@fusengine/harness 0.1.0

package/dist/evaluate-CsYyUucy.mjs

@@ -0,0 +1,152 @@
+import { i as splitTarget, r as resolveMaxLines } from "./limits-CHn8AIL1.mjs";
+import { t as isCodeFile } from "./project-root-C4ks_q1G.mjs";
+//#region src/policy/detect-framework.ts
+/**
+* Detect the framework from a file path extension + content patterns.
+* Aligned with the fusengine require-solid-read detection (distinct from
+* {@link detectProjectType}, which scans config files on disk).
+*/
+function detectFramework(filePath, content) {
+	if (/\.(tsx?|jsx?|vue|svelte)$/.test(filePath) || /from ['"]react|useState|className=/.test(content)) {
+		if (/(page|layout|loading|error|route)\.(ts|tsx)$/.test(filePath) || /use client|use server/.test(content)) return "nextjs";
+		return "react";
+	}
+	if (/\.swift$/.test(filePath)) return "swift";
+	if (/\.php$/.test(filePath)) return "laravel";
+	if (/\.java$/.test(filePath)) return "java";
+	if (/\.go$/.test(filePath)) return "go";
+	if (/\.rb$/.test(filePath)) return "ruby";
+	if (/\.rs$/.test(filePath)) return "rust";
+	if (/\.css$/.test(filePath) || /@tailwind|@apply/.test(content)) return "tailwind";
+	return "generic";
+}
+//#endregion
+//#region src/policy/file-size.ts
+/** Count lines in file content (empty string = 0). */
+function countLines(content) {
+	return content === "" ? 0 : content.split("\n").length;
+}
+/**
+* Evaluate a file's line count against the SOLID limit.
+* @param lines - the file's line count
+* @param max - the limit (defaults to `resolveMaxLines()`)
+*/
+function evaluateFileSize(lines, max = resolveMaxLines()) {
+	if (lines <= max) return {
+		ok: true,
+		lines,
+		max,
+		message: null
+	};
+	return {
+		ok: false,
+		lines,
+		max,
+		message: `File has ${lines} lines (max: ${max}). Split into modules under ${splitTarget(max)} lines (Single Responsibility).`
+	};
+}
+//#endregion
+//#region src/policy/patterns.ts
+/**
+* Guard pattern data, ported verbatim from the fusengine git/install guards.
+* Note (faithful): `git push.*--force` also matches `--force-with-lease` —
+* preserved from the source guard.
+*/
+/** Destructive git operations to block outright. */
+const GIT_BLOCKED = [
+	/git push.*--force/,
+	/git push.*-f/,
+	/git reset.*--hard/,
+	/git clean.*-fd/,
+	/git branch.*-D/,
+	/git rebase.*--force/
+];
+/** Git operations that warrant a confirmation prompt. */
+const GIT_ASK = [
+	/git push/,
+	/git checkout/,
+	/git reset/,
+	/git rebase/,
+	/git merge/,
+	/git stash/,
+	/git clean/,
+	/git rm/,
+	/git mv/,
+	/git restore/,
+	/git revert/,
+	/git cherry-pick/
+];
+/** System-level package installs (need confirmation). */
+const SYSTEM_INSTALL = [
+	/brew install/,
+	/brew upgrade/,
+	/brew cask/,
+	/apt install/,
+	/apt-get install/
+];
+/** Project-level package installs. */
+const PROJECT_INSTALL = [
+	/npm install/,
+	/npm i /,
+	/yarn add/,
+	/pnpm add/,
+	/pip install/,
+	/pip3 install/,
+	/composer require/,
+	/bun add/,
+	/bun install/,
+	/cargo install/,
+	/go install/,
+	/gem install/,
+	/pipx install/
+];
+/** True when `cmd` matches any pattern in `patterns`. */
+function matchPatterns(cmd, patterns) {
+	return patterns.some((re) => re.test(cmd));
+}
+//#endregion
+//#region src/policy/evaluate.ts
+/**
+* Evaluate a single tool-use against the bundled policies, returning a pure
+* decision plus a portable {@link Prompt}. Adapters translate the prompt into
+* their harness's native response (Claude `permissionDecision`, etc.).
+*/
+function evaluate(ctx) {
+	if (ctx.command && matchPatterns(ctx.command, GIT_BLOCKED)) {
+		const reason = `Destructive git command: ${ctx.command}`;
+		return {
+			decision: "deny",
+			message: reason,
+			prompt: {
+				kind: "block",
+				title: "Destructive git command",
+				reason,
+				actions: ["Use a non-destructive alternative (e.g. --force-with-lease; avoid --hard / -D)"]
+			}
+		};
+	}
+	if (ctx.filePath && isCodeFile(ctx.filePath) && ctx.content !== void 0) {
+		const verdict = evaluateFileSize(countLines(ctx.content), ctx.maxLines);
+		if (!verdict.ok) return {
+			decision: "deny",
+			message: verdict.message,
+			prompt: {
+				kind: "block",
+				title: "SOLID file-size limit",
+				reason: verdict.message ?? "",
+				actions: [`Split into modules under ${verdict.max} lines (Single Responsibility)`, "Then re-run the write"]
+			},
+			meta: {
+				framework: detectFramework(ctx.filePath, ctx.content),
+				lines: verdict.lines,
+				max: verdict.max
+			}
+		};
+	}
+	return {
+		decision: "allow",
+		message: null
+	};
+}
+//#endregion
+export { SYSTEM_INSTALL as a, evaluateFileSize as c, PROJECT_INSTALL as i, detectFramework as l, GIT_ASK as n, matchPatterns as o, GIT_BLOCKED as r, countLines as s, evaluate as t };

package/dist/freshness/index.d.mts

@@ -0,0 +1,14 @@
+import { a as isDocConsulted, i as formatDocSatisfactionStatus, n as DocSatisfactionStatus, o as resolveSessions, r as formatDocDeny, t as AuthEntry } from "../doc-helpers-CG1nuf-c.mjs";
+
+//#region src/freshness/trivial-edit-counter.d.ts
+/**
+* Increment a session's trivial-edit counter, evicting timestamps older than
+* `windowMs`. Decoupled + injectable `now` for testability.
+* @param filePath - session state file path
+* @param windowMs - sliding window in ms
+* @param now - current epoch ms (defaults to `Date.now()`)
+* @returns number of trivial edits within the window (including this one)
+*/
+declare function incrementTrivialEditCounter(filePath: string, windowMs: number, now?: number): Promise<number>;
+//#endregion
+export { AuthEntry, DocSatisfactionStatus, formatDocDeny, formatDocSatisfactionStatus, incrementTrivialEditCounter, isDocConsulted, resolveSessions };

package/dist/freshness/index.mjs

@@ -0,0 +1,64 @@
+import { n as readJsonFile, r as writeJsonFile, t as ensureDir } from "../json-io-RH82El2J.mjs";
+import { dirname } from "node:path";
+//#region src/freshness/doc-helpers.ts
+/** Resolve the sessions array from an auth entry (legacy fallback). */
+function resolveSessions(auth) {
+	if (!auth) return [];
+	return auth.sessions ?? (auth.session ? [auth.session] : []);
+}
+function sessionAuthsFor(authorizations, sessionId) {
+	if (!authorizations) return [];
+	return Object.values(authorizations).filter((a) => a.doc_sessions?.includes(sessionId));
+}
+function evaluateDoc(auths) {
+	const sources = auths.flatMap((a) => a.sources ?? [a.source ?? ""]);
+	const readPaths = auths.flatMap((a) => a.read_paths ?? []);
+	const liveC7 = sources.some((s) => /context7/.test(s));
+	const liveExa = sources.some((s) => /exa/.test(s));
+	const cacheC7 = readPaths.some((p) => /\/context\/mcp\/context7-/.test(p));
+	const cacheExa = readPaths.some((p) => /\/context\/mcp\/(exa-search|exa-code-context)-/.test(p));
+	return {
+		context7: liveC7 || cacheC7,
+		exa: liveExa || cacheExa,
+		viaCache: !liveC7 && cacheC7 || !liveExa && cacheExa
+	};
+}
+/** True when BOTH Context7 and Exa were satisfied for the session. */
+function isDocConsulted(authorizations, sessionId) {
+	const s = evaluateDoc(sessionAuthsFor(authorizations, sessionId));
+	return s.context7 && s.exa;
+}
+/** Report how each doc source was satisfied for a session. */
+function formatDocSatisfactionStatus(authorizations, sessionId) {
+	return evaluateDoc(sessionAuthsFor(authorizations, sessionId));
+}
+/** Deny message when online documentation has not been consulted. */
+function formatDocDeny(framework) {
+	return [
+		`APEX: Online documentation not consulted for ${framework}!`,
+		"Use BOTH: 1) mcp__context7__query-docs AND 2) mcp__exa__web_search_exa.",
+		"This check is once per session — after consulting both, Write/Edit will be allowed."
+	].join("\n");
+}
+//#endregion
+//#region src/freshness/trivial-edit-counter.ts
+/**
+* Increment a session's trivial-edit counter, evicting timestamps older than
+* `windowMs`. Decoupled + injectable `now` for testability.
+* @param filePath - session state file path
+* @param windowMs - sliding window in ms
+* @param now - current epoch ms (defaults to `Date.now()`)
+* @returns number of trivial edits within the window (including this one)
+*/
+async function incrementTrivialEditCounter(filePath, windowMs, now = Date.now()) {
+	await ensureDir(dirname(filePath));
+	const state = await readJsonFile(filePath) ?? {};
+	const cutoff = now - windowMs;
+	const edits = (state.trivial_edits ?? []).filter((ts) => ts > cutoff);
+	edits.push(now);
+	state.trivial_edits = edits;
+	await writeJsonFile(filePath, state);
+	return edits.length;
+}
+//#endregion
+export { formatDocDeny, formatDocSatisfactionStatus, incrementTrivialEditCounter, isDocConsulted, resolveSessions };

package/dist/index.d.mts

@@ -0,0 +1,13 @@
+import { n as PromptKind, r as formatPrompt, t as Prompt } from "./types-D56jSgD9.mjs";
+import { IndexSummary, compactMarkdown, extractText, jaccardSimilar, loadIndex, queryHash, summarizeIndex } from "./cache/index.mjs";
+import { DEFAULT_MAX_LINES, DEFAULT_TTL_SEC, MAX_LINES_ENV_KEY, TTL_ENV_KEY, parseEnvInt, resolveMaxLines, resolveTtlSec, splitTarget, ttlLabel } from "./config/index.mjs";
+import { HarnessId, HarnessInfo, HarnessMode, HarnessVia, detectHarness, detectMode, modeFor } from "./detect/index.mjs";
+import { a as isDocConsulted, i as formatDocSatisfactionStatus, n as DocSatisfactionStatus, o as resolveSessions, r as formatDocDeny, t as AuthEntry } from "./doc-helpers-CG1nuf-c.mjs";
+import { incrementTrivialEditCounter } from "./freshness/index.mjs";
+import { compactJson, isCodeFile, projectRoot, projectRootOrNull } from "./util/index.mjs";
+import { DEV_KEYWORDS, FileSizeVerdict, GIT_ASK, GIT_BLOCKED, PROJECT_INSTALL, PolicyContext, PolicyResult, ProjectType, SYSTEM_INSTALL, countLines, detectFramework, detectProjectType, evaluate, evaluateFileSize, isApexCommand, matchPatterns } from "./policy/index.mjs";
+import { ReminderState, addRoot, ensureMemoryGitignore, nowStamp, readRoots, readState, registryFile, setStateField, stateFileFor, throttleMs } from "./memory/index.mjs";
+import { RefMeta, RouteResult, ScoredRef, globToRe, parseFrontmatter, routeReferences, scoreReferences } from "./refs/index.mjs";
+import { ApexState, ApexTask, ApexTaskFile, acquireLock, apexStateDir, ensureStateDir, loadState, saveState, stateFilePath, taskComplete, taskCreate, taskStart } from "./state/index.mjs";
+import { COLOR_THRESHOLDS, ColorFn, GRADIENT_BLOCKS, PROGRESS_BAR_DEFAULTS, PROGRESS_CHARS, Palette, ProgressBarOptions, TIME_INTERVALS, colors, formatBasename, formatCost, formatPath, formatTimeLeft, formatTokens, generateGradientBar, generateProgressBar, progressiveColor } from "./statusline/index.mjs";
+export { ApexState, ApexTask, ApexTaskFile, AuthEntry, COLOR_THRESHOLDS, ColorFn, DEFAULT_MAX_LINES, DEFAULT_TTL_SEC, DEV_KEYWORDS, DocSatisfactionStatus, FileSizeVerdict, GIT_ASK, GIT_BLOCKED, GRADIENT_BLOCKS, HarnessId, HarnessInfo, HarnessMode, HarnessVia, IndexSummary, MAX_LINES_ENV_KEY, PROGRESS_BAR_DEFAULTS, PROGRESS_CHARS, PROJECT_INSTALL, Palette, PolicyContext, PolicyResult, ProgressBarOptions, ProjectType, Prompt, PromptKind, RefMeta, ReminderState, RouteResult, SYSTEM_INSTALL, ScoredRef, TIME_INTERVALS, TTL_ENV_KEY, acquireLock, addRoot, apexStateDir, colors, compactJson, compactMarkdown, countLines, detectFramework, detectHarness, detectMode, detectProjectType, ensureMemoryGitignore, ensureStateDir, evaluate, evaluateFileSize, extractText, formatBasename, formatCost, formatDocDeny, formatDocSatisfactionStatus, formatPath, formatPrompt, formatTimeLeft, formatTokens, generateGradientBar, generateProgressBar, globToRe, incrementTrivialEditCounter, isApexCommand, isCodeFile, isDocConsulted, jaccardSimilar, loadIndex, loadState, matchPatterns, modeFor, nowStamp, parseEnvInt, parseFrontmatter, progressiveColor, projectRoot, projectRootOrNull, queryHash, readRoots, readState, registryFile, resolveMaxLines, resolveSessions, resolveTtlSec, routeReferences, saveState, scoreReferences, setStateField, splitTarget, stateFileFor, stateFilePath, summarizeIndex, taskComplete, taskCreate, taskStart, throttleMs, ttlLabel };

package/dist/index.mjs

@@ -0,0 +1,17 @@
+import { a as parseEnvInt, i as splitTarget, n as MAX_LINES_ENV_KEY, r as resolveMaxLines, t as DEFAULT_MAX_LINES } from "./limits-CHn8AIL1.mjs";
+import { DEFAULT_TTL_SEC, TTL_ENV_KEY, resolveTtlSec, ttlLabel } from "./config/index.mjs";
+import { t as compactJson } from "./compact-json-DK2nX-MK.mjs";
+import { n as projectRoot, r as projectRootOrNull, t as isCodeFile } from "./project-root-C4ks_q1G.mjs";
+import "./util/index.mjs";
+import { detectHarness, detectMode, modeFor } from "./detect/index.mjs";
+import { a as SYSTEM_INSTALL, c as evaluateFileSize, i as PROJECT_INSTALL, l as detectFramework, n as GIT_ASK, o as matchPatterns, r as GIT_BLOCKED, s as countLines, t as evaluate } from "./evaluate-CsYyUucy.mjs";
+import { DEV_KEYWORDS, detectProjectType, isApexCommand } from "./policy/index.mjs";
+import { t as formatPrompt } from "./types-ernB1Dy3.mjs";
+import "./prompt/index.mjs";
+import { addRoot, ensureMemoryGitignore, nowStamp, readRoots, readState, registryFile, setStateField, stateFileFor, throttleMs } from "./memory/index.mjs";
+import { compactMarkdown, extractText, jaccardSimilar, loadIndex, queryHash, summarizeIndex } from "./cache/index.mjs";
+import { formatDocDeny, formatDocSatisfactionStatus, incrementTrivialEditCounter, isDocConsulted, resolveSessions } from "./freshness/index.mjs";
+import { globToRe, parseFrontmatter, routeReferences, scoreReferences } from "./refs/index.mjs";
+import { acquireLock, apexStateDir, ensureStateDir, loadState, saveState, stateFilePath, taskComplete, taskCreate, taskStart } from "./state/index.mjs";
+import { COLOR_THRESHOLDS, GRADIENT_BLOCKS, PROGRESS_BAR_DEFAULTS, PROGRESS_CHARS, TIME_INTERVALS, colors, formatBasename, formatCost, formatPath, formatTimeLeft, formatTokens, generateGradientBar, generateProgressBar, progressiveColor } from "./statusline/index.mjs";
+export { COLOR_THRESHOLDS, DEFAULT_MAX_LINES, DEFAULT_TTL_SEC, DEV_KEYWORDS, GIT_ASK, GIT_BLOCKED, GRADIENT_BLOCKS, MAX_LINES_ENV_KEY, PROGRESS_BAR_DEFAULTS, PROGRESS_CHARS, PROJECT_INSTALL, SYSTEM_INSTALL, TIME_INTERVALS, TTL_ENV_KEY, acquireLock, addRoot, apexStateDir, colors, compactJson, compactMarkdown, countLines, detectFramework, detectHarness, detectMode, detectProjectType, ensureMemoryGitignore, ensureStateDir, evaluate, evaluateFileSize, extractText, formatBasename, formatCost, formatDocDeny, formatDocSatisfactionStatus, formatPath, formatPrompt, formatTimeLeft, formatTokens, generateGradientBar, generateProgressBar, globToRe, incrementTrivialEditCounter, isApexCommand, isCodeFile, isDocConsulted, jaccardSimilar, loadIndex, loadState, matchPatterns, modeFor, nowStamp, parseEnvInt, parseFrontmatter, progressiveColor, projectRoot, projectRootOrNull, queryHash, readRoots, readState, registryFile, resolveMaxLines, resolveSessions, resolveTtlSec, routeReferences, saveState, scoreReferences, setStateField, splitTarget, stateFileFor, stateFilePath, summarizeIndex, taskComplete, taskCreate, taskStart, throttleMs, ttlLabel };

package/dist/json-io-RH82El2J.mjs

@@ -0,0 +1,40 @@
+import { t as compactJson } from "./compact-json-DK2nX-MK.mjs";
+import { chmodSync, existsSync, mkdirSync, readFileSync, renameSync, unlinkSync, writeFileSync } from "node:fs";
+import { dirname } from "node:path";
+import { randomUUID } from "node:crypto";
+import { mkdir } from "node:fs/promises";
+//#region src/util/json-io.ts
+/** Atomically write `data` to `path` (temp + rename, 0o600). Cross-FS safe on macOS/Linux. */
+function atomicWrite(path, data) {
+	mkdirSync(dirname(path), { recursive: true });
+	const tmp = `${path}.${randomUUID()}.tmp`;
+	try {
+		writeFileSync(tmp, data, { encoding: "utf8" });
+		chmodSync(tmp, 384);
+		renameSync(tmp, path);
+	} catch (err) {
+		try {
+			unlinkSync(tmp);
+		} catch {}
+		throw err;
+	}
+}
+/** Ensure a directory exists. */
+async function ensureDir(dir) {
+	await mkdir(dir, { recursive: true });
+}
+/** Read & JSON-parse a file; null on missing/corrupt. */
+async function readJsonFile(path) {
+	try {
+		if (!existsSync(path)) return null;
+		return JSON.parse(readFileSync(path, "utf8"));
+	} catch {
+		return null;
+	}
+}
+/** Atomically write JSON (compact form when `compact`). */
+async function writeJsonFile(path, data, compact = false) {
+	atomicWrite(path, compact ? compactJson(data) : JSON.stringify(data, null, 2));
+}
+//#endregion
+export { readJsonFile as n, writeJsonFile as r, ensureDir as t };

package/dist/limits-CHn8AIL1.mjs

@@ -0,0 +1,31 @@
+//#region src/config/env.ts
+/**
+* Robust integer-from-env parser.
+* undefined / empty / whitespace / NaN / float / <= 0 all fall back to `fallback`.
+* `Number("")` is 0, so the empty guard is required before `Number()`.
+*/
+function parseEnvInt(raw, fallback) {
+	if (!raw?.trim()) return fallback;
+	const n = Number(raw.trim());
+	return Number.isInteger(n) && n > 0 ? n : fallback;
+}
+//#endregion
+//#region src/config/limits.ts
+/** Default SOLID max lines per file. */
+const DEFAULT_MAX_LINES = 100;
+/** Default env var name carrying the max-lines override. */
+const MAX_LINES_ENV_KEY = "FUSE_SOLID_MAX_LINES";
+/**
+* Resolve the SOLID max-lines limit from an env map.
+* @param env - environment map (defaults to `process.env`)
+* @param key - env var name (defaults to `FUSE_SOLID_MAX_LINES`)
+*/
+function resolveMaxLines(env = process.env, key = MAX_LINES_ENV_KEY) {
+	return parseEnvInt(env[key], 100);
+}
+/** Advisory module-split headroom = `maxLines - 10` (never below 1). */
+function splitTarget(maxLines) {
+	return Math.max(maxLines - 10, 1);
+}
+//#endregion
+export { parseEnvInt as a, splitTarget as i, MAX_LINES_ENV_KEY as n, resolveMaxLines as r, DEFAULT_MAX_LINES as t };

package/dist/memory/index.d.mts

@@ -0,0 +1,30 @@
+//#region src/memory/state.d.ts
+/** Per-project reminder throttle state, stored at `<root>/MEMORY/state.json`. */
+interface ReminderState {
+  lastRemindedAt: number;
+  lastCodeEditAt: number;
+}
+/** Absolute path of the per-project throttle state file. */
+declare function stateFileFor(root: string): string;
+/** Read both throttle timestamps; missing/corrupt fields default to 0. */
+declare function readState(file: string): ReminderState;
+/** Persist one field without clobbering the other (read-modify-write). */
+declare function setStateField(file: string, key: keyof ReminderState, value: number): void;
+/** Local wall-clock timestamp for a lesson bullet: `YYYY-MM-DD HH:MM`. */
+declare function nowStamp(): string;
+/** Throttle window (ms) from `FUSE_LESSONS_THROTTLE_MIN` (default 5 min). */
+declare function throttleMs(env?: Record<string, string | undefined>): number;
+//#endregion
+//#region src/memory/registry.d.ts
+/** Absolute path of the global roots registry, or null when home is unusable. */
+declare function registryFile(home?: string | undefined): string | null;
+/** Read the registered project roots (deduplicated string entries only). */
+declare function readRoots(home?: string): string[];
+/** Register a project root once (deduplicated, read-modify-write, non-throwing). */
+declare function addRoot(root: string, home?: string): void;
+//#endregion
+//#region src/memory/gitignore.d.ts
+/** Ensure `<memoryDir>/.gitignore` ignores the machine-local `state.json`. */
+declare function ensureMemoryGitignore(memoryDir: string): void;
+//#endregion
+export { ReminderState, addRoot, ensureMemoryGitignore, nowStamp, readRoots, readState, registryFile, setStateField, stateFileFor, throttleMs };

package/dist/memory/index.mjs

@@ -0,0 +1,94 @@
+import { existsSync, mkdirSync, readFileSync, writeFileSync } from "node:fs";
+import { dirname } from "node:path";
+//#region src/memory/gitignore.ts
+/** Ensure `<memoryDir>/.gitignore` ignores the machine-local `state.json`. */
+function ensureMemoryGitignore(memoryDir) {
+	const file = `${memoryDir}/.gitignore`;
+	try {
+		const existing = existsSync(file) ? readFileSync(file, "utf8") : "";
+		if (/^state\.json$/m.test(existing)) return;
+		writeFileSync(file, existing.trim() ? `${existing.trimEnd()}\nstate.json\n` : "state.json\n");
+	} catch {}
+}
+//#endregion
+//#region src/memory/state.ts
+/** Absolute path of the per-project throttle state file. */
+function stateFileFor(root) {
+	return `${root}/MEMORY/state.json`;
+}
+function num(v) {
+	return typeof v === "number" && Number.isFinite(v) ? v : 0;
+}
+/** Read both throttle timestamps; missing/corrupt fields default to 0. */
+function readState(file) {
+	try {
+		const parsed = JSON.parse(readFileSync(file, "utf8"));
+		return {
+			lastRemindedAt: num(parsed?.lastRemindedAt),
+			lastCodeEditAt: num(parsed?.lastCodeEditAt)
+		};
+	} catch {
+		return {
+			lastRemindedAt: 0,
+			lastCodeEditAt: 0
+		};
+	}
+}
+/** Persist one field without clobbering the other (read-modify-write). */
+function setStateField(file, key, value) {
+	const next = {
+		...readState(file),
+		[key]: value
+	};
+	const dir = dirname(file);
+	mkdirSync(dir, { recursive: true });
+	ensureMemoryGitignore(dir);
+	writeFileSync(file, JSON.stringify(next));
+}
+/** Local wall-clock timestamp for a lesson bullet: `YYYY-MM-DD HH:MM`. */
+function nowStamp() {
+	const d = /* @__PURE__ */ new Date();
+	const p = (n) => String(n).padStart(2, "0");
+	return `${d.getFullYear()}-${p(d.getMonth() + 1)}-${p(d.getDate())} ${p(d.getHours())}:${p(d.getMinutes())}`;
+}
+/** Throttle window (ms) from `FUSE_LESSONS_THROTTLE_MIN` (default 5 min). */
+function throttleMs(env = process.env) {
+	const raw = env.FUSE_LESSONS_THROTTLE_MIN?.trim();
+	const min = raw ? Number(raw) : 5;
+	return (Number.isFinite(min) ? Math.max(0, min) : 5) * 6e4;
+}
+//#endregion
+//#region src/memory/registry.ts
+/** Registry path relative to the home dir. */
+const SUBPATH = ".claude/fusengine-cache/lessons/roots.json";
+/** Absolute path of the global roots registry, or null when home is unusable. */
+function registryFile(home = process.env.HOME) {
+	const h = home?.trim();
+	if (!h || !h.startsWith("/")) return null;
+	return `${h}/${SUBPATH}`;
+}
+/** Read the registered project roots (deduplicated string entries only). */
+function readRoots(home) {
+	const file = registryFile(home);
+	if (!file) return [];
+	try {
+		const parsed = JSON.parse(readFileSync(file, "utf8"));
+		return Array.isArray(parsed) ? parsed.filter((e) => typeof e === "string") : [];
+	} catch {
+		return [];
+	}
+}
+/** Register a project root once (deduplicated, read-modify-write, non-throwing). */
+function addRoot(root, home) {
+	const file = registryFile(home);
+	if (!file) return;
+	try {
+		const roots = new Set(readRoots(home));
+		if (roots.has(root)) return;
+		roots.add(root);
+		mkdirSync(dirname(file), { recursive: true });
+		writeFileSync(file, JSON.stringify([...roots]));
+	} catch {}
+}
+//#endregion
+export { addRoot, ensureMemoryGitignore, nowStamp, readRoots, readState, registryFile, setStateField, stateFileFor, throttleMs };

package/dist/policy/index.d.mts

@@ -0,0 +1,80 @@
+import { t as Prompt } from "../types-D56jSgD9.mjs";
+
+//#region src/policy/detect-project.d.ts
+/** Project types detected from filesystem indicators. */
+type ProjectType = "nextjs" | "nuxt" | "angular" | "svelte" | "vue" | "react" | "tailwind" | "laravel" | "rails" | "django" | "python" | "go" | "rust" | "swift" | "java" | "scala" | "elixir" | "ruby" | "generic";
+/** Keywords that signal a development task (APEX trigger). */
+declare const DEV_KEYWORDS: RegExp;
+/** True when the prompt invokes the /apex command. */
+declare function isApexCommand(prompt: string): boolean;
+/** Detect the project type by scanning config files in `dir`. */
+declare function detectProjectType(dir: string): ProjectType;
+//#endregion
+//#region src/policy/detect-framework.d.ts
+/**
+* Detect the framework from a file path extension + content patterns.
+* Aligned with the fusengine require-solid-read detection (distinct from
+* {@link detectProjectType}, which scans config files on disk).
+*/
+declare function detectFramework(filePath: string, content: string): string;
+//#endregion
+//#region src/policy/file-size.d.ts
+/** Verdict from {@link evaluateFileSize}. */
+interface FileSizeVerdict {
+  ok: boolean;
+  lines: number;
+  max: number;
+  message: string | null;
+}
+/** Count lines in file content (empty string = 0). */
+declare function countLines(content: string): number;
+/**
+* Evaluate a file's line count against the SOLID limit.
+* @param lines - the file's line count
+* @param max - the limit (defaults to `resolveMaxLines()`)
+*/
+declare function evaluateFileSize(lines: number, max?: number): FileSizeVerdict;
+//#endregion
+//#region src/policy/patterns.d.ts
+/**
+* Guard pattern data, ported verbatim from the fusengine git/install guards.
+* Note (faithful): `git push.*--force` also matches `--force-with-lease` —
+* preserved from the source guard.
+*/
+/** Destructive git operations to block outright. */
+declare const GIT_BLOCKED: ReadonlyArray<RegExp>;
+/** Git operations that warrant a confirmation prompt. */
+declare const GIT_ASK: ReadonlyArray<RegExp>;
+/** System-level package installs (need confirmation). */
+declare const SYSTEM_INSTALL: ReadonlyArray<RegExp>;
+/** Project-level package installs. */
+declare const PROJECT_INSTALL: ReadonlyArray<RegExp>;
+/** True when `cmd` matches any pattern in `patterns`. */
+declare function matchPatterns(cmd: string, patterns: ReadonlyArray<RegExp>): boolean;
+//#endregion
+//#region src/policy/evaluate.d.ts
+/** Harness-agnostic input to {@link evaluate}. */
+interface PolicyContext {
+  /** Tool name (e.g. "Write", "Edit", "Bash"). */
+  tool: string;
+  filePath?: string;
+  content?: string;
+  command?: string;
+  /** Optional override for the SOLID max-lines limit. */
+  maxLines?: number;
+}
+/** Harness-agnostic policy decision (+ a portable prompt for adapters to render). */
+interface PolicyResult {
+  decision: "allow" | "deny" | "warn";
+  message: string | null;
+  prompt?: Prompt;
+  meta?: Record<string, unknown>;
+}
+/**
+* Evaluate a single tool-use against the bundled policies, returning a pure
+* decision plus a portable {@link Prompt}. Adapters translate the prompt into
+* their harness's native response (Claude `permissionDecision`, etc.).
+*/
+declare function evaluate(ctx: PolicyContext): PolicyResult;
+//#endregion
+export { DEV_KEYWORDS, FileSizeVerdict, GIT_ASK, GIT_BLOCKED, PROJECT_INSTALL, PolicyContext, PolicyResult, ProjectType, SYSTEM_INSTALL, countLines, detectFramework, detectProjectType, evaluate, evaluateFileSize, isApexCommand, matchPatterns };

package/dist/policy/index.mjs

@@ -0,0 +1,34 @@
+import { a as SYSTEM_INSTALL, c as evaluateFileSize, i as PROJECT_INSTALL, l as detectFramework, n as GIT_ASK, o as matchPatterns, r as GIT_BLOCKED, s as countLines, t as evaluate } from "../evaluate-CsYyUucy.mjs";
+import { existsSync } from "node:fs";
+import { join } from "node:path";
+//#region src/policy/detect-project.ts
+/** Keywords that signal a development task (APEX trigger). */
+const DEV_KEYWORDS = /\b(implement|create|build|fix|add|refactor|develop|feature|bug|update|modify|change|write|code)\b/i;
+/** True when the prompt invokes the /apex command. */
+function isApexCommand(prompt) {
+	return /(?:^|\s)\/apex|\/fuse-ai-pilot:apex/i.test(prompt);
+}
+/** Detect the project type by scanning config files in `dir`. */
+function detectProjectType(dir) {
+	const has = (f) => existsSync(join(dir, f));
+	if (has("next.config.js") || has("next.config.ts") || has("next.config.mjs")) return "nextjs";
+	if (has("nuxt.config.ts") || has("nuxt.config.js")) return "nuxt";
+	if (has("angular.json")) return "angular";
+	if (has("svelte.config.js") || has("svelte.config.ts")) return "svelte";
+	if (has("vite.config.ts") && has("src/App.vue")) return "vue";
+	if (has("vite.config.ts") || has("vite.config.js")) return "react";
+	if (has("tailwind.config.js") || has("tailwind.config.ts")) return "tailwind";
+	if (has("composer.json") && has("artisan")) return "laravel";
+	if (has("Gemfile") && has("config/routes.rb")) return "rails";
+	if (has("requirements.txt") || has("pyproject.toml") || has("setup.py")) return has("manage.py") ? "django" : "python";
+	if (has("go.mod")) return "go";
+	if (has("Cargo.toml")) return "rust";
+	if (has("Package.swift")) return "swift";
+	if (has("pom.xml") || has("build.gradle") || has("build.gradle.kts")) return "java";
+	if (has("build.sbt")) return "scala";
+	if (has("mix.exs")) return "elixir";
+	if (has("Gemfile")) return "ruby";
+	return "generic";
+}
+//#endregion
+export { DEV_KEYWORDS, GIT_ASK, GIT_BLOCKED, PROJECT_INSTALL, SYSTEM_INSTALL, countLines, detectFramework, detectProjectType, evaluate, evaluateFileSize, isApexCommand, matchPatterns };

package/dist/project-root-C4ks_q1G.mjs

@@ -0,0 +1,32 @@
+import { existsSync } from "node:fs";
+import { dirname, resolve } from "node:path";
+//#region src/util/project-root.ts
+/** Source-code file extensions worth tracking as "code was written". */
+const CODE_EXT = /\.(ts|tsx|js|jsx|py|php|swift|go|rs|rb|java|vue|svelte|astro|css|kt|dart|cpp|c)$/;
+/** Generated/vendored directories that never count as code. */
+const SKIP_DIRS = /(node_modules|vendor|dist|build|\.next|DerivedData|\.git)/;
+/** True for a source-code file outside generated/vendored directories. */
+function isCodeFile(p) {
+	return CODE_EXT.test(p) && !SKIP_DIRS.test(p);
+}
+function walkUpFor(dir, marker) {
+	let current = resolve(dir);
+	while (current !== "/") {
+		if (existsSync(`${current}/${marker}`)) return current;
+		current = dirname(current);
+	}
+	return null;
+}
+/**
+* Resolve the project root, preferring the repo boundary (`.git`) over a
+* nested `package.json` — avoids false roots in monorepos. Null if none found.
+*/
+function projectRootOrNull(dir) {
+	return walkUpFor(dir, ".git") ?? walkUpFor(dir, "package.json");
+}
+/** Like {@link projectRootOrNull} but falls back to `process.cwd()`. */
+function projectRoot(dir) {
+	return projectRootOrNull(dir) ?? process.cwd();
+}
+//#endregion
+export { projectRoot as n, projectRootOrNull as r, isCodeFile as t };

package/dist/prompt/index.d.mts

@@ -0,0 +1,2 @@
+import { n as PromptKind, r as formatPrompt, t as Prompt } from "../types-D56jSgD9.mjs";
+export { Prompt, PromptKind, formatPrompt };

package/dist/prompt/index.mjs

@@ -0,0 +1,2 @@
+import { t as formatPrompt } from "../types-ernB1Dy3.mjs";
+export { formatPrompt };