaudeHookInput>;
-/** A `deny` hook response for a given event. */
-declare function denyResponse(event: string, reason: string): string;
-/** An `additionalContext` injection response. */
-declare function contextResponse(event: string, text: string): string;
-/**
-* Render a portable {@link Prompt} as a Claude Code hook response:
-* `block` → `permissionDecision: deny`, `ask` → `permissionDecision: ask`
-* (interactive confirm), `inform` → `additionalContext`.
-*/
-declare function toClaudeResponse(event: string, prompt: Prompt): string;
-/**
-* Run the bundled policy over a Claude payload and return the native response
-* string (deny/ask/additionalContext), or null to allow.
-*/
-declare function guard(input: ClaudeHookInput): string | null;
-/** @deprecated use {@link guard}. Kept for back-compat. */
-declare const fileSizeGuard: typeof guard;
-//#endregion
+import { a as guard, i as fileSizeGuard, n as contextResponse, o as readClaudeInput, r as denyResponse, s as toClaudeResponse, t as ClaudeHookInput } from "../../index-FrWgmkbP.mjs";
 export { ClaudeHookInput, contextResponse, denyResponse, fileSizeGuard, guard, readClaudeInput, toClaudeResponse };

package/dist/adapters/claude/index.mjs

@@ -1,66 +1,2 @@
-import { t as evaluate } from "../../evaluate-CsYyUucy.mjs";
-import { t as formatPrompt } from "../../types-ernB1Dy3.mjs";
-//#region src/adapters/claude/index.ts
-/**
-* Claude Code adapter — the thin Claude-only shim over the portable policy core.
-* Reads the hook stdin payload and emits hookSpecificOutput responses.
-*/
-/** Read & parse the Claude hook payload from stdin (empty object on bad input). */
-async function readClaudeInput() {
-	const text = await Bun.stdin.text();
-	if (!text.trim()) return {};
-	try {
-		const parsed = JSON.parse(text);
-		return typeof parsed === "object" && parsed !== null ? parsed : {};
-	} catch {
-		return {};
-	}
-}
-/** A `deny` hook response for a given event. */
-function denyResponse(event, reason) {
-	return JSON.stringify({ hookSpecificOutput: {
-		hookEventName: event,
-		permissionDecision: "deny",
-		permissionDecisionReason: reason
-	} });
-}
-/** An `additionalContext` injection response. */
-function contextResponse(event, text) {
-	return JSON.stringify({ hookSpecificOutput: {
-		hookEventName: event,
-		additionalContext: text
-	} });
-}
-/**
-* Render a portable {@link Prompt} as a Claude Code hook response:
-* `block` → `permissionDecision: deny`, `ask` → `permissionDecision: ask`
-* (interactive confirm), `inform` → `additionalContext`.
-*/
-function toClaudeResponse(event, prompt) {
-	const reason = formatPrompt(prompt);
-	if (prompt.kind === "block") return denyResponse(event, reason);
-	if (prompt.kind === "ask") return JSON.stringify({ hookSpecificOutput: {
-		hookEventName: event,
-		permissionDecision: "ask",
-		permissionDecisionReason: reason
-	} });
-	return contextResponse(event, reason);
-}
-/**
-* Run the bundled policy over a Claude payload and return the native response
-* string (deny/ask/additionalContext), or null to allow.
-*/
-function guard(input) {
-	const result = evaluate({
-		tool: input.tool_name ?? "Write",
-		filePath: input.tool_input?.file_path,
-		content: input.tool_input?.content ?? input.tool_input?.new_string,
-		command: input.tool_input?.command
-	});
-	if (result.decision === "allow" || !result.prompt) return null;
-	return toClaudeResponse(input.hook_event_name ?? "PreToolUse", result.prompt);
-}
-/** @deprecated use {@link guard}. Kept for back-compat. */
-const fileSizeGuard = guard;
-//#endregion
+import { a as readClaudeInput, i as guard, n as denyResponse, o as toClaudeResponse, r as fileSizeGuard, t as contextResponse } from "../../claude-DbzjbxmO.mjs";
 export { contextResponse, denyResponse, fileSizeGuard, guard, readClaudeInput, toClaudeResponse };

package/dist/adapters/cline/index.d.mts

@@ -0,0 +1,23 @@
+//#region src/adapters/cline/index.d.ts
+/** `PreToolUse` stdin payload (subset). */
+interface ClineHookInput {
+  hookName?: string;
+  preToolUse?: {
+    toolName?: string;
+    parameters?: {
+      path?: string;
+      content?: string;
+      command?: string;
+    };
+  };
+}
+/** Hook stdout response. */
+interface ClineResponse {
+  cancel?: boolean;
+  errorMessage?: string;
+  contextModification?: string;
+}
+/** Evaluate a tool use; cancel on a hard block, otherwise inject context. */
+declare function preToolUse(input: ClineHookInput): ClineResponse;
+//#endregion
+export { ClineHookInput, ClineResponse, preToolUse };

package/dist/adapters/cline/index.mjs

@@ -0,0 +1,2 @@
+import { t as preToolUse } from "../../cline-BxslHtBG.mjs";
+export { preToolUse };

package/dist/adapters/codex/index.d.mts

@@ -0,0 +1,2 @@
+import { a as guard, n as contextResponse, o as readClaudeInput, r as denyResponse, t as ClaudeHookInput } from "../../index-FrWgmkbP.mjs";
+export { type ClaudeHookInput as CodexHookInput, contextResponse, denyResponse, guard, readClaudeInput as readCodexInput };

package/dist/adapters/codex/index.mjs

@@ -0,0 +1,2 @@
+import { a as readClaudeInput, i as guard, n as denyResponse, t as contextResponse } from "../../claude-DbzjbxmO.mjs";
+export { contextResponse, denyResponse, guard, readClaudeInput as readCodexInput };

package/dist/adapters/cursor/index.d.mts

@@ -0,0 +1,31 @@
+//#region src/adapters/cursor/index.d.ts
+/** `beforeShellExecution` stdin payload (subset). */
+interface CursorShellPayload {
+  command?: string;
+  cwd?: string;
+  workspace_roots?: string[];
+  hook_event_name?: string;
+}
+/** `afterFileEdit` stdin payload (subset). */
+interface CursorEditPayload {
+  file_path?: string;
+  edits?: {
+    old_string: string;
+    new_string: string;
+  }[];
+}
+/** `beforeShellExecution` stdout response. */
+interface CursorResponse {
+  permission: "allow" | "deny" | "ask";
+  continue?: boolean;
+  userMessage?: string;
+  agentMessage?: string;
+}
+/** Guard a shell command (git/install policies). */
+declare function beforeShellExecution(payload: CursorShellPayload): CursorResponse;
+/** Observe a file edit (Cursor cannot block here). Returns the verdict for logging. */
+declare function afterFileEdit(payload: CursorEditPayload): {
+  violation: string | null;
+};
+//#endregion
+export { CursorEditPayload, CursorResponse, CursorShellPayload, afterFileEdit, beforeShellExecution };

package/dist/adapters/cursor/index.mjs

@@ -0,0 +1,2 @@
+import { n as beforeShellExecution, t as afterFileEdit } from "../../cursor-Bh7eh9y_.mjs";
+export { afterFileEdit, beforeShellExecution };

package/dist/adapters/gemini/index.d.mts

@@ -0,0 +1,23 @@
+//#region src/adapters/gemini/index.d.ts
+/** `BeforeTool` stdin payload (subset). */
+interface GeminiHookInput {
+  tool_name?: string;
+  tool_input?: {
+    command?: string;
+    path?: string;
+    content?: string;
+  };
+  hook_event_name?: string;
+}
+/** Hook stdout response. */
+interface GeminiResponse {
+  decision?: "allow" | "deny";
+  reason?: string;
+  hookSpecificOutput?: {
+    additionalContext?: string;
+  };
+}
+/** Evaluate a tool use; deny on a hard block, otherwise inject context. */
+declare function beforeTool(input: GeminiHookInput): GeminiResponse;
+//#endregion
+export { GeminiHookInput, GeminiResponse, beforeTool };

package/dist/adapters/gemini/index.mjs

@@ -0,0 +1,2 @@
+import { t as beforeTool } from "../../gemini-SrK_fFAr.mjs";
+export { beforeTool };

package/dist/cache/index.d.mts

@@ -1,30 +1,2 @@
-//#region src/cache/compact.d.ts
-/** Strip HTML entities + boilerplate, normalize blank lines, truncate to ~5KB. */
-declare function compactMarkdown(content: string): string;
-/** 8-char MD5 of `${toolName}::${query}`. */
-declare function queryHash(toolName: string, query: string): string;
-/** Bag-of-words Jaccard similarity strictly greater than `threshold`. */
-declare function jaccardSimilar(a: string, b: string, threshold?: number): boolean;
-//#endregion
-//#region src/cache/io.d.ts
-/** Read a JSON array from `path`; [] on missing/corrupt/non-array. */
-declare function loadIndex(path: string): unknown[];
-/** Summary of a cache index. */
-interface IndexSummary {
-  total: number;
-  byTool: Record<string, number>;
-  oldestTs: string | null;
-  newestTs: string | null;
-}
-/** Summarize an index of `{ tool?, ts? }` entries. */
-declare function summarizeIndex(index: unknown[]): IndexSummary;
-//#endregion
-//#region src/cache/mcp-response.d.ts
-/**
-* Extract usable markdown from an MCP `tool_response`: a string, a list of
-* content blocks (non-text blocks skipped), or any JSON structure (fallback).
-* Recurses up to depth 5 to guard against pathological/cyclic structures.
-*/
-declare function extractText(resp: unknown, depth?: number): string;
-//#endregion
+import { a as compactMarkdown, i as summarizeIndex, n as IndexSummary, o as jaccardSimilar, r as loadIndex, s as queryHash, t as extractText } from "../index-B3Ve_bBu.mjs";
 export { IndexSummary, compactMarkdown, extractText, jaccardSimilar, loadIndex, queryHash, summarizeIndex };

package/dist/cache/index.mjs

@@ -1,110 +1,2 @@
-import { existsSync, readFileSync } from "node:fs";
-import { createHash } from "node:crypto";
-//#region src/cache/compact.ts
-const HTML_ENTITIES = {
-	"&": "&",
-	"&lt;": "<",
-	"&gt;": ">",
-	"&quot;": "\"",
-	"&#x27;": "'",
-	"&#39;": "'",
-	"&nbsp;": " ",
-	"&apos;": "'"
-};
-const BOILERPLATE = [
-	/^.*cookie.*(accept|consent|banner).*$/gim,
-	/^.*was this (helpful|page helpful|article helpful).*$/gim,
-	/^.*©\s*\d{4}.*all rights reserved.*$/gim,
-	/^\s*(home|about|contact|privacy|terms)\s*\|\s*.*$/gim,
-	/^.*subscribe to (our )?newsletter.*$/gim,
-	/^.*follow us on (twitter|facebook|linkedin).*$/gim
-];
-const MAX_BYTES = 5 * 1024;
-function decodeEntities(text) {
-	let out = text;
-	for (const [ent, ch] of Object.entries(HTML_ENTITIES)) out = out.split(ent).join(ch);
-	out = out.replace(/&#x([0-9a-fA-F]+);/g, (_m, h) => String.fromCodePoint(parseInt(h, 16)));
-	out = out.replace(/&#(\d+);/g, (_m, d) => String.fromCodePoint(parseInt(d, 10)));
-	return out;
-}
-/** Strip HTML entities + boilerplate, normalize blank lines, truncate to ~5KB. */
-function compactMarkdown(content) {
-	let text = decodeEntities(content);
-	for (const re of BOILERPLATE) text = text.replace(re, "");
-	text = text.replace(/\n{3,}/g, "\n\n").trim();
-	const enc = new TextEncoder().encode(text);
-	if (enc.length > MAX_BYTES) {
-		const truncated = new TextDecoder().decode(enc.slice(0, MAX_BYTES));
-		text = `${truncated}\n\n[... truncated, ${text.slice(truncated.length).split("\n").length - 1} lines]`;
-	}
-	return text;
-}
-/** 8-char MD5 of `${toolName}::${query}`. */
-function queryHash(toolName, query) {
-	return createHash("md5").update(`${toolName}::${query}`).digest("hex").slice(0, 8);
-}
-/** Bag-of-words Jaccard similarity strictly greater than `threshold`. */
-function jaccardSimilar(a, b, threshold = .8) {
-	const ta = new Set(a.toLowerCase().split(/\s+/).filter(Boolean));
-	const tb = new Set(b.toLowerCase().split(/\s+/).filter(Boolean));
-	if (ta.size === 0 || tb.size === 0) return false;
-	let inter = 0;
-	for (const t of ta) if (tb.has(t)) inter++;
-	const union = ta.size + tb.size - inter;
-	return inter / union > threshold;
-}
-//#endregion
-//#region src/cache/io.ts
-/** Read a JSON array from `path`; [] on missing/corrupt/non-array. */
-function loadIndex(path) {
-	try {
-		if (!existsSync(path)) return [];
-		const data = JSON.parse(readFileSync(path, "utf8"));
-		return Array.isArray(data) ? data : [];
-	} catch {
-		return [];
-	}
-}
-/** Summarize an index of `{ tool?, ts? }` entries. */
-function summarizeIndex(index) {
-	const byTool = {};
-	const timestamps = [];
-	for (const entry of index) {
-		if (typeof entry !== "object" || entry === null) continue;
-		const e = entry;
-		if (typeof e.tool === "string") byTool[e.tool] = (byTool[e.tool] ?? 0) + 1;
-		if (typeof e.ts === "string") timestamps.push(e.ts);
-	}
-	return {
-		total: index.length,
-		byTool,
-		oldestTs: timestamps.length ? timestamps.reduce((a, b) => a < b ? a : b) : null,
-		newestTs: timestamps.length ? timestamps.reduce((a, b) => a > b ? a : b) : null
-	};
-}
-//#endregion
-//#region src/cache/mcp-response.ts
-const MAX_DEPTH = 5;
-/**
-* Extract usable markdown from an MCP `tool_response`: a string, a list of
-* content blocks (non-text blocks skipped), or any JSON structure (fallback).
-* Recurses up to depth 5 to guard against pathological/cyclic structures.
-*/
-function extractText(resp, depth = 0) {
-	if (depth >= MAX_DEPTH) return "";
-	if (typeof resp === "string") return resp;
-	if (Array.isArray(resp)) {
-		const parts = resp.filter((b) => typeof b === "object" && b !== null).filter((b) => b.type === "text").map((b) => b.text ?? "");
-		if (parts.length) return parts.join("\n\n");
-		const joined = resp.filter((b) => Array.isArray(b) || typeof b === "object" && b !== null).map((b) => extractText(b, depth + 1)).filter(Boolean).join("\n\n");
-		if (joined) return joined;
-	}
-	if (!resp) return "";
-	try {
-		return JSON.stringify(resp);
-	} catch {
-		return "";
-	}
-}
-//#endregion
+import { a as jaccardSimilar, i as compactMarkdown, n as loadIndex, o as queryHash, r as summarizeIndex, t as extractText } from "../cache-DbPSJ9bC.mjs";
 export { compactMarkdown, extractText, jaccardSimilar, loadIndex, queryHash, summarizeIndex };

package/dist/cache-DbPSJ9bC.mjs

@@ -0,0 +1,110 @@
+import { existsSync, readFileSync } from "node:fs";
+import { createHash } from "node:crypto";
+//#region src/cache/compact.ts
+const HTML_ENTITIES = {
+	"&": "&",
+	"&lt;": "<",
+	"&gt;": ">",
+	"&quot;": "\"",
+	"&#x27;": "'",
+	"&#39;": "'",
+	"&nbsp;": " ",
+	"&apos;": "'"
+};
+const BOILERPLATE = [
+	/^.*cookie.*(accept|consent|banner).*$/gim,
+	/^.*was this (helpful|page helpful|article helpful).*$/gim,
+	/^.*©\s*\d{4}.*all rights reserved.*$/gim,
+	/^\s*(home|about|contact|privacy|terms)\s*\|\s*.*$/gim,
+	/^.*subscribe to (our )?newsletter.*$/gim,
+	/^.*follow us on (twitter|facebook|linkedin).*$/gim
+];
+const MAX_BYTES = 5 * 1024;
+function decodeEntities(text) {
+	let out = text;
+	for (const [ent, ch] of Object.entries(HTML_ENTITIES)) out = out.split(ent).join(ch);
+	out = out.replace(/&#x([0-9a-fA-F]+);/g, (_m, h) => String.fromCodePoint(parseInt(h, 16)));
+	out = out.replace(/&#(\d+);/g, (_m, d) => String.fromCodePoint(parseInt(d, 10)));
+	return out;
+}
+/** Strip HTML entities + boilerplate, normalize blank lines, truncate to ~5KB. */
+function compactMarkdown(content) {
+	let text = decodeEntities(content);
+	for (const re of BOILERPLATE) text = text.replace(re, "");
+	text = text.replace(/\n{3,}/g, "\n\n").trim();
+	const enc = new TextEncoder().encode(text);
+	if (enc.length > MAX_BYTES) {
+		const truncated = new TextDecoder().decode(enc.slice(0, MAX_BYTES));
+		text = `${truncated}\n\n[... truncated, ${text.slice(truncated.length).split("\n").length - 1} lines]`;
+	}
+	return text;
+}
+/** 8-char MD5 of `${toolName}::${query}`. */
+function queryHash(toolName, query) {
+	return createHash("md5").update(`${toolName}::${query}`).digest("hex").slice(0, 8);
+}
+/** Bag-of-words Jaccard similarity strictly greater than `threshold`. */
+function jaccardSimilar(a, b, threshold = .8) {
+	const ta = new Set(a.toLowerCase().split(/\s+/).filter(Boolean));
+	const tb = new Set(b.toLowerCase().split(/\s+/).filter(Boolean));
+	if (ta.size === 0 || tb.size === 0) return false;
+	let inter = 0;
+	for (const t of ta) if (tb.has(t)) inter++;
+	const union = ta.size + tb.size - inter;
+	return inter / union > threshold;
+}
+//#endregion
+//#region src/cache/io.ts
+/** Read a JSON array from `path`; [] on missing/corrupt/non-array. */
+function loadIndex(path) {
+	try {
+		if (!existsSync(path)) return [];
+		const data = JSON.parse(readFileSync(path, "utf8"));
+		return Array.isArray(data) ? data : [];
+	} catch {
+		return [];
+	}
+}
+/** Summarize an index of `{ tool?, ts? }` entries. */
+function summarizeIndex(index) {
+	const byTool = {};
+	const timestamps = [];
+	for (const entry of index) {
+		if (typeof entry !== "object" || entry === null) continue;
+		const e = entry;
+		if (typeof e.tool === "string") byTool[e.tool] = (byTool[e.tool] ?? 0) + 1;
+		if (typeof e.ts === "string") timestamps.push(e.ts);
+	}
+	return {
+		total: index.length,
+		byTool,
+		oldestTs: timestamps.length ? timestamps.reduce((a, b) => a < b ? a : b) : null,
+		newestTs: timestamps.length ? timestamps.reduce((a, b) => a > b ? a : b) : null
+	};
+}
+//#endregion
+//#region src/cache/mcp-response.ts
+const MAX_DEPTH = 5;
+/**
+* Extract usable markdown from an MCP `tool_response`: a string, a list of
+* content blocks (non-text blocks skipped), or any JSON structure (fallback).
+* Recurses up to depth 5 to guard against pathological/cyclic structures.
+*/
+function extractText(resp, depth = 0) {
+	if (depth >= MAX_DEPTH) return "";
+	if (typeof resp === "string") return resp;
+	if (Array.isArray(resp)) {
+		const parts = resp.filter((b) => typeof b === "object" && b !== null).filter((b) => b.type === "text").map((b) => b.text ?? "");
+		if (parts.length) return parts.join("\n\n");
+		const joined = resp.filter((b) => Array.isArray(b) || typeof b === "object" && b !== null).map((b) => extractText(b, depth + 1)).filter(Boolean).join("\n\n");
+		if (joined) return joined;
+	}
+	if (!resp) return "";
+	try {
+		return JSON.stringify(resp);
+	} catch {
+		return "";
+	}
+}
+//#endregion
+export { jaccardSimilar as a, compactMarkdown as i, loadIndex as n, queryHash as o, summarizeIndex as r, extractText as t };

package/dist/claude-DbzjbxmO.mjs

@@ -0,0 +1,66 @@
+import { t as evaluate } from "./evaluate-CsYyUucy.mjs";
+import { t as formatPrompt } from "./types-ernB1Dy3.mjs";
+//#region src/adapters/claude/index.ts
+/**
+* Claude Code adapter — the thin Claude-only shim over the portable policy core.
+* Reads the hook stdin payload and emits hookSpecificOutput responses.
+*/
+/** Read & parse the Claude hook payload from stdin (empty object on bad input). */
+async function readClaudeInput() {
+	const text = await Bun.stdin.text();
+	if (!text.trim()) return {};
+	try {
+		const parsed = JSON.parse(text);
+		return typeof parsed === "object" && parsed !== null ? parsed : {};
+	} catch {
+		return {};
+	}
+}
+/** A `deny` hook response for a given event. */
+function denyResponse(event, reason) {
+	return JSON.stringify({ hookSpecificOutput: {
+		hookEventName: event,
+		permissionDecision: "deny",
+		permissionDecisionReason: reason
+	} });
+}
+/** An `additionalContext` injection response. */
+function contextResponse(event, text) {
+	return JSON.stringify({ hookSpecificOutput: {
+		hookEventName: event,
+		additionalContext: text
+	} });
+}
+/**
+* Render a portable {@link Prompt} as a Claude Code hook response:
+* `block` → `permissionDecision: deny`, `ask` → `permissionDecision: ask`
+* (interactive confirm), `inform` → `additionalContext`.
+*/
+function toClaudeResponse(event, prompt) {
+	const reason = formatPrompt(prompt);
+	if (prompt.kind === "block") return denyResponse(event, reason);
+	if (prompt.kind === "ask") return JSON.stringify({ hookSpecificOutput: {
+		hookEventName: event,
+		permissionDecision: "ask",
+		permissionDecisionReason: reason
+	} });
+	return contextResponse(event, reason);
+}
+/**
+* Run the bundled policy over a Claude payload and return the native response
+* string (deny/ask/additionalContext), or null to allow.
+*/
+function guard(input) {
+	const result = evaluate({
+		tool: input.tool_name ?? "Write",
+		filePath: input.tool_input?.file_path,
+		content: input.tool_input?.content ?? input.tool_input?.new_string,
+		command: input.tool_input?.command
+	});
+	if (result.decision === "allow" || !result.prompt) return null;
+	return toClaudeResponse(input.hook_event_name ?? "PreToolUse", result.prompt);
+}
+/** @deprecated use {@link guard}. Kept for back-compat. */
+const fileSizeGuard = guard;
+//#endregion
+export { readClaudeInput as a, guard as i, denyResponse as n, toClaudeResponse as o, fileSizeGuard as r, contextResponse as t };

package/dist/cli/bin.d.mts

@@ -0,0 +1 @@
+export { };

package/dist/cli/bin.mjs

@@ -0,0 +1,92 @@
+#!/usr/bin/env node
+import { t as detectHarness } from "../harness-C8Nxxyn_.mjs";
+import { n as stagedContent, r as stagedFiles, t as checkStaged } from "../run-h_2LNEA8.mjs";
+import { n as writeInitFile, t as initFor } from "../run-Cc98348q.mjs";
+import { i as guard } from "../claude-DbzjbxmO.mjs";
+import { n as beforeShellExecution, t as afterFileEdit } from "../cursor-Bh7eh9y_.mjs";
+import { t as preToolUse } from "../cline-BxslHtBG.mjs";
+import { t as beforeTool } from "../gemini-SrK_fFAr.mjs";
+//#region src/cli/hook.ts
+/**
+* Route a harness hook payload to its adapter and produce the native response.
+* The deny/ask decision lives in `stdout` (the harness parses it); exit stays 0.
+*/
+function dispatchHook(id, payload) {
+	switch (id) {
+		case "claude-code":
+		case "codex": return {
+			stdout: guard(payload) ?? "",
+			exit: 0
+		};
+		case "cursor":
+			if (payload.hook_event_name === "afterFileEdit") {
+				afterFileEdit(payload);
+				return {
+					stdout: "",
+					exit: 0
+				};
+			}
+			return {
+				stdout: JSON.stringify(beforeShellExecution(payload)),
+				exit: 0
+			};
+		case "cline": return {
+			stdout: JSON.stringify(preToolUse(payload)),
+			exit: 0
+		};
+		case "gemini-cli": return {
+			stdout: JSON.stringify(beforeTool(payload)),
+			exit: 0
+		};
+		default: return {
+			stdout: "",
+			exit: 0
+		};
+	}
+}
+//#endregion
+//#region src/cli/bin.ts
+/**
+* harness — CLI for @fusengine/harness.
+*   harness check          cli-mode: check staged files (pre-commit), exit non-zero on a violation
+*   harness init [id]      write the wiring file for a harness (defaults to the detected one)
+*   harness hook <id>      runtime: read a hook payload on stdin, route to the adapter, print the response
+*/
+async function readStdin() {
+	const chunks = [];
+	for await (const c of process.stdin) chunks.push(c);
+	const text = Buffer.concat(chunks).toString("utf8").trim();
+	if (!text) return {};
+	try {
+		const parsed = JSON.parse(text);
+		return typeof parsed === "object" && parsed !== null ? parsed : {};
+	} catch {
+		return {};
+	}
+}
+const cmd = process.argv[2];
+if (cmd === "hook") {
+	const outcome = dispatchHook(process.argv[3] ?? detectHarness().id, await readStdin());
+	if (outcome.stdout) process.stdout.write(outcome.stdout);
+	process.exit(outcome.exit);
+} else if (cmd === "init") {
+	const id = process.argv[3] ?? detectHarness().id;
+	const file = initFor(id);
+	if (!file) {
+		process.stderr.write(`harness: no hook integration for "${id}" — use \`harness check\` in a pre-commit step\n`);
+		process.exit(1);
+	}
+	process.stdout.write(`harness: wired ${id} -> ${writeInitFile(process.cwd(), file)}\n`);
+	process.exit(0);
+} else {
+	const files = stagedFiles();
+	if (files.length === 0) process.exit(0);
+	const violations = checkStaged(files, stagedContent);
+	if (violations.length > 0) {
+		process.stderr.write(`harness check: policy violations\n\n${violations.join("\n\n")}\n`);
+		process.exit(1);
+	}
+	process.exit(0);
+}
+//#endregion
+export {};

package/dist/cli/index.d.mts

@@ -0,0 +1,12 @@
+//#region src/cli/run.d.ts
+/** Staged files (Added/Copied/Modified/Renamed). Uses `node:child_process` (Bun shell can hang on `git show`). */
+declare function stagedFiles(): string[];
+/** Read a file's staged (index) content — not the working-tree version. */
+declare function stagedContent(path: string): string;
+/**
+* Evaluate staged code files against the policy core; return violation blocks.
+* `read` is injected (the real impl is {@link stagedContent}) so this is pure + testable.
+*/
+declare function checkStaged(files: string[], read: (path: string) => string): string[];
+//#endregion
+export { checkStaged, stagedContent, stagedFiles };

package/dist/cli/index.mjs

@@ -0,0 +1,2 @@
+import { n as stagedContent, r as stagedFiles, t as checkStaged } from "../run-h_2LNEA8.mjs";
+export { checkStaged, stagedContent, stagedFiles };

package/dist/cline-BxslHtBG.mjs

@@ -0,0 +1,25 @@
+import { t as evaluate } from "./evaluate-CsYyUucy.mjs";
+import { t as formatPrompt } from "./types-ernB1Dy3.mjs";
+//#region src/adapters/cline/index.ts
+/**
+* Cline adapter (hook-mode). Schema per docs.cline.bot / .clinerules/hooks (2026):
+* `PreToolUse` blocks via `{ cancel: true }`; it cannot modify tool parameters.
+*/
+/** Evaluate a tool use; cancel on a hard block, otherwise inject context. */
+function preToolUse(input) {
+	const t = input.preToolUse;
+	const r = evaluate({
+		tool: t?.toolName ?? "write_to_file",
+		filePath: t?.parameters?.path,
+		content: t?.parameters?.content,
+		command: t?.parameters?.command
+	});
+	if (r.decision === "allow" || !r.prompt) return {};
+	const msg = formatPrompt(r.prompt);
+	return r.prompt.kind === "block" ? {
+		cancel: true,
+		errorMessage: msg
+	} : { contextModification: msg };
+}
+//#endregion
+export { preToolUse as t };