@fusengine/harness 0.1.26 → 0.1.27

package/dist/adapters/claude/index.mjs

@@ -1,2 +1,2 @@
-import { a as readClaudeInput, i as guard, n as denyResponse, o as toClaudeResponse, r as fileSizeGuard, t as contextResponse } from "../../claude-c2Sskvb6.mjs";
+import { a as readClaudeInput, i as guard, n as denyResponse, o as toClaudeResponse, r as fileSizeGuard, t as contextResponse } from "../../claude-CeNVUGku.mjs";
 export { contextResponse, denyResponse, fileSizeGuard, guard, readClaudeInput, toClaudeResponse };

package/dist/adapters/cline/index.mjs

@@ -1,4 +1,4 @@
-import { t as evaluate } from "../../evaluate-CreJy519.mjs";
+import { t as evaluate } from "../../evaluate-BIK60lOR.mjs";
 import { t as formatPrompt } from "../../types-ernB1Dy3.mjs";
 //#region src/adapters/cline/index.ts
 /**

package/dist/adapters/codex/index.mjs

@@ -1,2 +1,2 @@
-import { a as readClaudeInput, i as guard, n as denyResponse, t as contextResponse } from "../../claude-c2Sskvb6.mjs";
+import { a as readClaudeInput, i as guard, n as denyResponse, t as contextResponse } from "../../claude-CeNVUGku.mjs";
 export { contextResponse, denyResponse, guard, readClaudeInput as readCodexInput };

package/dist/adapters/cursor/index.mjs

@@ -1,4 +1,4 @@
-import { t as evaluate } from "../../evaluate-CreJy519.mjs";
+import { t as evaluate } from "../../evaluate-BIK60lOR.mjs";
 import { t as formatPrompt } from "../../types-ernB1Dy3.mjs";
 //#region src/adapters/cursor/index.ts
 /**

package/dist/adapters/gemini/index.mjs

@@ -1,4 +1,4 @@
-import { t as evaluate } from "../../evaluate-CreJy519.mjs";
+import { t as evaluate } from "../../evaluate-BIK60lOR.mjs";
 import { t as formatPrompt } from "../../types-ernB1Dy3.mjs";
 //#region src/adapters/gemini/index.ts
 /**

package/dist/{claude-c2Sskvb6.mjs → claude-CeNVUGku.mjs}

@@ -1,4 +1,4 @@
-import { t as evaluate } from "./evaluate-CreJy519.mjs";
+import { t as evaluate } from "./evaluate-BIK60lOR.mjs";
 import { t as formatPrompt } from "./types-ernB1Dy3.mjs";
 //#region src/adapters/claude/index.ts
 /**

package/dist/cli/bin.mjs

@@ -1,9 +1,9 @@
 #!/usr/bin/env node
 import { r as resolveTtlSec } from "../ttl-BG55s6HZ.mjs";
 import { t as detectHarness } from "../harness-C8Nxxyn_.mjs";
-import { n as stagedContent, r as stagedFiles, t as checkStaged } from "../run-0LTLAbmo.mjs";
+import { n as stagedContent, r as stagedFiles, t as checkStaged } from "../run-BdcSLer0.mjs";
 import { n as writeInitFile, t as initFor } from "../run-D91N4ul1.mjs";
-import { t as handleHook } from "../handle-CqI_i3Re.mjs";
+import { t as handleHook } from "../handle-BJ2xdeA-.mjs";
 //#region src/cli/bin.ts
 /**
 * harness — CLI for @fusengine/harness.

package/dist/cli/index.mjs

@@ -1,2 +1,2 @@
-import { n as stagedContent, r as stagedFiles, t as checkStaged } from "../run-0LTLAbmo.mjs";
+import { n as stagedContent, r as stagedFiles, t as checkStaged } from "../run-BdcSLer0.mjs";
 export { checkStaged, stagedContent, stagedFiles };

package/dist/{evaluate-CreJy519.mjs → evaluate-BIK60lOR.mjs}

@@ -118,7 +118,7 @@ const CRITICAL_PATTERNS = [
 	/\b(?:curl|wget)\b[^|]*\|\s*(?:sudo\s+)?(?:ba|z|da|k)?sh\b/,
 	/\bchmod\s+(?:-[a-zA-Z]+\s+)*777\s+\//,
 	/\bmkfs(?:\.[a-z0-9]+)?\b/,
-	/\bdd\b[^\n]*\bif=\/dev\/zero\b[^\n]*\bof=\/dev\//,
+	/\bdd\b[^\n]*\bof=\/dev\/(?:disk|sd|hd|nvme|mmcblk|vd)/i,
 	/\bshred\b/,
 	/\bfdisk\b/,
 	/\bdiskutil\s+(?:erase|partitionDisk)/i,
@@ -136,12 +136,17 @@ const ASK_PATTERNS = [
 	/\bdoas\s/,
 	/\bpasswd\b/,
 	/\brm\s/,
-	/\bunlink\s/
+	/\bunlink\s/,
+	/\bdel\s/
 ];
+/** Strip heredoc bodies so their content isn't matched as a command (false positives). */
+function stripHeredoc(cmd) {
+	return cmd.replace(/<<-?\s*['"]?(\w+)['"]?[\s\S]*?\n[ \t]*\1\b/g, " ");
+}
 /** Guards against dangerous Bash commands (critical → block, sensitive → ask). */
 function securityGuard(ctx) {
 	if (ctx.tool !== "Bash" || !ctx.command) return null;
-	const cmd = ctx.command;
+	const cmd = stripHeredoc(ctx.command);
 	for (const re of CRITICAL_PATTERNS) if (re.test(cmd)) return {
 		kind: "block",
 		title: "Dangerous command",

package/dist/{handle-CqI_i3Re.mjs → handle-BJ2xdeA-.mjs}

@@ -1,9 +1,9 @@
 import { r as projectLayout } from "./layout-C0jaaCQC.mjs";
-import { j as detectFramework, n as FAIL_CLOSED, t as evaluate } from "./evaluate-CreJy519.mjs";
-import { c as evaluateApex, i as detectCreationIntent, r as capVerbosity } from "./verbosity-BnGJPq6y.mjs";
+import { j as detectFramework, n as FAIL_CLOSED, t as evaluate } from "./evaluate-BIK60lOR.mjs";
+import { c as evaluateApex, i as detectCreationIntent, r as capVerbosity } from "./verbosity-CXpf3aQQ.mjs";
 import { t as formatPrompt } from "./types-ernB1Dy3.mjs";
 import { a as extractText, r as cacheStore, t as cacheLookup } from "./store-DeIsfMg5.mjs";
-import { t as loadRefs } from "./loader-6TxEFTND.mjs";
+import { t as loadRefs } from "./loader-CyAoJv2W.mjs";
 import { a as recordAgent, c as recordRefRead, l as recordTrivialEdit, n as saveTrack, o as recordBrainstormRequired, r as agentsFresh, s as recordDoc, t as loadTrack, u as trivialCount } from "./store-BnHpq2ZB.mjs";
 import { join } from "node:path";
 import { existsSync, readFileSync } from "node:fs";

package/dist/index.mjs

@@ -5,16 +5,16 @@ import { t as compactJson } from "./compact-json-DK2nX-MK.mjs";
 import { n as projectRoot, r as projectRootOrNull, t as isCodeFile } from "./project-root-ff0_poWU.mjs";
 import { n as detectMode, r as modeFor, t as detectHarness } from "./harness-C8Nxxyn_.mjs";
 import { n as detectProjectType, r as isApexCommand, t as DEV_KEYWORDS } from "./policy-EuVJ_5hS.mjs";
-import { A as evaluateFileSize, C as securityGuard, D as SYSTEM_INSTALL, E as PROJECT_INSTALL, O as matchPatterns, S as CRITICAL_PATTERNS, T as GIT_BLOCKED, _ as CODE_REDIRECT, a as registerGuard, b as protectedPathGuard, c as GO_DECL_RE, d as PY_MODEL_RE, f as SWIFT_PROTO_RE, g as CODE_MUTATORS, h as ASK_WRITERS, i as clearUserGuards, j as detectFramework, k as countLines, l as JAVA_DECL_RE, m as interfaceSeparationGuard, n as FAIL_CLOSED, o as runGuards, p as TS_DECL_RE, r as GUARDS, s as installGuard, t as evaluate, u as PHP_DECL_RE, v as bashWriteGuard, w as GIT_ASK, x as ASK_PATTERNS, y as PROTECTED_FRAGMENTS } from "./evaluate-CreJy519.mjs";
+import { A as evaluateFileSize, C as securityGuard, D as SYSTEM_INSTALL, E as PROJECT_INSTALL, O as matchPatterns, S as CRITICAL_PATTERNS, T as GIT_BLOCKED, _ as CODE_REDIRECT, a as registerGuard, b as protectedPathGuard, c as GO_DECL_RE, d as PY_MODEL_RE, f as SWIFT_PROTO_RE, g as CODE_MUTATORS, h as ASK_WRITERS, i as clearUserGuards, j as detectFramework, k as countLines, l as JAVA_DECL_RE, m as interfaceSeparationGuard, n as FAIL_CLOSED, o as runGuards, p as TS_DECL_RE, r as GUARDS, s as installGuard, t as evaluate, u as PHP_DECL_RE, v as bashWriteGuard, w as GIT_ASK, x as ASK_PATTERNS, y as PROTECTED_FRAGMENTS } from "./evaluate-BIK60lOR.mjs";
 import { i as resolveSessions, n as formatDocSatisfactionStatus, r as isDocConsulted, t as formatDocDeny } from "./doc-helpers-Dd_x1-tZ.mjs";
-import { i as parseFrontmatter, n as scoreReferences, r as globToRe, t as routeReferences } from "./router-BxA7TgnX.mjs";
-import { a as APEX_GATES, c as evaluateApex, i as detectCreationIntent, l as freshnessGate, n as MAX_TOKENS, o as brainstormGate, r as capVerbosity, s as docConsultedGate, t as MAX_EXA_RESULTS, u as solidReadGate } from "./verbosity-BnGJPq6y.mjs";
+import { i as parseFrontmatter, n as scoreReferences, r as globToRe, t as routeReferences } from "./router-D8cVrI-s.mjs";
+import { a as APEX_GATES, c as evaluateApex, i as detectCreationIntent, l as freshnessGate, n as MAX_TOKENS, o as brainstormGate, r as capVerbosity, s as docConsultedGate, t as MAX_EXA_RESULTS, u as solidReadGate } from "./verbosity-CXpf3aQQ.mjs";
 import { t as formatPrompt } from "./types-ernB1Dy3.mjs";
 import { a as nowStamp, c as stateFileFor, i as lessonsFileFor, l as throttleMs, n as readRoots, o as readState, r as registryFile, s as setStateField, t as addRoot, u as ensureMemoryGitignore } from "./memory-BkoEbdec.mjs";
 import { a as queryHash, i as jaccardSimilar, n as summarizeIndex, r as compactMarkdown, t as loadIndex } from "./cache-BzbX-ztL.mjs";
 import { a as extractText, i as mcpCacheKey, n as cachePath, r as cacheStore, t as cacheLookup } from "./store-DeIsfMg5.mjs";
 import { t as incrementTrivialEditCounter } from "./freshness-CezohJHo.mjs";
-import { n as toRefMeta, t as loadRefs } from "./loader-6TxEFTND.mjs";
+import { n as toRefMeta, t as loadRefs } from "./loader-CyAoJv2W.mjs";
 import { a as ensureStateDir, c as stateFilePath, i as apexStateDir, l as acquireLock, n as taskCreate, o as loadState, r as taskStart, s as saveState, t as taskComplete } from "./state-Cs0Y0MG_.mjs";
 import { a as formatPath, c as colors, d as GRADIENT_BLOCKS, f as PROGRESS_BAR_DEFAULTS, i as formatCost, l as progressiveColor, m as TIME_INTERVALS, n as generateProgressBar, o as formatTimeLeft, p as PROGRESS_CHARS, r as formatBasename, s as formatTokens, t as generateGradientBar, u as COLOR_THRESHOLDS } from "./statusline-D87eUNXl.mjs";
 export { APEX_GATES, ASK_PATTERNS, ASK_WRITERS, CODE_MUTATORS, CODE_REDIRECT, COLOR_THRESHOLDS, CRITICAL_PATTERNS, DEFAULT_MAX_LINES, DEFAULT_TTL_SEC, DEV_KEYWORDS, FAIL_CLOSED, GIT_ASK, GIT_BLOCKED, GO_DECL_RE, GRADIENT_BLOCKS, GUARDS, JAVA_DECL_RE, MAX_EXA_RESULTS, MAX_LINES_ENV_KEY, MAX_TOKENS, PHP_DECL_RE, PROGRESS_BAR_DEFAULTS, PROGRESS_CHARS, PROJECT_INSTALL, PROTECTED_FRAGMENTS, PY_MODEL_RE, STATE_GITIGNORE, STATE_ROOT, SWIFT_PROTO_RE, SYSTEM_INSTALL, TIME_INTERVALS, TS_DECL_RE, TTL_ENV_KEY, acquireLock, addRoot, apexStateDir, bashWriteGuard, brainstormGate, cacheLookup, cachePath, cacheStore, capVerbosity, clearUserGuards, colors, compactJson, compactMarkdown, countLines, detectCreationIntent, detectFramework, detectHarness, detectMode, detectProjectType, docConsultedGate, ensureMemoryGitignore, ensureStateDir, evaluate, evaluateApex, evaluateFileSize, extractText, formatBasename, formatCost, formatDocDeny, formatDocSatisfactionStatus, formatPath, formatPrompt, formatTimeLeft, formatTokens, freshnessGate, generateGradientBar, generateProgressBar, globToRe, incrementTrivialEditCounter, installGuard, interfaceSeparationGuard, isApexCommand, isCodeFile, isDocConsulted, jaccardSimilar, lessonsFileFor, loadIndex, loadRefs, loadState, matchPatterns, mcpCacheKey, modeFor, nowStamp, parseEnvInt, parseFrontmatter, progressiveColor, projectLayout, projectRoot, projectRootOrNull, protectedPathGuard, queryHash, readRoots, readState, registerGuard, registryFile, resolveMaxLines, resolveSessions, resolveTtlSec, routeReferences, runGuards, saveState, scoreReferences, securityGuard, setStateField, solidReadGate, splitTarget, stateFileFor, stateFilePath, summarizeIndex, taskComplete, taskCreate, taskStart, throttleMs, toRefMeta, ttlLabel };

package/dist/{loader-6TxEFTND.mjs → loader-CyAoJv2W.mjs}

@@ -1,4 +1,4 @@
-import { i as parseFrontmatter } from "./router-BxA7TgnX.mjs";
+import { i as parseFrontmatter } from "./router-D8cVrI-s.mjs";
 import { delimiter, join } from "node:path";
 import { readFile, readdir } from "node:fs/promises";
 //#region src/refs/loader.ts
@@ -9,6 +9,20 @@ function pick(fm, ...keys) {
 	}
 	return "";
 }
+const SOLID_SLUGS = /* @__PURE__ */ new Set([
+	"single-responsibility",
+	"open-closed",
+	"liskov-substitution",
+	"interface-segregation",
+	"dependency-inversion",
+	"solid-principles"
+]);
+/** Infer a ref's level from its path when the frontmatter omits it (templates/→template, SOLID slug→principle). */
+function inferLevel(filePath) {
+	if (filePath.includes("/templates/")) return "template";
+	const stem = (filePath.split("/").pop() ?? "").replace(/\.md$/, "");
+	return SOLID_SLUGS.has(stem) ? "principle" : "architecture";
+}
 /** Build a {@link RefMeta} from parsed frontmatter, tolerant of kebab/camel keys. */
 function toRefMeta(fm, filePath) {
 	return {
@@ -19,7 +33,7 @@ function toRefMeta(fm, filePath) {
 		related: pick(fm, "related"),
 		appliesTo: pick(fm, "appliesTo", "applies-to", "applies_to"),
 		triggerOnEdit: pick(fm, "triggerOnEdit", "trigger-on-edit", "trigger_on_edit"),
-		level: pick(fm, "level"),
+		level: pick(fm, "level") || inferLevel(filePath),
 		filePath
 	};
 }

package/dist/policy/index.mjs

@@ -1,4 +1,4 @@
 import { n as detectProjectType, r as isApexCommand, t as DEV_KEYWORDS } from "../policy-EuVJ_5hS.mjs";
-import { A as evaluateFileSize, C as securityGuard, D as SYSTEM_INSTALL, E as PROJECT_INSTALL, O as matchPatterns, S as CRITICAL_PATTERNS, T as GIT_BLOCKED, _ as CODE_REDIRECT, a as registerGuard, b as protectedPathGuard, c as GO_DECL_RE, d as PY_MODEL_RE, f as SWIFT_PROTO_RE, g as CODE_MUTATORS, h as ASK_WRITERS, i as clearUserGuards, j as detectFramework, k as countLines, l as JAVA_DECL_RE, m as interfaceSeparationGuard, n as FAIL_CLOSED, o as runGuards, p as TS_DECL_RE, r as GUARDS, s as installGuard, t as evaluate, u as PHP_DECL_RE, v as bashWriteGuard, w as GIT_ASK, x as ASK_PATTERNS, y as PROTECTED_FRAGMENTS } from "../evaluate-CreJy519.mjs";
-import { a as APEX_GATES, c as evaluateApex, i as detectCreationIntent, l as freshnessGate, n as MAX_TOKENS, o as brainstormGate, r as capVerbosity, s as docConsultedGate, t as MAX_EXA_RESULTS, u as solidReadGate } from "../verbosity-BnGJPq6y.mjs";
+import { A as evaluateFileSize, C as securityGuard, D as SYSTEM_INSTALL, E as PROJECT_INSTALL, O as matchPatterns, S as CRITICAL_PATTERNS, T as GIT_BLOCKED, _ as CODE_REDIRECT, a as registerGuard, b as protectedPathGuard, c as GO_DECL_RE, d as PY_MODEL_RE, f as SWIFT_PROTO_RE, g as CODE_MUTATORS, h as ASK_WRITERS, i as clearUserGuards, j as detectFramework, k as countLines, l as JAVA_DECL_RE, m as interfaceSeparationGuard, n as FAIL_CLOSED, o as runGuards, p as TS_DECL_RE, r as GUARDS, s as installGuard, t as evaluate, u as PHP_DECL_RE, v as bashWriteGuard, w as GIT_ASK, x as ASK_PATTERNS, y as PROTECTED_FRAGMENTS } from "../evaluate-BIK60lOR.mjs";
+import { a as APEX_GATES, c as evaluateApex, i as detectCreationIntent, l as freshnessGate, n as MAX_TOKENS, o as brainstormGate, r as capVerbosity, s as docConsultedGate, t as MAX_EXA_RESULTS, u as solidReadGate } from "../verbosity-CXpf3aQQ.mjs";
 export { APEX_GATES, ASK_PATTERNS, ASK_WRITERS, CODE_MUTATORS, CODE_REDIRECT, CRITICAL_PATTERNS, DEV_KEYWORDS, FAIL_CLOSED, GIT_ASK, GIT_BLOCKED, GO_DECL_RE, GUARDS, JAVA_DECL_RE, MAX_EXA_RESULTS, MAX_TOKENS, PHP_DECL_RE, PROJECT_INSTALL, PROTECTED_FRAGMENTS, PY_MODEL_RE, SWIFT_PROTO_RE, SYSTEM_INSTALL, TS_DECL_RE, bashWriteGuard, brainstormGate, capVerbosity, clearUserGuards, countLines, detectCreationIntent, detectFramework, detectProjectType, docConsultedGate, evaluate, evaluateApex, evaluateFileSize, freshnessGate, installGuard, interfaceSeparationGuard, isApexCommand, matchPatterns, protectedPathGuard, registerGuard, runGuards, securityGuard, solidReadGate };

package/dist/refs/index.mjs

@@ -1,4 +1,4 @@
-import { i as parseFrontmatter, n as scoreReferences, r as globToRe, t as routeReferences } from "../router-BxA7TgnX.mjs";
-import { n as toRefMeta, t as loadRefs } from "../loader-6TxEFTND.mjs";
+import { i as parseFrontmatter, n as scoreReferences, r as globToRe, t as routeReferences } from "../router-D8cVrI-s.mjs";
+import { n as toRefMeta, t as loadRefs } from "../loader-CyAoJv2W.mjs";
 import "../refs-la_KkjCS.mjs";
 export { globToRe, loadRefs, parseFrontmatter, routeReferences, scoreReferences, toRefMeta };

package/dist/{router-BxA7TgnX.mjs → router-D8cVrI-s.mjs}

@@ -37,9 +37,12 @@ function scoreReferences(refs, filePath, content) {
 		if (meta.triggerOnEdit) {
 			for (const frag of meta.triggerOnEdit.split(", ")) if (filePath.includes(frag.trim())) score += 5;
 		}
-		if (meta.keywords) for (const kw of meta.keywords.split(", ")) {
-			const k = kw.trim();
-			if (k && (filePath.includes(k) || content.includes(k))) score += 1;
+		if (meta.keywords) {
+			const hay = `${filePath} ${content}`.toLowerCase();
+			for (const kw of meta.keywords.split(", ")) {
+				const k = kw.trim().toLowerCase();
+				if (k && hay.includes(k)) score += 1;
+			}
 		}
 		if (score > 0) scored.push({
 			meta,

package/dist/{run-0LTLAbmo.mjs → run-BdcSLer0.mjs}

@@ -1,5 +1,5 @@
 import { t as isCodeFile } from "./project-root-ff0_poWU.mjs";
-import { t as evaluate } from "./evaluate-CreJy519.mjs";
+import { t as evaluate } from "./evaluate-BIK60lOR.mjs";
 import { t as formatPrompt } from "./types-ernB1Dy3.mjs";
 import { execSync } from "node:child_process";
 //#region src/cli/run.ts

package/dist/runtime/index.mjs

@@ -1,5 +1,5 @@
 import { r as projectLayout } from "../layout-C0jaaCQC.mjs";
-import { a as normalizeEvent, c as mcpPostStore, d as DEFAULT_WINDOW_MS, f as REQUIRED_AGENTS, h as activityFor, i as trackFile, l as mcpPreIntercept, m as gate, n as respond, o as MCP_TTL_MS, p as TRIVIAL_BUDGET, r as recordActivity, s as isMcpTool, t as handleHook, u as queryOf } from "../handle-CqI_i3Re.mjs";
+import { a as normalizeEvent, c as mcpPostStore, d as DEFAULT_WINDOW_MS, f as REQUIRED_AGENTS, h as activityFor, i as trackFile, l as mcpPreIntercept, m as gate, n as respond, o as MCP_TTL_MS, p as TRIVIAL_BUDGET, r as recordActivity, s as isMcpTool, t as handleHook, u as queryOf } from "../handle-BJ2xdeA-.mjs";
 //#region src/runtime/storage.ts
 /**
 * The project's single state dir (`<root>/.harness`) — neutral + harness-agnostic,

package/dist/{verbosity-BnGJPq6y.mjs → verbosity-CXpf3aQQ.mjs}

@@ -1,5 +1,5 @@
 import { r as isDocConsulted, t as formatDocDeny } from "./doc-helpers-Dd_x1-tZ.mjs";
-import { t as routeReferences } from "./router-BxA7TgnX.mjs";
+import { t as routeReferences } from "./router-D8cVrI-s.mjs";
 //#region src/policy/apex.ts
 /** Gate: Context7 + Exa must have been consulted this session. */
 const docConsultedGate = (ctx) => isDocConsulted(ctx.authorizations, ctx.sessionId) ? null : {

package/package.json

@@ -1,6 +1,6 @@
 {
   "name": "@fusengine/harness",
-  "version": "0.1.26",
+  "version": "0.1.27",
   "description": "Harness-agnostic toolkit for AI coding agents: runtime harness detection (Claude Code, Codex, Cursor, Cline, Gemini, Aider...), pure policy core (env config, project/framework detection, SOLID/file-size limits, APEX freshness, guard patterns, portable prompts), cache, project memory, ref routing, state/locks, statusline, per-harness adapters (Claude/Cursor/Cline/Gemini) and a cli-mode harness-check binary. Bun-native, with a built dist for Node + bundlers.",
   "type": "module",
   "module": "src/index.ts",